RE: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread Anil Dighade
Hi Steve, I tried the same few months back and had prepared one document for support team and future developers, see if it is useful for you. Copy pasting only how toinstall and configure apache with ssl part of this document. How to Compile and Install apache with mod_ssl: Steps below would desc

Re: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread frankpeng
Hi, I first set up SSL, then I set up forward proxy server. It worked. Now I am setting up reverse proxy server. It has some problem. English works. Chinese does not work. But Chinese in Tomcat works. The following are my error_log, configuration files.   [Thu Jun 29 20:39:40 2006] [notice] Apache/

Re: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread Joshua Slive
[Sending back to the list. Please keep the discussion there.] On 6/29/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi Joshua, In order to get the communication between the RPS and the web app server to be SSL though, don't you need to have two certs and a special configuration vs. having

[EMAIL PROTECTED] I'm not able to compile apache with mod_rewrite

2006-06-29 Thread Adrian Mak
I used apache 2.0.58 and here is my compile options     CC=gcc CFLAGS="-march=i686 -O3 -pipe -fomit-frame-pointer " CXX=gcc CXXFLAGS="-march=i686 -O3 -pipe -fomit-frame-pointer -felide-constructors -fno-exceptions -fno-rtti" ./configure --prefix=/usr/local/httpd- 2.0.58 --enable-module=rewrite --en

[EMAIL PROTECTED] Re: Apache v2.0.58 binaries for Windows w/SSL

2006-06-29 Thread William A. Rowe, Jr.
Doc, It was my understanding that we have completed the SSL notification process (and we had) - but shortly after shipping 2.0.58 and preparing for 2.2.2 (which needed a revised notification for the 'richer' ECC cryptography in OpenSSL 0.9.8) some potential gaps in the process were discovered. T

Re: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread Joshua Slive
On 6/29/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Thanks Johnthis is how I got the basic reverse proxying up and running :) Now I'm troubleshooting the SSL part, which books seem to be really vague on. The thing to remember is that, to the client, the back-end server doesn't exist.

Re: [EMAIL PROTECTED] issue on 304 return code

2006-06-29 Thread Joshua Slive
On 6/29/06, Qingshan Xie <[EMAIL PROTECTED]> wrote: Hi, We have an Apache-2.0.54 in front and an WebSphere in backend. Whenever Apache threw 304 return code. A lot of info in the header was stripped away. Is there any a way to keep all those header information when got 304? Which headers

Re: [EMAIL PROTECTED] (again) Can not define "default" name virtual host

2006-06-29 Thread Brian Rectanus
On 6/27/06, Matus UHLAR - fantomas <[EMAIL PROTECTED]> wrote: > > > > Now when a request arrives, the server will first check if it is using an IP > > address that matches the NameVirtualHost. If it is, then it will look at > > each section with a matching IP address and try to find one > >

RE: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread sniedermeyer
Thanks Johnthis is how I got the basic reverse proxying up and running :) Now I'm troubleshooting the SSL part, which books seem to be really vague on. Steven Niedermeyer Information Technology Services City of Bellingham 625 Halleck St Bellingham, WA 98225 Phone

[EMAIL PROTECTED] issue on 304 return code

2006-06-29 Thread Qingshan Xie
Hi, We have an Apache-2.0.54 in front and an WebSphere in backend. Whenever Apache threw 304 return code. A lot of info in the header was stripped away. Is there any a way to keep all those header information when got 304? Thx, Q.Xie __ Do Y

[EMAIL PROTECTED] connecting apache to an ssl protected mysql server

2006-06-29 Thread Chris Snyder
Does anyone know of a tutorial or similar information online that would help me understand how to connect an apache server to an SSL protected mysql server? I'm not partial to the method. If apache's built in mod_authn_dbd can do it, or if mod_auth_mysql can do it, or whatever the mechanism, I'd

RE: [EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread Ellison , John P
> > Hello Everyone, > > Just joined the list today. I've used Apache HTTP Server for simple > static > sites with the default configuration and am looking at using it for > reverse > proxying now. I'm a newbie and am confused about how to proceed with > enabling HTTPS to the reverse proxy serve

[EMAIL PROTECTED] SSL and reverse proxying

2006-06-29 Thread sniedermeyer
Hello Everyone, Just joined the list today. I've used Apache HTTP Server for simple static sites with the default configuration and am looking at using it for reverse proxying now. I'm a newbie and am confused about how to proceed with enabling HTTPS to the reverse proxy server and then from th

Re: [EMAIL PROTECTED] .htaccess error URGENT

2006-06-29 Thread Dwayne Tharpe
I tried that but no luck. I thought there would be something that I could use to just tell it ignore that it's a subdirectory name and go ahead with the re-write. Dwayne Andy Buckley wrote: Joshua Slive wrote: On 6/29/06, Dwayne Tharpe <[EMAIL PROTECTED]> wrote: Hi all, I'm new to this an

