[us...@httpd] ssl_error_rx_unexpected_server_key_exch

2010-11-15 Thread Ricardo Stella
Hello, We're getting these errors on some of our web servers (different instances running on different ports) being detected by Firefox 3.6.9+ This happens after about a week of normal use. A restart temporarily fixes the problem, but we have not been able to find a solution from the server

Re: [us...@httpd] firefox 3.6.9 fails to connect due to SSL DHE

2010-09-24 Thread Ricardo Stella
:* Ricardo Stella [mailto:ste...@rider.edu] *Sent:* Friday, September 24, 2010 3:04 AM *To:* users@httpd.apache.org *Subject:* [us...@httpd] firefox 3.6.9 fails to connect due to SSL DHE Hello, The latest Firefox 3.6.9+ will fail to connect to a server using the SSL DHE key exchange. I guess my

[us...@httpd] firefox 3.6.9 fails to connect due to SSL DHE

2010-09-23 Thread Ricardo Stella
Hello, The latest Firefox 3.6.9+ will fail to connect to a server using the SSL DHE key exchange. I guess my server is using this (I do have a commercial certificate). Basically Mozilla says it's a server misconfiguration issue. Anyone knows what needs to be configured so this doesn't

[us...@httpd] Problems with 2.2.16 and local openssl (newbie)

2010-09-13 Thread Ricardo Stella
This is an older RHEL3 32bit system. We have problems compiling a local apache 2.2.16 with openssl 0.9.8o. We had no problems with 2.2.15 (or at least it worked) openssl is installed in /usr/local/ssl - Note RHEL3 has it's own openssl 0.97a, but we want to use the latest. We are using this:

Re: [EMAIL PROTECTED] Version 1.3.x, 2.0.x and 2.2.x

2007-11-19 Thread Ricardo Stella
Kaushal Shriyan wrote: Hi Whats the exact difference between Version 1.3.x, 2.0.x and 2.2.x of Apache Web Server Thanks and Regards Kaushal Hmm... Oldest, older, current... Same as Win31, Win95, WinXP. I could say RTFM... but you should digest the following:

Re: [EMAIL PROTECTED] Re: Apache2 and Upload Progress in mod_jk

2007-07-25 Thread Ricardo Stella
Constantin Moisei wrote: No one experienced this problem by now ? On 24/07/07, *Constantin Moisei* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Any ideas ? On 24/07/07, *Constantin Moisei* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hi, I

Re: [EMAIL PROTECTED] Problems with LDAP and Basic Authentication

2007-03-27 Thread Ricardo Stella
Rob Tanner wrote: Hi, I'm having problems with LDAP authentication. What worked in Apache v2.0.53 does not work in Apache v2.2.4 and I assume that the difference is actually between mod_auth_ldap.c and mod_authnz_ldap.c. Below is an example of an LDAP configuration that works with the

Re: [EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-28 Thread Ricardo Stella
Looks good... I'm not sure - you might want to debug it by running the ldapsearch client from the command line. My guess is there's something going on with stunnel not accepting the connections. Is it logging anything ? Stuart Kendrick wrote: hi ricardo, ok, what you're pointing out is that

Re: [EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-26 Thread Ricardo Stella
Stuart Kendrick wrote: hi, i'm trying to upgrade my ldap authentication to ldaps i have both ldap and ldaps authentication working under apache 2.0 ... but under apache 2.2, i only have plain ldap working i'm looking for tips on additional trouble-shooting methods i could try [...]

Re: [EMAIL PROTECTED] Rewrite http to https

2006-09-20 Thread Ricardo Stella
Huesser Peter wrote: Hello This question was often asked before but I did not get any solution to work: I want to rewrite all request to “http:virtual.server.domain/path/file.html” to “https://virtual.server.domain/path/file.html”. One of the solutions I found is: RewriteEngine On

Re: [EMAIL PROTECTED] multiple SSL certs on one server behind a NAT router

2006-09-12 Thread Ricardo Stella
Serge Dubrouski wrote: If it looks like this then it will work perfect for www.foo.com but won't work for bar com. User will receive an error saying that bar.com uses certificate for foo.com. The rool is easy: one cert per one IP. That, or multiple names per certificate, ie multiple names

Re: [EMAIL PROTECTED] mod_authnz_ldap for 2.2.2

2006-07-31 Thread Ricardo Stella
Declerck Michael-W30479 wrote: Elaine, Thank you for your help! I had already installed Apache once without any modules, so I had apr-utils installed. Here's what I use (both under Solaris and RHEL4): * Creat a myconfigure.sh script with the following: ---BEGIN--- #! /bin/sh #

Re: [EMAIL PROTECTED] apache 2.2.2 and talking to Tomcat 5.5 via ProxyPass

2006-07-06 Thread Ricardo Stella
[EMAIL PROTECTED] wrote: Apache 2.2 makes it SOOO easy to talk to a Tomcat app by just using: ProxyPass /mytomcatapp ajp://127.0.0.1:8009/mytomcatapp But the problem I'm facing is that I have an app that uses it's own stylesheets and javascripts. Further, the app itself calls the

[EMAIL PROTECTED] apache 2.2.2 and talking to Tomcat 5.5 via ProxyPass

2006-07-05 Thread Ricardo Stella
Apache 2.2 makes it SOOO easy to talk to a Tomcat app by just using: ProxyPass /mytomcatapp ajp://127.0.0.1:8009/mytomcatapp But the problem I'm facing is that I have an app that uses it's own stylesheets and javascripts. Further, the app itself calls the contents on these directories with

Re: [EMAIL PROTECTED] Where to download a windows executable installation version of Apache 1.3.12 ?

