RE: [users@httpd] RE: Is there any compatibility issue with apache httpd 2.2.22 with OpenSSL 1.0.1c

2012-08-30 Thread Ruiyuan Jiang
I had the problem with httpd 2.2.22 and OpenSSL 1.0.1c on Redhat. I don't have problem with httpd 2.4.x and OpenSSL 1.0.1c on Redhat. -Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Thursday, August 30, 2012 10:41 AM To: users@httpd.apache.org Subject: Re:

RE: [users@httpd] mod_extract_forwarded or mod_rpaf for Apache 2.2/2.4?

2012-08-24 Thread Ruiyuan Jiang
You can get the module for 2.2 from http://people.apache.org/~wrowe/httpd-2.2-ports/ Ruiyuan Jiang -Original Message- From: Marten Lehmann [mailto:lehm...@cnm.de] Sent: Thursday, August 23, 2012 8:33 PM To: users@httpd.apache.org Subject: Re: [users@httpd] mod_extract_forwarded

RE: [users@httpd] FIPS disabled by httpd 2.4.3

2012-08-24 Thread Ruiyuan Jiang
/ssl/lib. After installation, ldd shows that httpd still uses Redhat's /lib64/libcrypt.so.1. How do I force httpd to use my own compiled OpenSSL in /usr/local/ssl instead of Redhat's built-in libcrypt.so? Thanks. Ryan Jiang -Original Message- From: Ruiyuan Jiang [mailto:rji...@fnpc.com

RE: [users@httpd] FIPS disabled by httpd 2.4.3

2012-08-24 Thread Ruiyuan Jiang
file, I typed in the same pass phrase and I can start httpd v2.4.3. What else do I need to do or check? Thanks. Ryan Jiang -Original Message- From: Ruiyuan Jiang [mailto:rji...@fnpc.com] Sent: Thursday, August 23, 2012 11:04 AM To: users@httpd.apache.org Subject: RE: [users@httpd] FIPS

RE: [users@httpd] FIPS disabled by httpd 2.4.3

2012-08-23 Thread Ruiyuan Jiang
Jiang -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Wednesday, August 22, 2012 6:15 PM To: users@httpd.apache.org Subject: Re: [users@httpd] FIPS disabled by httpd 2.4.3 On 22.08.2012 20:47, Ruiyuan Jiang wrote: Hi, My OpenSSL v1.0.1c was compiled

[users@httpd] FIPS disabled by httpd 2.4.3

2012-08-22 Thread Ruiyuan Jiang
Hi, My OpenSSL v1.0.1c was compiled as FIPS enabled. # /usr/local/ssl/bin/openssl OpenSSL version OpenSSL 1.0.1c-fips 10 May 2012 OpenSSL I did compilation httpd v2.4.2 and v2.4.3 to use the above version of openssl. After I started httpd v2.4.3, I noticed in the error_log that FIPS is being

[users@httpd] httpd 2.4.2 with FIPS enabled OpenSSL 1.0.1c

2012-08-09 Thread Ruiyuan Jiang
Hi, I am trying to compile source code of httpd v2.4.2 with FIPS v2.0.1 enabled OpenSSL v1.0.1c and I got error messages in the make phase. I did the same compilation with the same options with regular OpenSSL and it was a success. Here is the error message that I got: make[4]: Leaving

[users@httpd] httpd v2.2.22 with openssl 1.0.1c

2012-07-25 Thread Ruiyuan Jiang
Hi, all Last month, I posted a problem that httpd v2.2.22 did not work with openssl v1.0.1c. For me, it worked with openssl v1.0.0g with the same configure options for httpd and openssl. So far I did not hear anything. I am re-post my message here and hopefully I can get response this time.

[users@httpd] configure error on openssl v1.0.1c for apache 2.2.22

2012-06-15 Thread Ruiyuan Jiang
Hi, all I am trying to upgrade my Openssl for Apache httpd to the latest version v1.0.1c on RHEL v6.2 (64 bit). Openssl compiled and installed no problem. I then tried to configure httpd v2.2.22 and got error message: checking for library containing crypt... -lcrypt checking for getpwnam...