Re: [EMAIL PROTECTED] .htaccess error URGENT

2006-06-29 Thread Andy Buckley
Joshua Slive wrote: On 6/29/06, Dwayne Tharpe <[EMAIL PROTECTED]> wrote: Hi all, I'm new to this and have never used mod-rewrite before or used regular expressions. We have a need to mod_rewrite a link. Below is what I'm using in a .htaccess file: RewriteEngine on Options FollowSymLinks Rewr

Re: [EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Joshua Slive
On 6/29/06, Ryan Pendergast <[EMAIL PROTECTED]> wrote: Thanks thats a good idea. However do you know of a way to do it without having to use a virtual host? I'm trying to just specify the protocols (CacheEnable disk http://). If I do it like this (leave off the host name) requests to http://w

Re: [EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Ryan Pendergast
Thanks thats a good idea.   However do you know of a way to do it without having to use a virtual host?  I'm trying to just specify the protocols (CacheEnable disk http://).  If I do it like this (leave off the host name) requests to http://www.apache.org/ don't make cache entries.  However if i e

Re: [EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Joshua Slive
On 6/29/06, Ryan Pendergast <[EMAIL PROTECTED]> wrote: You are correct - it does catch both. How do you cache only forward proxy requests? Am I going to have to explitly put every protocol? What about ssl connect? SSL can't be cached on a proxy. CONNECT is essentially a tunnel. Most people

Re: [EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Ryan Pendergast
You are correct - it does catch both.  How do you cache only forward proxy requests? Am I going to have to explitly put every protocol?  What about ssl connect?-RyanOn 6/29/06, Joshua Slive <[EMAIL PROTECTED]> wrote: On 6/29/06, Ryan Pendergast <[EMAIL PROTECTED]> wrote:> I am trying to setup cach

Re: [EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Joshua Slive
On 6/29/06, Ryan Pendergast <[EMAIL PROTECTED]> wrote: I am trying to setup caching for my 2.2.2 Apache Proxy server. How do you setup the server to cache all forward proxy requests? By looking at the CacheEnable example in the documentation it seems as if I would have to enable it for every pr

Re: Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Joshua Slive
On 6/29/06, Dave Henderson <[EMAIL PROTECTED]> wrote: I found out that I had to add multiple NameVirtualHost definitions like the following: NameVirtualHost 192.168.0.12:80 NameVirtualHost 192.168.0.12:443 and I also changed the virtual host section to use 192.168.0.12 instead of the 192.16

Fwd: Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
I found out that I had to add multiple NameVirtualHost definitions like the following:NameVirtualHost 192.168.0.12:80 NameVirtualHost 192.168.0.12:443and I also changed the virtual host section to use 192.168.0.12 instead of the 192.168.0.13 ip address.  Tried to go back to the ssl page

RE: [EMAIL PROTECTED] Remote log files?

2006-06-29 Thread Charlie Davis
Thanks Joshua. Upgrading is my first concern but as the webservers themselves were made by a super paranoid sys admin 3 years ago, they don't have anything on them (gcc, rpm, etc...). I'll try out those log mods. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beh

Re: [EMAIL PROTECTED] .htaccess error URGENT

2006-06-29 Thread Joshua Slive
On 6/29/06, Dwayne Tharpe <[EMAIL PROTECTED]> wrote: Hi all, I'm new to this and have never used mod-rewrite before or used regular expressions. We have a need to mod_rewrite a link. Below is what I'm using in a .htaccess file: RewriteEngine on Options FollowSymLinks RewriteRule ^overview$ /g

Re: [EMAIL PROTECTED] Remote log files?

2006-06-29 Thread Joshua Slive
On 6/29/06, Charlie Davis <[EMAIL PROTECTED]> wrote: Hey all, Is there anyway to setup apache 1.3.6 to send its log files to a remote server? Info to point me in the right direction would be fine. Google has been no help. :| 1.3.6 is ancient and has several known security holes. Upgrading shou

[EMAIL PROTECTED] .htaccess error URGENT

2006-06-29 Thread Dwayne Tharpe
Hi all, I'm new to this and have never used mod-rewrite before or used regular expressions. We have a need to mod_rewrite a link. Below is what I'm using in a .htaccess file: RewriteEngine on Options FollowSymLinks RewriteRule ^overview$ /guide/index.cfm?item=Chapter&Chapter_ID=C342 [L] T

[EMAIL PROTECTED] Remote log files?

2006-06-29 Thread Charlie Davis
Hey all, Is there anyway to setup apache 1.3.6 to send its log files to a remote server? Info to point me in the right direction would be fine. Google has been no help. :| Charlie Davis WebMaster 2Wire, Inc. [EMAIL PROTECTED] www.2Wire.com 2Wire, Inc. Company Confidential. The information conta

RE: [EMAIL PROTECTED] Reverse Proxy between WebSphere and the WebServer - prevent "Bad Gateway" errors.