2006-05-26 Thread Ricardo Stella
Christian wrote: Hi, I'm searching a windows version of Apache 1.3.12. Where can I find it ? Is there a place with older versions of Apache to download ? Regards.. The current version of 1.3.x series is 1.3.36 ! You should not be using such an old version at all !!! Also, if you

Re: [EMAIL PROTECTED] Apache and Tomcat 4.0.6

2006-05-19 Thread Ricardo Stella
Tribley William-cwt010 wrote: It only took about an hour to connect Apache 2.2 to Tomcat 5.5 . Tomcat 5.5 also supports separate files to configure each webapp instead of glomming it all in server.xml, a huge win for the configuration management and risk management camps. Bill

Re: [EMAIL PROTECTED] Totally stumped on httpd, gcc solaris 10

2006-05-11 Thread Ricardo Stella
Chris Edwards wrote: Hola! I am trying to compile Apache2 on Solaris 10 with gcc. Here is the error Im getting durring the make... exports.c:116:2: #endif without #if make[2]: *** [exports.lo] Error 1 make[2]: Leaving directory `/export/home/chris/Sources/httpd-2.2.0/server' make[1]:

Re: [EMAIL PROTECTED] make failed : apache2.0.55 + solaris 2.8 sparc

2006-05-09 Thread Ricardo Stella
Dave Floyd wrote: 2.0.58 has been released to cure some deficiencies in 2.0.55 anyway so I suggest downloading: http://www.apache.org/dist/httpd/httpd-2.0.58.tar.gz and compiling from scratch. Then check the README file to find the reccomended version of GCC to use. I have suggested

Re: [EMAIL PROTECTED] problem installing apache2.0.55 on Soalris 10

2006-05-03 Thread Ricardo Stella
Krishna Mondal wrote: Hi, I am installing Apache 2.0.55 (httpd-2.0.55-sparc-sun-solaris2.8.tar) on Solaris 5.10 machine. While make , I am getting the following error. Please let me know what could be the cause for the same. Thanks in advance. ...snip... Regards,

Re: [EMAIL PROTECTED] problem installing apache2.0.55 on Soalris 10

2006-05-03 Thread Ricardo Stella
Krishna Mondal wrote: I was also wondering why it is looking the header files under /tmp folder. I did not untar it under /tmp. Below are the steps which I followed. 1. FTPed the httpd-2.0.55-sparc-sun-solaris2.8.tar.gz at /export/home/netiq/sol How about we start over and get the

Re: [EMAIL PROTECTED] Getting mod_cache under Solaris 10

2006-04-11 Thread Ricardo Stella
[EMAIL PROTECTED] wrote: Hello all. I'm trying to compile mod_cache in a Solaris 10 server, but I'm getting compilation errors. Has someone compiled the module? And if so, is there some way to get it? - I have this distribution: httpd-2.0.55-sparc-sun-solaris2.8.tar (yes, it says

Re: [EMAIL PROTECTED] Apache-1.3.34 + openldap authentication... anyone who has a working setup? (RE: auth_ldap worked in apache-1.3.34)

2006-03-29 Thread Ricardo Stella
jay alvarez wrote: */Ricardo Stella [EMAIL PROTECTED]/* wrote: AFAIK, there are several implementations of auth_ldap. Which one are you referring to ? -- I'm talking about the implementation found here: http://www.rudedog.org/auth_ldap/ Anyway, if you know any other

Re: [EMAIL PROTECTED] Anyone here who have auth_ldap worked in apache-1.3.34

2006-03-28 Thread Ricardo Stella
jay alvarez wrote: Hi, Have you made auth_ldap worked with apache-1.3.34?? May I see your httpd.conf directives? Also the source tarballs of auth_ldap just in case you've applied some patch.. Because until now I haven't made it to work. Hope you can help me.. Thanks.. AFAIK, there

Re: [EMAIL PROTECTED] openldap on Apache 2.2

2006-03-27 Thread Ricardo Stella
Bug in the docs - discussed long ago in a galaxy far away... Add: AuthzLDAPAuthoritative off Paul Matthews wrote: On 3/24/06, Paul Matthews [EMAIL PROTECTED] wrote: hi there, I've just upgraded to Fedora core 5 with apache 2.2 and I'm trying to get apache working with ldap, but