RE: [users@httpd] Attack on my reverse proxy server

2012-06-13 Thread Ruiyuan Jiang
: [users@httpd] Attack on my reverse proxy server On 12.06.12 00:42, Ruiyuan Jiang wrote: We see some attack on our apache reverse proxy server. 180.211.101.213 - - [11/Jun/2012:11:30:00 -400] POST / HTTP/1.0 301 324 201.243.47.144 - - [11/Jun/2012:11:30:00 -400] POST / HTTP/1.0 400 226

[users@httpd] Apache does not release semaphore after shutdown

2012-05-14 Thread Ruiyuan Jiang
Hi, I have two Apache reverse proxy servers (v2.2.22, Redhat RHEL v6.2, X86_64) running on the same system for different purposes (I have no choice). When I shutdown the smaller (less resources such as maximum users, etc.) Apache reverse proxy server on the host and tried to start it last

[users@httpd] Default Time out value for https connection to backend https server

2012-05-10 Thread Ruiyuan Jiang
Hi, all I have an Apache reverse proxy server (v2.2.22, Redhat EL v6.2, x86_64). The reverse proxy server connects to backend MS Exchange server for webmail through https connection. On the proxy server, I configured proxy balancer with HA mode for two backend Exchange server in the Apache

[users@httpd]

2012-02-22 Thread Ruiyuan Jiang
Hi, all I have an apache2.2.22 reverse proxy server running. On the reverse proxy server, it has multiple virtual hosts. Some of them are https connections besides http connection. The backend servers behind the reverse proxy server have either https or http connection with the Apache reverse

RE: [users@httpd] Apache 2.2.21 SSL on RHEL v5.7

2012-01-25 Thread Ruiyuan Jiang
, Ruiyuan Jiang wrote: Hi, I have two Apache 2.2.21 reverse proxy servers on Solaris 10 (SPARC) and additional modules that not in the Apache distribution. They are running fine so far. Now we want to migrate Apache to Redhat Enterprise server v5.7. I compiled Apache the same way and same

[users@httpd] Apache 2.2.21 SSL on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
Hi, I have two Apache 2.2.21 reverse proxy servers on Solaris 10 (SPARC) and additional modules that not in the Apache distribution. They are running fine so far. Now we want to migrate Apache to Redhat Enterprise server v5.7. I compiled Apache the same way and same option as on the Solaris

RE: [users@httpd] Apache 2.2.21 SSL on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
On 23.01.2012 20:02, Ruiyuan Jiang wrote: Hi, I have two Apache 2.2.21 reverse proxy servers on Solaris 10 (SPARC) and additional modules that not in the Apache distribution. They are running fine so far. Now we want to migrate Apache to Redhat Enterprise server v5.7. I compiled Apache the same

RE: [users@httpd] Apache 2.2.21 SSL on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
HI, I modified Apache's LD_LIBRARY_PATH to first check /usr/local/ssl/lib before I recompiled Apache and modified envvars in the bin directory to have /usr/local/ssl/lib directory listed but no help. Any reason why? Thanks. Ryan -Original Message- From: Ruiyuan Jiang

RE: [users@httpd] Apache 2.2.21 SSL on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
Hi, One more piece of information, Apache never prompts me for the Pass Phrase when it starts with https enabled on Redhat which it supposed to. It prompts me to enter pass phrase on my Solaris Apache reverse proxy server. Ryan Jiang -Original Message- From: Ruiyuan Jiang

[users@httpd] Apache httpd Range header remote DoS

2011-11-04 Thread Ruiyuan Jiang
Hi, all I have an Apache reverse proxy server (v2.2.21) redirects traffic from http to https for a back end web server. I don't know the exact version of the back end Apache web server because Oracle changed the version number but I am sure it is below v2.2.21. Our vulnerability scan shows

RE: [users@httpd] Apache httpd Range header remote DoS

2011-11-04 Thread Ruiyuan Jiang
Thanks for the answer, Tom Ryan -Original Message- From: Tom Evans [mailto:tevans...@googlemail.com] Sent: Friday, November 04, 2011 11:19 AM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache httpd Range header remote DoS On Fri, Nov 4, 2011 at 2:59 PM, Ruiyuan Jiang

[users@httpd] Proxy for TLS connection

2011-08-02 Thread Ruiyuan Jiang
Hi, I have a Apache reverse proxy server for both multiple http and https connection setup (v2.2.19). Right now there is a request to proxy TLS connection which is not on port 443. Does Apache reverse proxy server can accomplish that? Thanks. Ruiyuan This message (including any attachments)

RE: [users@httpd] Apache Reverse Proxy Server Accessing backend https through front https server

