Re: [users@httpd] Segmentation fault

2022-03-12 Thread Dino Ciuffetti
dvantages by moving to the fpm pools model, and your httpd will use less memory as well. On Wed, 9 Mar 2022 at 20:15, Dino Ciuffetti mailto:d...@tuxweb.it)> wrote: Already tried to disable the opcache PHP extension? # sudo phpdismod opcache It should be your problem. Also, it seems you are on pref

Re: [users@httpd] Segmentation fault

2022-03-09 Thread Dino Ciuffetti
Already tried to disable the opcache PHP extension? # sudo phpdismod opcache It should be your problem. Also, it seems you are on prefork, please try to set MaxConnectionsPerChild to something near 1 when you are using mod_php or big modules like this to avoid any memory leak building

Re: [users@httpd] Could not find worker

2022-02-13 Thread Dino Ciuffetti
set your lbfactor to the same value. Ciao, Dino. 13 febbraio 2022 17:36, "Roberto D. Maggi" mailto:robertodma...@gmail.com?to=%22Roberto%20D.%20Maggi%22%20)> wrote: Hello you all, I'm looking for some help due to this problem I'm fighting from a couple of days with. I'

Re: [users@httpd] Is it possible to install/configure SSL certificates on a server behind a reverse proxy?

2022-01-13 Thread Dino Ciuffetti
‐ Original Message ‐‐‐ On Wednesday, January 12th, 2022 at 5:23 PM, Dino Ciuffetti mailto:d...@tuxweb.it)> wrote: My question:Would it have been possible to install the SSL certificates in the virtual machines? YES. It's possibile to send Internet HTTPS traffic to an internal HTTPS service behind

Re: [users@httpd] Is it possible to install/configure SSL certificates on a server behind a reverse proxy?

2022-01-12 Thread Dino Ciuffetti
My question:Would it have been possible to install the SSL certificates in the virtual machines? YES. It's possibile to send Internet HTTPS traffic to an internal HTTPS service behind apache httpd as a reverse proxy. You eventally need to install same SSL certificates (but you don't have

Re: [users@httpd] timeout and keepalive parameter in ProxyPass

2021-10-13 Thread Dino Ciuffetti
The global "Timeout" parameter is needed to set the length of time Apache httpd will wait for I/O in various circumstances. https://httpd.apache.org/docs/2.4/mod/core.html#timeout (https://httpd.apache.org/docs/2.4/mod/core.html#timeout) The "keepalive" attribute of ProxyPass can be used to fool

Re: [users@httpd] Re: [External] : [users@httpd] Problems compiling under Solaris 10

2021-08-30 Thread Dino Ciuffetti
If you don't need ab (Apache Benchmark): cd support ; touch ab ; cd .. ; make This way you will skip the ab compilation. 30 agosto 2021 13:47, "Ran Mozes" mailto:ran.mo...@oracle.com?to=%22Ran%20Mozes%22%20)> wrote: Hi Nigel, all, I am experiencing the exact same errors while trying to compile

Re: [users@httpd] Fwd: apache2 / httpd graceful/reload failures on Ubuntu 21.04

2021-08-27 Thread Dino Ciuffetti
on a 64bit linux system is very big (please try this: cat /proc/sys/kernel/shmall), I would bet on a low SHMMNI value on your system (pls: cat /proc/sys/kernel/shmmni) SHMMNI is the global maximum number of shared memory segments on your system. Default on Ubuntu should be 4096. Please try to incre

Re: [users@httpd] Different security warnings for a site with Chrome on Linux, Windows, and iOS

2021-08-09 Thread Dino Ciuffetti
> Firefox on linux indicates that "Parts of this page are not secure". > I think the issue may be that your o'reilly graphic is served via > http. Richard is right. It's this image in your HTML that is loading via HTTP instead of HTTPS:

Re: [users@httpd] PHP-FPM with Reverse Proxy via cannot get to Post

2021-08-01 Thread Dino Ciuffetti
> After many tests, I have concluded that what is happening is that header is > not being sent to > PHP-FPM since we use authorization and access, no response payload is being > provided on POST with > PHP-FPM (my findings). > > The app does header authentication via JWT and outside of the

Re: [users@httpd] DKIM misconfiguration of this mailing list

2021-05-19 Thread Dino Ciuffetti
Hi. I don't see any problem at all with DKIM from the list. (I'm not the person who implemented or configured it but) This list manager is well configured imho. Please check your incoming emails coming from the list. They are not "forwarded" breaking DKIM or SPF but they are rewritten with a

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Dino Ciuffetti
Try to comment out mod_security, it's a module that use enough memory. Also on server2 there are modules not loaded on server1. BTW what's your problem? Your server is plenty of ram and RSS memory is not creating any problem. Right? 17 maggio 2021 13:34, "Marc Serra"

Re: [users@httpd] checking for OpenSSL version >= 0.9.8a... FAILED

2021-05-10 Thread Dino Ciuffetti
./configure --prefix=/usr/local/apache2 --enable-deflate --enable-expires --enable-headers --enable-modules=reallyall --enable-ssl --enable-so --with-mpm=worker --enable-rewrite --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util what are my options to resolve this ? please try to

Re: [users@httpd] port 80 curl connection refused.

