Thanks for the information, Patrick. Ben
On Wed, Nov 5, 2014 at 3:41 AM, Patrick Middleton <patr...@onestep.co.uk> wrote: > > On 4 Nov 2014, at 20:40, Benjamin Chew wrote: > > ... > >> >> If you want to see how I got things to work, read on... >> > ... > >> >> Other things that I had to do after I built the adaptor: >> >> - I then created the directory /System/Library/WebObjects/Adaptors/Apache2.4/ >> and moved the adaptor there >> >> - Copied the apache.conf file from >> /System/Library/WebObjects/Adaptors/Apache2.2 >> to >> /System/Library/WebObjects/Adaptors/Apache2.4 >> >> - Change the path in the 2nd line of apache.conf to: >> LoadModule WebObjects_module /System/Library/WebObjects/ >> Adaptors/Apache2.4/mod_WebObjects.so >> > ... > > In an ideal world, by convention you would be placing this stuff in > /Library/ , not /System/Library/ . You can put it anywhere you like, > provided Apache can find it. > > .... > > >> - I did find it a little weird that this was already in my httpd.conf >> (maybe it wasn't stock after all?), but if you don't have it, you need to >> add it: >> <IfModule alias_module> >> ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) >> "/Library/WebServer/CGI-Executables/$1" <--- ADD THIS LINE >> </IfModule> >> > > Mmm? > Head to http://httpd.apache.org/ , find and download httpd-2.4.10.tar.gz > , search the source code for the word webobjects -- you won't find it. > Head to http://www.opensource.apple.com/release/os-x-1010/ , find and > download apache-793 [ http://www.opensource.apple. > com/tarballs/apache/apache-793.tar.gz ], search the source code for the > word webobjects -- you will find it in patches/PR-5432464.diff_httpd.conf > , which looks like this: > > =-=-=-=-=-=-=-=-= > --- docs/conf/httpd.conf.in.orig 2012-11-07 19:05:38.000000000 -0800 > +++ docs/conf/httpd.conf.in 2013-11-11 14:30:00.000000000 -0800 > @@ -246,7 +246,7 @@ > # client. The same rules about trailing "/" apply to ScriptAlias > # directives as to Alias. > # > - ScriptAlias /cgi-bin/ "@exp_cgidir@/" > + ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) "@exp_cgidir@/$1" > > </IfModule> > =-=-=-=-=-=-=-=-= > > > ie, Apple's stock build of Apache 2.4.9 (and 2.2.x, if you care to repeat > the exercise for OSX 10.9.x and earlier) does indeed have a default > configuration that is tweaked so that requests for URLs /cgi-bin/WebObjects > are not processed by the CGI handler. > > > Still reading? OSX 10.10 ships with Apache 2.4.9, the SSL module uses > OpenSSL and the libraries shipped are OpenSSL 0.9.8za . The current > release of Apache is 2.4.10, and OpenSSL is 0.9.8zc or 1.0.1j. If you are > deploying on OSX, and care, or are obliged to care, about running > fully-patched software with no known vulnerabilties or exploits, what Apple > ships will no longer do. When Apple ships security updates, any Apache or > OpenSSL included will be newer, but rarely new enough. Learning to build > your own Apache 2.x and OpenSSL is something I recommend. > > -- Patrick > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/webobjects- > dev/bchew%40smarthealth.com > > This email sent to bc...@smarthealth.com >
_______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