2011-04-04 Thread Ruiyuan Jiang
, Ruiyuan Jiang ruiyuan_ji...@liz.commailto:ruiyuan_ji...@liz.com wrote: Hi, all I have a Apache reverse proxy server (v2.2.17). There is a web server with backend https server. When internet users access the sit, they use http://sitename and then get redirected to https://sitename

[users@httpd] Apache Reverse Proxy Server Accessing backend https through front https server

2011-04-01 Thread Ruiyuan Jiang
Hi, all I have a Apache reverse proxy server (v2.2.17). There is a web server with backend https server. When internet users access the sit, they use http://sitename and then get redirected to https://sitename. The configuration is in the httpd-vhosts.conf Virtualhost sitename:80

RE: [us...@httpd] Betr.: Re: [us...@httpd] Apache Reverse Proxy for Citrix MetaFrame Presentation Server

2010-06-03 Thread Ruiyuan Jiang
Hi, I tested and I got ssl error code 47 error. It seems to me that Apache wants to terminate any port 443 traffic. The Citrix presentation server does not allow termination of the traffic at port 443. Otherwise Citrix will have an error. Is there a way to let Apache proxy server passing port

RE: [us...@httpd] Betr.: Re: [us...@httpd] Apache Reverse Proxy for Citrix MetaFrame Presentation Server

2010-06-02 Thread Ruiyuan Jiang
So I should treat tcp tunneling through https port to backend server the way same as regular https backend server, Joost? I do have SSLProxyEngine on statement. Thanks. Ruiyuan -Original Message- From: Joost Heer, de [mailto:j.d.h...@atriummc.nl] Sent: Wednesday, June 02, 2010 6:08 AM

[us...@httpd] Apache Reverse Proxy for Citrix MetaFrame Presentation Server

2010-06-01 Thread Ruiyuan Jiang
Hi, I need to setup a Reverse Proxy server for Citrix MetaFrame Presentation server for people to access internal resources. My Apache reverse proxy server is running and it proxies http and https requests. The Citrix backend server uses port 443 for TCP tunnel not https. Should I use

RE: [us...@httpd] RE: Wield problem with a reverse proxy server

2010-04-28 Thread Ruiyuan Jiang
with a reverse proxy server - Original Message - From: Ruiyuan Jiang ruiyuan_ji...@liz.com Date: Tue, 27 Apr 2010 15:54:24 -0400 Subject: [us...@httpd] RE: Wield problem with a reverse proxy server To: users@httpd.apache.org users@httpd.apache.org Hi, all I posted below email

[us...@httpd] RE: Wield problem with a reverse proxy server

2010-04-27 Thread Ruiyuan Jiang
? Thanks. Ryan -Original Message- From: Ruiyuan Jiang [mailto:ruiyuan_ji...@liz.com] Sent: Thursday, April 22, 2010 5:41 PM To: users@httpd.apache.org Subject: [us...@httpd] Wield problem with a reverse proxy server Hi, all I have two reverse proxy servers, one is v2.2.15 (mpm=worker

[us...@httpd] Wield problem with a reverse proxy server

2010-04-22 Thread Ruiyuan Jiang
Hi, all I have two reverse proxy servers, one is v2.2.15 (mpm=worker) and the other is v2.2.14 (prefork). They both run on Solaris 10. Now I have a request to redirct traffic for an additional web site which is outsourced by another party. What I have done on a reverse proxy

RE: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-12 Thread Ruiyuan Jiang
: [us...@httpd] Number of https virtual hosts support under v2.0.59 On Mon, Mar 1, 2010 at 4:30 PM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Thanks for the response, Krist. The version of openssl that I am using is good 0.98l. The problem is the Apache since I can't use 2.2.14 because the bug

RE: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-12 Thread Ruiyuan Jiang
-Original Message- From: Philip Wigg [mailto:p...@philipwigg.co.uk] Sent: Friday, March 12, 2010 11:58 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] Number of https virtual hosts support under v2.0.59 On 12 March 2010 16:43, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Hi, Krist I

RE: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-12 Thread Ruiyuan Jiang
d'origine- De : Ruiyuan Jiang [mailto:ruiyuan_ji...@liz.com] Envoyé : vendredi 12 mars 2010 19:40 À : users@httpd.apache.org Objet : RE: [us...@httpd] Number of https virtual hosts support under v2.0.59 Hi, Philip I don't know how to configure SNI on Apache since I don't see anything

RE: [us...@httpd] [Announce] Apache HTTP Server (httpd) 2.2.15 Released

2010-03-10 Thread Ruiyuan Jiang
Hi, Has anyone downloaded the .tar.gz format file for v2.2.15? I tried to gunzip the file on Solaris, HPUX and Windows and all having problem? I downloaded multiple times on multiple days but got the same thing. Thanks. Ryan -Original Message- From: William A. Rowe Jr.