2006-06-29 Thread Richard de Vries
Thanks for all your replies. I got in touch with IBM, and WebSphere has a setting for this afterall. It's called "Extended Handshake" and enabling it will allow the plugin to do more extensive testing. I assume that means it will check the HTTP return code in addition to the port knock. I tested i

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
Ok, if I try to separate them, I will have to modify my NameVirtualHost definition file to something like:NameVirtualHost: 192.168.0.12:* or NameVirtualHost: 192.168.0.12but if I do that, I get error messages when I try to stop and restart the server:[Thu Jun 29 10:27:31 2006] [error]

RE: [EMAIL PROTECTED] Mod_Dav WindowsXP client

2006-06-29 Thread Chris Toledo
Yea, saw that link and others on the subject. Adding the port in Network Places address did the trick and it now works well for me. Unfortubately, I get mixed results with other users' Windows XP. Some can login but they don't get the EDIT option when they right click a file and others can't even g

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
I do have two NameVirtualHost definitions:NameVirtualHost 192.168.0.12:80 NameVirtualHost 192.168.0.13:443On my firewall, I have port 80 traffic going to 192.168.0.12 and 443 traffic going to 192.168.0.13.  Both ip's are used on the same server by way of assigning multiple ip addresses t

[EMAIL PROTECTED] CacheEnable and forward proxy

2006-06-29 Thread Ryan Pendergast
I am trying to setup caching for my 2.2.2 Apache Proxy server.  How do you setup the server to cache all forward proxy requests?By looking at the CacheEnable example in the documentation it seems as if I would have to enable it for every protocol.  Also the current documentation is a bit misleading

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Pid
Does anyone else think that this is wrong? SSLCertificateFile /etc/apache2/ssl/certs/sitename.com.crt SSLCertificateKeyFile /etc/apache2/ssl/keys/sitename.com.key >> SSLCACertificateFile /etc/apache2/ssl/root/sitename.com.crt It looks like you're telling it that the Certifica

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
I am wondering if the virtual host definitions are wrong.  Can I do the following (even though the ServerName options have the same value)?  Can I use the IP addresses like I have done below?    ServerAdmin [EMAIL PROTECTED]     ServerName demo.sitename.com     DocumentRoot

[EMAIL PROTECTED] SetOutputFilter doesn't work in s?

2006-06-29 Thread Andy Buckley
Hi, (Before I begin: I sent two messages on a similar topic to this a couple of weeks ago but got no reply: can someone please give me some feedback on whether I should report this issue as a bug or if it is my fault?) I have a long-standing problem with getting Apache 2 output filters to wor

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
Oliver,    Thanks for the info.  I will start to work on the certificate/key situation once I get the some of these other issues worked out.  Are you overly familiar with key creation, etc?Thanks, Dave [EMAIL PROTECTED] wrote: >Joshua,>Here is what is listed in the logs, but this i

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
Joshua,    I looked through the server to see if it were possible to have multiple versions of apache.  Upon looking, I noticed that the apache_common and libapache_mod_php4 packages were installed (for version 1.x of apache), everything else that was installed was for apache 2.x.  I have r

Re: [EMAIL PROTECTED] DirectoryIndex not working

2006-06-29 Thread Matus UHLAR - fantomas
On 28.06.06 16:16, Nolan Rumble wrote: > [Wed Jun 28 16:14:55 2006] [error] [client xxx.xxx.xxx.xxx] Directory index > forbidden by rule: /var/www/html/link/, referer: http://www.example.com you must allow directory indexex by setting Options +Indexes for/in the specified directory. -- Matus UH

[EMAIL PROTECTED] Re: [Fwd: ezmlm warning]

2006-06-29 Thread Joost de Heer
Emmanuel E wrote: > wonder what, how or why this happened: > Remote host said: 550-5.7.1 {mx029} The IP address of the server you are > using to connect to GMX is listed in 550-5.7.1 the Composite Blocking > List (CBL). 550-5.7.1 550-5.7.1 For additional information, please visit > 550-5.7.1

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Oliver.Schaudt
>Joshua, >Here is what is listed in the logs, but this is from this morning. I don't >know why this information hasn't been updated: > [Wed Jun 28 11:27:03 2006] [error] Init: Unable to read pass phrase [Hint: > key introduced or changed before restart?] If you don't want to enter the passp

Re: [EMAIL PROTECTED] a procedural question

2006-06-29 Thread William A. Rowe, Jr.
Paul Adamczyk wrote: I am analyzing the compliance of Web servers with the HTTP standard. I would like to request some feedback on my results. Which of the many Apache mailing lists would be most appropriate to submit that request? Email [EMAIL PROTECTED] with observations of compliance or lac

RE: [EMAIL PROTECTED] Reverse Proxy between WebSphere and the WebServer - prevent "Bad Gateway" errors.

2006-06-29 Thread Axel-Stéphane SMORGRAV
You are right. It does do port checks. Too bad it cannot determine that the application server is unavailable based on the HTTP 502 the reverse proxy would return in that case, and take the server off the list... Did you actually verify that? Truly, we abandoned using WebSphere and WebLogic plu