Re: [users@httpd] Help configure non-SSL webpages on an SSL site?

2015-09-16 Thread Marat Khalili
st, but in any case you can always configure it to make unnecessary inaccessible. Just check Apache access controls for directories. -- With Best Regards, Marat Khalili On 16/09/15 01:12, . wrote: Hello, I am a novice website admin, running Apache 2.4.7 on a Ubuntu box. I want to be able

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-26 Thread Marat Khalili
I'm only guessing, but maybe manually adding all necessary intermediate certificates to your server will help? -- With Best Regards, Marat Khalili On 26/08/15 09:31, Sterpu Victor wrote: I installed apache 2.4.16 and I have activated SSLOCSPEnable on a virtual domain but the page i

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Marat Khalili
In this case, could you please post the results when you get the SSLOCSPEnable fixed? I'm particularly interested in performance. -- With Best Regards, Marat Khalili On 23/08/2015 19:57, Sterpu Victor wrote: There are 4 CAs, at least 1 uses OCSP(only 1 I called). I hope all of them use

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Marat Khalili
Oh, I see. In this case you will have to check the status of their certificates. Still, I suspect all of the tokens are issued by one CA. Probably it is better to ask this CA for their procedures: do they use OCSP or just publish CRLs. -- With Best Regards, Marat Khalili On 23/08/2015 19:41

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Marat Khalili
revoke them by yourself too if needed. -- With Best Regards, Marat Khalili On 23/08/2015 18:56, Sterpu Victor wrote: I want to make a page that will authenticate only with PKCS11 tokens. These tokens contain only certificates from a recognized authority. OCSP would be usefull if the token has been

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Marat Khalili
lient authentication in newer versions of Apache (google SSLOCSPEnable), but I can see no real use for it save for some very complicated systems. -- With Best Regards, Marat Khalili On 23/08/2015 09:51, Sterpu Victor wrote: Hello I have a web page that asks for client certificate. These are the option

Re: [users@httpd] Cannot get ExecCGI to work with userdir apache 2.4.6

2015-07-20 Thread Marat Khalili
Hello, According to http://httpd.apache.org/docs/2.4/mod/core.html#directory : None of the wildcards match a `/' character, so |"/*/public_html">| will not match |/home/user/public_html|, but || will match. -- With Best Regards, Marat Khalili On 20/07/15 17:11, Tucker

Re: [users@httpd] Proxy Issues

2015-07-16 Thread Marat Khalili
preferable if you don't want to deal with incorrect URLs. -- With Best Regards, Marat Khalili On 17/07/15 02:34, Matthew Javelet wrote: Hello Everyone, I'm having a bit of a struggle figuring out how to apply my _solution_ for this current issue I'm facing. I have server A

Re: [users@httpd] XMLHTTPRequest update

2015-07-15 Thread Marat Khalili
Put your HTML file to the server, don't run it from file. And you are obviously not having a problem with Apache configuration here, more like it is related to your assignment. -- With Best Regards, Marat Khalili On July 15, 2015 9:38:42 PM GMT+03:00, Ted Hickox wrote: >Thank you

Re: [users@httpd] XMLHTTPRequest

2015-07-15 Thread Marat Khalili
e and LiveHttpHeaders first. Many things could go wrong with your setup and we would not even know it. -- With Best Regards, Marat Khalili On July 15, 2015 7:12:21 PM GMT+03:00, Ted Hickox wrote: >I'm trying to master AJAX. This is my javascript code: > >var Data_Display >var My_

Re: [users@httpd] WebDAV reverse proxy SLOW

2015-07-03 Thread Marat Khalili
Problems solved, under Windows 8 you need to listen to localhost IPv6 address as well. -- With Best Regards, Marat Khalili On 01/07/15 13:51, Marat Khalili wrote: Dear all, I'm configuring a reverse proxy with configuration provided below, for Apache 2.4 for Windows (I'm trying

Re: [users@httpd] Client Cert Authentication behind an apache proxy without headers

2015-07-01 Thread Marat Khalili
Obviously, SSL protects traffic from any tampering by proxy. However, proxy can pass traffic through as-is when asked with CONNECT method; it might solve your problem depending on what this problem is (why do you need proxy in the first place?). -- With Best Regards, Marat Khalili On 01/07

[users@httpd] WebDAV reverse proxy SLOW

2015-07-01 Thread Marat Khalili
line after line, and doesn't improve. In contrast, same WebDAV resource connected directly or via NetDrive utility is quite responsive. I suspect Apache does not reuse connections or similar problems, but can't find more parameters to tune. Please advise. -- With Best Regards, Marat

<    1   2