RE: [us...@httpd] [Announce] Apache HTTP Server (httpd) 2.2.15 Released

2010-03-10 Thread Ruiyuan Jiang
@httpd.apache.org Subject: Re: [us...@httpd] [Announce] Apache HTTP Server (httpd) 2.2.15 Released On Wed, Mar 10, 2010 at 11:57 AM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Hi, Has anyone downloaded the .tar.gz format file for v2.2.15? I tried to gunzip the file on Solaris, HPUX and Windows and all

RE: [us...@httpd] [Announce] Apache HTTP Server (httpd) 2.2.15 Released

2010-03-08 Thread Ruiyuan Jiang
Hi, William Does v2.2.15 fix the problem that I reported BUG 48819 that happens on v2.2.14? Thanks. Ryan -Original Message- From: William A. Rowe Jr. [mailto:wr...@rowe-clan.net] Sent: Saturday, March 06, 2010 3:47 PM To: users@httpd.apache.org Subject: [us...@httpd] [Announce] Apache

RE: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-01 Thread Ruiyuan Jiang
...@httpd] Number of https virtual hosts support under v2.0.59 On Fri, Feb 26, 2010 at 9:55 PM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: So I wonder whether Apache 2.0.59 supports more than one https reverse proxy setup? Thanks in advance. You probably are trying to use name based https

[us...@httpd] Number of https virtual hosts support under v2.0.59

2010-02-26 Thread Ruiyuan Jiang
Hi, all How many https virtual hosts supported under Apache v2.0.59? I can't test with v2.2.14 since the bug I just filed. On my Solaris 10, Apache 2.0.59 reverse proxy server, I have a https virtual host defined with a real certificate from a CA and forward https traffic to a backend server

RE: [us...@httpd] Bugs or problem?

2010-02-25 Thread Ruiyuan Jiang
is gone. Ryan -Original Message- From: Rich Bowen [mailto:rbo...@rcbowen.com] Sent: Thursday, February 25, 2010 8:49 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] Bugs or problem? On Feb 24, 2010, at 4:45 PM, Ruiyuan Jiang wrote: Well, I posted the problem two weeks ago

RE: [us...@httpd] Bugs or problem?

2010-02-25 Thread Ruiyuan Jiang
Thanks, Rich. Ryan -Original Message- From: Rich Bowen [mailto:rbo...@rcbowen.com] Sent: Thursday, February 25, 2010 10:49 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] Bugs or problem? On Feb 25, 2010, at 10:30 AM, Ruiyuan Jiang wrote: Hi, Rich Yes the login page

RE: [us...@httpd] Bugs or problem?

2010-02-25 Thread Ruiyuan Jiang
:30 AM, Ruiyuan Jiang wrote: Hi, Rich Yes the login page for the user authentication comes from Tomcat server. The traffic between Solaris Apache and HPUX Apache server are strictly 'http', HPUX Apache redirect traffic to AJP port of Tomcat through mod_jk. In my Apache 2.2.14 test, except

RE: [us...@httpd] Bugs or problem?

2010-02-25 Thread Ruiyuan Jiang
: [us...@httpd] Bugs or problem? On Thu, Feb 25, 2010 at 4:00 PM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Yes, Rich I do use proxypass, proxypassreverse, mod_proxy and mod_proxy_http. Ryan I thought you were using mod_proxy_ajp? Tom

[us...@httpd] Bugs or problem?

2010-02-24 Thread Ruiyuan Jiang
Hi, all Hi, all I found a problem on Apache v2.2.14. I down graded my Apache to v2.0.59 and tested. The problem does not exist on Apache v2.0.59. How do I file a bug report or fix request? Thanks. Ryan This message (including any attachments) is intended solely for the specific

RE: [us...@httpd] Bugs or problem?