2021-05-05 Thread Dino Ciuffetti
curl http://123.456.7.543 (http://123.456.7.543) (example ip address) curl: (7) Failed to connect to 123.456.7.543 port 80: Connection refused "Connection refused" means that your apache service is not bound to port TCP/80, it's down, or your routing send HTTP traffic to another host where

Re: [users@httpd] mod_jk hasn't worked

2021-04-30 Thread Dino Ciuffetti
How about this. If the software was robust and developed to a professional standard then I would know what to do because the software would detect the issues and give me solutions like any professional product. My friend, any product will give you any solution. You have to study, read the manual,

Re: [users@httpd] prebuilt mod_jk.so for apache2 2.4.46

2021-04-29 Thread Dino Ciuffetti
Where am I likely to find mod_jk.so for apache 2.4.46 ? Download source code from here: https://tomcat.apache.org/download-connectors.cgi (https://tomcat.apache.org/download-connectors.cgi) I tried to build it, first attempt ./configure --with-apache=/home/pi/Downloads/httpd-2.4.46 You are

Re: [users@httpd] util_pcre.c:58:10: fatal error: pcre.h: No such file or directory

2021-04-28 Thread Dino Ciuffetti
need to: yum install pcre-devel openssl-devel expat-devel Then use --with-pcre=/usr on your apache configure string. HTH. Ciao, Dino.

Re: [users@httpd] Related question on having multiple subdomains on one host

2021-04-09 Thread Dino Ciuffetti
9 aprile 2021 21:51, "H" wrote: > etc, I have separate conf files in /etc/httpd/conf.d/, one for each of site1, > site2 etc, using this > format: > > > ServerAdmin > ServerName x.x.x.x > DocumentRoot /var/www/html/ > Include /etc/httpd/conf.d/rh-php70-php-fpm.conf > ErrorLog

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Dino Ciuffetti
> This is from ps aux | grep fpm: > > root 17004 0.0 0.6 339008 11244 ?Ss 01:18 0:00 php-fpm: > master process > (/etc/opt/rh/rh-php70/php-fpm.conf) > apache 17005 0.0 0.3 339112 7352 ?S01:18 0:00 php-fpm: > pool www > apache 17006 0.0 0.3 339112 7356 ?

Re: [users@httpd] What should be considered about the reverse proxy server?

2021-03-08 Thread Dino Ciuffetti
> > ProxyPreserveHost On > ProxyPass / http://Server-IP > ProxyPassReverse / http://Server-IP > > I have some questions: > > 1- the real work of a proxy server is just that lines? It's OK if you only have one backend HTTP worker without load balancing and no HTTPS. If you need load

Re: [users@httpd] result codes from Bash CGI

2021-02-18 Thread Dino Ciuffetti
I see that they are easy to use and understand, but I could not find any reference to them in the documentation. The fact that Bash can be used as a CGI language is in the documentation, but nothing on the helper functions -- not even that they exist. May be you'll not find how to write

Re: [users@httpd] result codes from Bash CGI

2021-02-18 Thread Dino Ciuffetti
that sends the HTTP Status code header is sendstatuscode(). Also, try to directly exec the script from command line to get the output, that is: dino@a1:/tmp# chmod 755 test.cgi dino@a1:/tmp# ./test.cgi Content-Type: text/html Status: 410 Gone HI!Hi there, this is test.cgi speaking.HTTP Status code

Re: [users@httpd] result codes from Bash CGI

2021-02-15 Thread Dino Ciuffetti
So I would do something like echo "Status: 410 Gone" to create a "410 Gone" result code and message? Claude Yes. You got the point. Please check this CGI bash script I made for you as an example: https://gist.github.com/dam2k/5df0d8d3fdabc41e8ce2c799734f65d4

Re: [users@httpd] silent redirecting

2021-02-09 Thread Dino Ciuffetti
> I have situation where we have, let us say alpha.example.com > bravo.example.com, we want to redirect them and example.com to > zulu.example.com _but_ for that and every page under, they > retain address bar of their original request hostname You could enable mod_proxy, mod_proxy_http,

Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities?