Re: [EMAIL PROTECTED] Multiple LDAP servers in mod_auth_ldap

2006-03-15 Thread Ricardo Stella
Apache 2.0 doesn't work quite well for this as when it's linked with openldap, it does not provide a 'timeout' option, therefore if one of the ldap servers is down, it'll take forever to switch to the next one. The netscape libs have that ability but it didn't quite work and require another

Re: [EMAIL PROTECTED] Compiling Apache 2.2.0 on Solaris 10 with mod_authnz_ldap support

2006-03-15 Thread Ricardo Stella
Yu, Ming wrote: I have downloaded openldap and apache2.2.0. I am looking for instructions of how to compile the apache web server with mod_authnz_ldap. Thanks, - Ming YU - Johns Hopkins University Applied Physics Lab Assuming you have OpenLdap in /usr/local/openldap, OpenSSL in

[EMAIL PROTECTED] Transitioning virtual hosts from Netscape...

2006-03-02 Thread Ricardo Stella
Hello, I'm transitioning from an old Netscape Enterprise Server to Apache2.2. One problem I'm having is with virual hosts (name base, same IP address/port) Netscape's Software Virtual Server allow you to define a specific home page for a virtual host. In this case, the structure was set us:

Re: [EMAIL PROTECTED] Re: Apache1.3.33 with mod_ssl compilation error

2006-02-24 Thread Ricardo Stella
I'd say d/l and compile openssl and install it in /usr/local. BTW, did someone actually RTFM ??? NOTE: When your system already has OpenSSL installed (for instance some Linux distributions ship with OpenSSL installed out-of-the-box) in system locations you can ignore

Re: [EMAIL PROTECTED] Compiling Apache 2.2.0 on Solaris 10 with mod_authnz_ldap support

2006-01-26 Thread Ricardo Stella
] [error] Internal error: pcfg_openfile() called with NULL filename [Wed Jan 25 14:42:07 2006] [error] [client em] (9)Bad file number: Could not open password file: (null) On 1/25/06, *Ricardo Stella* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Not sure where you put the ldap

Re: [EMAIL PROTECTED] mod_auth_ldap TLS Authoriztion

2006-01-25 Thread Ricardo Stella
the options LDAPTrustedGlobalCert, LDAPTrustedClientCert and LDAPTrustedMode. Thanks Regards, Muthu. Ricardo Stella wrote: Well, first things first... Did the module actually linked the ssl libraries ? Which libraries did you tried to link it to ? iPlanet's only support SSL... Also, you

Re: [EMAIL PROTECTED] Compiling Apache 2.2.0 on Solaris 10 with mod_authnz_ldap support

2006-01-25 Thread Ricardo Stella
Not sure where you put the ldap libraries, but just in case, you might want to 'help' apache find them. I had problems using the mozilla libs with timeout, so switching back to openldap libs, and configure kept on finding and trying to link to them... Also, in case it finds first Sun's stock

Re: [EMAIL PROTECTED] ldaps authentication

2006-01-20 Thread Ricardo Stella
What do logs show ? Also, do you know if you are establishing a connection ? And, also, any permissions issue with the server reading the certificate ? Sturgis, Grant wrote: No luck on this thread. Let me ask a different question: Is anyone using ldaps authentication - or ldap for that

Re: [EMAIL PROTECTED] ldaps authentication

2006-01-20 Thread Ricardo Stella
The default for ldap over ssl is on port 636. Is your ldap supporting this or actually doing TLS on the standard port ? Sturgis, Grant wrote: From: Ricardo Stella [mailto:[EMAIL PROTECTED] What do logs show ? The error_log shows this: [Fri Jan 20 10:08:47 2006] [warn

Re: [EMAIL PROTECTED] Apache 1.3.33 compilation problem on Solaris 10

2005-09-28 Thread Ricardo Stella
Try using Sun's stock GCC which is a newer version (v3.4.3) of what you have at Sunfreeware... in /usr/sfw/bin/gcc Perminder Singh Vohra wrote: Hi, I am trying to compile Apache 1.3.33 source on Solaris 10. Following are the versions of various required software installed on this box:-

Re: [EMAIL PROTECTED] Machine compromised via apache 2.0.54... I think.

2005-09-27 Thread Ricardo Stella
The fact you got hacked means that whatever happened before is still hapenning. That is, are you sure you don't have any odd cgi scripts running that could be easily compromised ? Yes, there are zero day exploits, but make sure all your other related apps. are up to date. Ie, you could have

[EMAIL PROTECTED] mod_ldap (2.0.54) with Sun SDK, ssl, timeout, multiple servers - working

2005-09-26 Thread Ricardo Stella
I've been trying to get mod_ldap to do basic auth to multiple (failover) servers, via ldaps, and non standard ports. Trying to do this under apache2, I was able to do it after several fixes, which not being a programmer, I figure I run this thru the list for comments: My setup are three ldap