2010-02-24 Thread Ruiyuan Jiang
@httpd.apache.org Subject: Re: [us...@httpd] Bugs or problem? On Feb 24, 2010, at 2:18 PM, Ruiyuan Jiang wrote: Hi, all Hi, all I found a problem on Apache v2.2.14. I down graded my Apache to v2.0.59 and tested. The problem does not exist on Apache v2.0.59. How do I file a bug report

[us...@httpd] Page not updating after login

2010-02-03 Thread Ruiyuan Jiang
Hi, all We have a web server which uses Tomcat AJP. The setup is: Internet PCs -- Solaris 10, SPARC, Apache v2.2.14 reverse proxy server -- HPUX Apache server v.2.0.59, Tomcat AJP server v5.5.26 -- HPUX Oracle database. HPUX Apache (HP pre-compiled Apache) and Tomcat are installed on the

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-04 Thread Ruiyuan Jiang
To: users@httpd.apache.org Subject: RE: [us...@httpd] Passing remote client IP address to backend server and session stickness On Today at 10:29am, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, Haroon RJ RJ Thanks for the reply. Do you mean they are automatically activated for RJ reverse

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
[mailto:haroon.rafi...@utoronto.ca] Sent: Monday, November 30, 2009 7:54 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] Passing remote client IP address to backend server and session stickness On Today at 4:37pm, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, all RJ RJ Question 1

RE: [us...@httpd] Adding module to Apache-httpd

2009-12-01 Thread Ruiyuan Jiang
to Apache-httpd Ruiyuan Jiang wrote: I compiled remoteip module and loaded it without problem. In one of my virtualhost of Apache reverse proxy, I added and tested: RemoteIPHeader X-Client-IP Or RemoteIPHeader X-Forwarded-For Or both I don't see the remote client IP is being forwarded

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
@httpd.apache.org Subject: Re: [us...@httpd] Passing remote client IP address to backend server and session stickness I realize I just answered you, but in response to your explicit and specific questions; Ruiyuan Jiang wrote: Question 1: Is there a way to pass Internet users' IP address

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
...@utoronto.ca] Sent: Tuesday, December 01, 2009 10:23 AM To: users@httpd.apache.org Subject: RE: [us...@httpd] Passing remote client IP address to backend server and session stickness On Today at 10:09am, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, Haroon RJ RJ I see that also but I don't

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
[mailto:haroon.rafi...@utoronto.ca] Sent: Tuesday, December 01, 2009 10:23 AM To: users@httpd.apache.org Subject: RE: [us...@httpd] Passing remote client IP address to backend server and session stickness On Today at 10:09am, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, Haroon RJ RJ I see

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
: Tuesday, December 01, 2009 10:57 AM To: users@httpd.apache.org Subject: RE: [us...@httpd] Passing remote client IP address to backend server and session stickness On Today at 10:29am, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, Haroon RJ RJ Thanks for the reply. Do you mean

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
On Today at 11:29am, RJ=Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: RJ Hi, Haroon RJ RJ Where do you see Apache 2.3? I don't see on the office Apache web site. As of yet unreleased. If I remember correctly, 2.3 will be the unstable branch and 2.4 (when released) will be the stable version. RJ Also

RE: [us...@httpd] Passing remote client IP address to backend server and session stickness

2009-12-01 Thread Ruiyuan Jiang
@httpd.apache.org Subject: Re: [us...@httpd] Passing remote client IP address to backend server and session stickness On Tue, Dec 1, 2009 at 4:29 PM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Hi, Haroon Where do you see Apache 2.3? I don't see on the office Apache web site. Also where should I apply

[us...@httpd] Passing remote client IP address to backend server and session stickness

2009-11-30 Thread Ruiyuan Jiang
Hi, all Question 1: Is there a way to pass Internet users' IP address to backend server through Apache reverse proxy server? I am testing that feature so far no luck. My backend server gets Apache proxy server's IP address. But I'd like to have Internet users' IP being passed through Apache.

RE: [us...@httpd] Adding module to Apache-httpd

2009-11-25 Thread Ruiyuan Jiang
Ruiyuan Jiang wrote: Hi, I need the module mod_remoteip which is not included in the standard httpd-2.2.14 distribution. http://httpd.apache.org/docs/2.2/programs/apxs.html -- Nick Kew - The official User-To-User support

[us...@httpd] Adding module to Apache-httpd

2009-11-20 Thread Ruiyuan Jiang
Hi, I need the module mod_remoteip which is not included in the standard httpd-2.2.14 distribution. I downloaded the source code from people.apache.org/~wrowe/mod_remoteip.c. There is no instruction for the source code as how to compile the module. On the Apache's web site, the document shows