2021-02-08 Thread Dino Ciuffetti
> Hello, > I scanned my Apache web server and below Vulnerabilities discovered: There are many ways of solving those vulnerabilities. Most of them can be fixed patching your applications. As rule of thumb, your application should: - not use frames or iframes at all - use only HTTPS everywhere,

Re: [users@httpd] Reverse proxy to a tor .onion-site?

2021-02-06 Thread Dino Ciuffetti
> https://www.example.com to localhost:9050 (default port for tor's SOCks > proxy) and change the address to http://xyz.onion. Is that possible? I don't think it's possible to use apache as a reverse proxy behind a SOCKS forward proxy since the ProxyRemote directive doesn't seem to support SOCKS

Re: [users@httpd] Is it possible to exclude a directory from listing?

2021-01-21 Thread Dino Ciuffetti
> Is it possible to disable Directory Listing for a directory and its > sub-directory except one of > them? Sure. You can do something like this. Pls set your correct paths. # Disable directory listing for myparentdir and all of its subdirs Options -Indexes Require all granted # Just

Re: [users@httpd] Apache shows PHP code instead of executing it

2021-01-06 Thread dino
aving access to Authorization: Bearer header RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}] #- HTH. Ciao, Dino.

Re: [users@httpd] Setting up a load balancer with https and a valid certificate

2020-03-17 Thread dino
Already tried with those? : SSLProxyEngine On SSLProxyCheckPeerName Off SSLProxyCheckPeerExpire Off SSLProxyCipherSuite All SSLProxyProtocol all -SSLv3 SSLProxyCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+EXP SSLProxyVerify none ProxyPreserveHost On This way your reverse proxy will not check

Re: [users@httpd] Countdown to 25 years - has httpd changed your life?

2020-01-17 Thread dino
that funky colors. Then later I realized that this script was running on L(inux)A(pache)M(ysql)P(hp) stack. It really changed my life! Dino

Re: [users@httpd] Reverse proxy: how to map a domain.tld to a local host port

2019-10-16 Thread dino
Is there any way to map each unique domain.tld to a different app at a unique port just for that domain.tld? Why not just using virtualhosts also on your backend (tomcat,wildfly,jetty,etc)? Also, if you want to use port based VH on your backend with a single hostname per app, I would remove

Re: [users@httpd] mod_brotli vs / and / or / xor mod_deflate

2019-09-22 Thread dino
# AddOutputFilterByType DEFLATE application/rss+xml # AddOutputFilterByType DEFLATE application/xml # # # here we compress application/xml using deflate instead of brotli AddOutputFilterByType DEFLATE application/xml [/SNIP] Ciao, Dino.

[users@httpd] configure apache2 on ubuntu 16.04 vps to use php-fpm is not leading to the desired outcome

2017-07-22 Thread Dino Vliet
.0-xsl 7.0.18-0ubuntu0.16.04.1  all  XSL module for PHP (dummy) What have I missedand what should I do to have apache2 run with FastCGI? With kind regards, Dino Vliet

RE: [users@httpd] Possible virus via httpd server

2016-01-04 Thread Dino B.
Hmmm, index. Html is just default page??? Strange that that it got overwritten by some executable -- Dino Buljubasic -- Dino Buljubasic Cell 604 441 3560 Please pardon my brevity - sent from my mobile device. Please excuse any typos. On Jan 4, 2016 12:38, "Michael D. Berger"

Re: [users@httpd] Apache Performance Question

2015-07-24 Thread Dino B.
- http://httpd.apache.org/docs/2.2/mod/mpm_common.html#maxclients Hope that helps. Phil. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org -- Dino

Re: [users@httpd] Apache Performance Question

2015-07-23 Thread Dino B.
Thank you for the reply John. I'm using Apache 2.2 and I'm novice, would you mind providing some detailed steps to figure out what the issue is? If my initial explanation is vague, what other info do you need if any? Much appreciated On Jul 23, 2015 6:30 AM, Rose, John B jbr...@utk.edu wrote:

[users@httpd] Apache Performance Question

2015-07-22 Thread Dino B.
I am new to Apache, please provide adequate answer with information. Apache (2.2) is serving requests from bar-code scanning devices which scan items in warehouse. It could be 1-50 or so devices doing scans at any time. All scans will update item location in database and Apache server is the

[users@httpd] Apache Processes in Windows

2014-04-25 Thread Dino B.
Hi Apache experts, This is my first post to an Apache group, so please bear with me. I am also new to Apache in general. My understanding is that under windows, there should be only 2 httpd processes once I start my Apache server (version 2.2). One parent and one child. The child then spawns