Re: [EMAIL PROTECTED] Static linking with libexpat

2008-12-04 Thread Ravindra
Do you mean to say expat code has been removed from Apache 2.2.10, because what I mentioned used to work for Apache 2.0.59 ? Thanks, Ravindra On Fri, Dec 5, 2008 at 4:13 AM, Bennett, Tony <[EMAIL PROTECTED]> wrote: > From: Ravindra [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 04, 2008 12:

RE: [EMAIL PROTECTED] Static linking with libexpat

2008-12-04 Thread Bennett, Tony
From: Ravindra [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2008 12:05 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] Static linking with libexpat Hi, I used "--disable-shared --with-expat=xml/expat" option while configuring Apache, but it still seems to be linking dynamical

[EMAIL PROTECTED] Static linking with libexpat

2008-12-04 Thread Ravindra
Hi, I used "--disable-shared --with-expat=xml/expat" option while configuring Apache, but it still seems to be linking dynamically with libexpat. I want it to link with libexpat statically. $ ldd httpd libm.so.6 => /lib/i686/libm.so.6 (0x40032000) libexpat.so.0 => /usr/lib/libexpa

Re: [EMAIL PROTECTED] Re: Run Apache as Non Root user on port other than 80

2008-12-04 Thread André Warnier
hugh williams wrote: [...] And yet another possibility, technically speaking. It is not secure in a general sense, and your sysadmins might not like it at all for good reasons. So this is not a recommendation, it is just to indicate what is possible technically. When Apache starts and reads its

[EMAIL PROTECTED] mod_deflate working on all vhosts except port 80

2008-12-04 Thread David Enete
Hi. I've gotten mod_deflate to deflate files as intended for all vhosts except for the primary site on port 80. I've even duplicated the files under one vhost to 80, and they still wont deflate. I've included a good amount of detail about configuration, headers, and results below. If you have a

Re: [EMAIL PROTECTED] TRACE and TRACK methods

2008-12-04 Thread William A. Rowe, Jr.
Ravindra wrote: > Hi, > > Does Apache 2.2.10 support TRACE and TRACK methods by default ? TRACK (DEBUG etc) are not RFC 2616, they aren't implemented. TRACE is active by default, see the TraceEnable directive. - The official

RE: [EMAIL PROTECTED] TRACE and TRACK methods

2008-12-04 Thread Gene LeDuc
Very cool tool, thanks for sharing it! At 09:45 AM 12/4/2008, Hollie Hollis wrote: Here's a nifty little Web site that will let you test your various URLs for Trace. http://web-sniffer.net/ -Original Message- From: Gene LeDuc [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2008 1

RE: [EMAIL PROTECTED] TRACE and TRACK methods

2008-12-04 Thread Hollie Hollis
Here's a nifty little Web site that will let you test your various URLs for Trace. http://web-sniffer.net/ -Original Message- From: Gene LeDuc [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2008 11:37 AM To: users@httpd.apache.org; users@httpd.apache.org Subject: Re: [EMAIL PROTE

Re: [EMAIL PROTECTED] TRACE and TRACK methods

2008-12-04 Thread Gene LeDuc
Don't know about TRACK, but TRACE is enabled by default. At 08:15 AM 12/4/2008, Ravindra wrote: Hi, Does Apache 2.2.10 support TRACE and TRACK methods by default ? How do I test if these are enabled on my Apache ? Thanks, Ravindra -- Gene LeDuc, GSEC Security Analyst San Diego State Univer

[EMAIL PROTECTED] Re: Run Apache as Non Root user on port other than 80

2008-12-04 Thread hugh williams
Hello; One other possibility is, if your administrators don't want to manage your Apache setup, perhaps they can be persuaded to manage their own Apache, a very simple one (which you could build, configure, and deliver to them). This additional server instance would do nothing except forward

[EMAIL PROTECTED] TRACE and TRACK methods

2008-12-04 Thread Ravindra
Hi, Does Apache 2.2.10 support TRACE and TRACK methods by default ? How do I test if these are enabled on my Apache ? Thanks, Ravindra - The official User-To-User support forum of the Apache HTTP Server Project. See http://http

[EMAIL PROTECTED] Denis Peuziat is on sickness leave.

2008-12-04 Thread Denis Peuziat
I will be out of the office starting 04/12/2008 and will not return until 08/12/2008. For any issues, contact Office Automation hotline on 6400

RE: [EMAIL PROTECTED] SSLCipherSuite not disabling export ciphers?

2008-12-04 Thread Hollie Hollis
We have a few different renditions of Apache installed, a Red Hat rpm version and a manually compiled version, and here's how ours are listed: SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP Thus far this set-up has passed PCI compliance scanning. -Original Message---

[EMAIL PROTECTED] SSLCipherSuite not disabling export ciphers?

2008-12-04 Thread David Hubbard
Can someone tell me if the SSLCipherSuite directive has any known issues with not fully adhering to what it is given? I've been trying to make a server pci compliant by disabling all weak SSL ciphers and whatever I try is not disabling the export grade ciphers. I'm using: SSLCipherSuite HIGH:MED