Re: [EMAIL PROTECTED] SuExec issues

2007-02-14 Thread Kövesdán Gábor
Joshua Slive schrieb: On 2/7/07, Kövesdán Gábor [EMAIL PROTECTED] wrote: Joshua Slive schrieb: On 2/7/07, Kövesdán Gábor [EMAIL PROTECTED] wrote: However, if I set modes for the files to 600, i get 403. I don't see why this is happening, since the pages should be read/run as foo. Do you

[EMAIL PROTECTED] SuExec issues

2007-02-07 Thread Kövesdán Gábor
Hello list, I'm setting up a webserver with php. Here, security is very important, thus I want to use SuExec for running each website as a separate user. I've set up a VirtualHost as: VirtualHost *:80 SuexecUserGroup foo foo ServerAdmin [EMAIL PROTECTED] DocumentRoot /var/www/www.foo.hu

Re: [EMAIL PROTECTED] SuExec issues

2007-02-07 Thread Kövesdán Gábor
Joshua Slive schrieb: On 2/7/07, Kövesdán Gábor [EMAIL PROTECTED] wrote: However, if I set modes for the files to 600, i get 403. I don't see why this is happening, since the pages should be read/run as foo. Do you understand that suexec affects only CGI scripts and not normal requests

Re: [EMAIL PROTECTED] xxxxxxxxxxxxxxxxxxxxxx

2006-06-23 Thread Kövesdán Gábor
Yup, he is a jerk. Gabor Graham Frank wrote: Is everyone else being flooded by this guy, or is it just me? I’ve gotten at least 50 in the past few minutes. --Graham From: hui xu [mailto:[EMAIL PROTECTED] Sent: Friday, June 23, 2006 10:34 AM To:

[EMAIL PROTECTED] Setting up HTTPS with a 3rd party software

2006-02-10 Thread Kövesdán Gábor
Hello, I have difficulties with getting mod_ssl to work in Apache 2.2, I ran into a weird bug (discussed in this list with a developer). I need SSL, so I have to options: 1, Downgrading to 2.0.x 2, Setting up SSL with a 3rd party package, e.g. stunnel I'd prefer the second one, because

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Thu, Feb 02, 2006 at 05:54:18PM +0100, Kövesdán Gábor wrote: CustomLog /var/log/apache/httpd-ssl_request.log \ %t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \%r\ %b If I set here (globally) SSLEngine optional or on, Apache didn't even start, and I get this in the error

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Tue, Feb 07, 2006 at 03:07:07PM +0100, Kövesdán Gábor wrote: Joe Orton wrote: You need SSLEngine on somewhere. What error was produced from apachectl? How did it fail to start? There aren't any errors in the error_log you posted. Exactly what I wrote

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Tue, Feb 07, 2006 at 03:43:18PM +0100, Kövesdán Gábor wrote: Joe Orton wrote: I can't reproduce any problems here using your config. For the configuration with SSLEngine On in global context, where the server silently fails to start up, can you do: strace -o

[EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-02 Thread Kövesdán Gábor
Hello, I've upgraded to Apache 2.2.0 from 2.0.x. It didn't accept the old signatures I used with 2.0.x for https. I was told that this cert can't be a cacert anymore, thus I've generated a separate cert and a cacert to sign with. Now, I have these lines in the configuration for SSL: