Re: [us...@httpd] FIPS 140_2 compliant for mod_proxy?

2010-03-01 Thread Krist van Besien
On Mon, Mar 1, 2010 at 9:49 PM, Mike Trent wrote: > > I am asking if FIPS 140-2 support is available for mod_proxy when running > SSL. It is supported in apache SSL proper with this patch: mod_proxy itself never "runs" SSL. SSL is always handled by mod_ssl. What is it exactly that you are trying

[us...@httpd] Feature request: Set lbfactor to 0 in mod_proxy_balancer

2010-03-01 Thread Cameron Stokes
First off, please let me know if this is not the right place to submit a feature request for an httpd module. I searched the website but could not find instructions to do this and did not want to submit this to the bug tracker. We have been using httpd and mod_proxy_balancer for some time now and

Re: [us...@httpd] Problems with error logs under mpm_worker

2010-03-01 Thread Ross Lawrie
On Fri, 2010-02-19 at 15:01 -0500, Jeff Trawick wrote: > On Wed, Feb 17, 2010 at 2:55 PM, Ross Lawrie wrote: > > > I've recently switched my server over to using mpm_worker rather than > > mpm_prefork, and I'm having problems with much reduced information in > > the error logs. > > > > Whereas be

[us...@httpd] Deny Directory: "Deny from All" vs. "404 Not Found"

2010-03-01 Thread Stefan Lasiewski
I've inherited with a web host which contains some sensitive files & directories like .svn, .htaccess and about 10 others. We are in the process of cleaning these up, but that may take a while. I want to prevent Apache from returning any information whatsoever regarding these files & directories.

Re: [us...@httpd] FIPS 140_2 compliant for mod_proxy?

2010-03-01 Thread Mike Trent
I am asking if FIPS 140-2 support is available for mod_proxy when running SSL. It is supported in apache SSL proper with this patch: https://issues.apache.org/bugzilla/show_bug.cgi?id=46270 https://issues.apache.org/bugzilla/show_bug.cgi?id=46270 You seem to be referring to another discussion t

Re: [us...@httpd] FIPS 140_2 compliant for mod_proxy?

2010-03-01 Thread Gaël PERRON
I don't understand what do you talk about SSL, because, maybe I try to connect on 443, but I don't have any echo. If apache send data to php script, my script just repeat the data (echo). Here my PHP script can get only the first request. This isn't php in cause, because the strace don't view a

[us...@httpd] FIPS 140_2 compliant for mod_proxy?

2010-03-01 Thread Mike Trent
We have apache httpd running in FIPS 140-2 mode for SSL and it runs correctly. FIPS is enabled and only FIPS compliant algorithms are used. However when running in proxy mode (mod_proxy) the SSL handshaking to the server indicates that apache mod_proxy is not running in FIPS mode. Is there a patch

[us...@httpd] users@httpd.apache.org

2010-03-01 Thread Gaël PERRON
Hi, I'm French, sory for my bad English. I currently to develop an PHP proxy. My question doesn't for PHP code, but for the implementation of "CONNECT" requests method on apache. If I send on my Apache2 server an CONNECT request I can't read a streem "forever". For exemple : Chambre:~ Galou

[us...@httpd] SSL_CLIENT_S_DN_UID not available with client certificate authentication

2010-03-01 Thread David (Dave) Donnan
Hello and thanks for all your help in the past. I'm an x SUN (iplanet/Sun ONE) employee retraining on OpenSource so I really appreciate any help that you can give me. It's incredible to see this community helping each other (for FREE !) and I intend to participate actively in the future. I've

RE: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-01 Thread Ruiyuan Jiang
Thanks for the response, Krist. The version of openssl that I am using is good 0.98l. The problem is the Apache since I can't use 2.2.14 because the bug it has. See my another post about the page does not refresh automatically after user logs in. I guess I have to try to use work around. By the

Re: [us...@httpd] memory problems, I lose control of the entire server

2010-03-01 Thread Tom Evans
On Sun, Feb 28, 2010 at 5:24 PM, Alvise Nicoletti wrote: > Hi. > I searched help from several months ago with no success. > So I'll repeat again my problem hoping that this time someone will answer. > > I often (3 times in a month) control of my virtual server, so I have to call > the provider to

Re: [us...@httpd] Force caching of responses with no explicit expiry date, where the request contains a query string

2010-03-01 Thread Alf Eaton
On 28 February 2010 12:35, Eric Covener wrote: > On Sun, Feb 28, 2010 at 7:33 AM, Alf Eaton wrote: >> On 27 February 2010 04:12, Jonathan Zuckerman wrote: >>> On Fri, Feb 26, 2010 at 6:39 AM, Alf Eaton wrote: This seems to be something that's been around for a while, but I haven'

Re: [us...@httpd] Order of log entries in the access log?

2010-03-01 Thread Krist van Besien
On Fri, Feb 26, 2010 at 11:29 PM, Geoff Millikan wrote: > What order does Apache write the log entries? > > I'm assuming that if Apache serves 100 responses all in the same time second > window (100 responses per second) I suppose it's going to write them in the > order the response happened and n

Re: [us...@httpd] Number of https virtual hosts support under v2.0.59

2010-03-01 Thread Krist van Besien
On Fri, Feb 26, 2010 at 9:55 PM, Ruiyuan Jiang wrote: > So I wonder whether Apache 2.0.59 supports more than one https reverse proxy > setup? Thanks in advance. You probably are trying to use name based https vertual posts. This used to be impossible, not due to limitations in apache, but due t