Re: [users@httpd] cookie secure flag

2011-05-23 Thread Mark Brodis
What I have done is do a edit-header to append the "Secure" onto the Set-Cookie command coming back from the app-container through the web server. The header edit command is only available on 2.2 (likely 3.X also), but not on 2.0. Example: Header edit Set-Cookie ^(.*)$ $1;Secure; -Mark On Mon

Re: RE: [users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Petr Hracek
I thought that FIPS is within mod_ssl, right? Is it necessary to rebuild apache2 or is it enought to rebuild openssl with FIPS support? It means that flag SSLFIPS is directly part of apache2 as source code? Best regards Petr Dne 23.5.2011 21:07 "Geoff Millikan" napsal(a): > Maybe this? > > "If h

[users@httpd] cookie secure flag

2011-05-23 Thread Gil Pratte
Hello all, I'm using apache http as a reverse proxy to tomcat. http takes care of the ssl encryption. Can anyone enlighten me on how to set the cookie secure flag to true. thanks in advance, gilbert

RE: [users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Geoff Millikan
Maybe this? "If httpd was compiled against an SSL library which did not support the FIPS_mode flag, SSLFIPS on will fail." http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslfips - The official User-To-User support forum of

RE: [users@httpd] Need advice to choose a configuration

2011-05-23 Thread Geoff Millikan
> there are still a large number of "non modern" clients out there, including > anyone > using the default browser on an Android phone and anyone with any flavor of > IE > on WindowsXP Maybe it's marketing hype but commercial link below shows Subject Alternative Name certificates being su

[users@httpd] ErrorDocument 404 returns a 200 status code on local URL-path

2011-05-23 Thread Geoff Millikan
We're getting a normal "200" response when our custom "/error/404.php" is served but when a *local URL-path* is used such as "ErrorDocument 404 /error/404.php" I expected Apache 2.2.17 to return the original 404 error status code. Am I mistaken? http://httpd.apache.org/docs/current/mod/core.h

Re: [users@httpd] Searching of old posts on List

2011-05-23 Thread Yehuda Katz
http://httpd.apache.org/userslist.html > Archives are available at the Apache Mail > Archives > , MarkMail (great for searching), > MARC > , CanSeek.ca

[users@httpd] Searching of old posts on List

2011-05-23 Thread Harsimranjit singh Kler
how can i search for older mails on the apache list. Is there any Link where i can Search ?

[users@httpd] Apache flow chart

2011-05-23 Thread Krzysztof Dajka
Hi, I'd like to know if there is available request flow chart for apache server? It would be nice to glimpse at chart and find out which directives/mods take precedence. If there would be something like this: http://www.varnish-cache.org/trac/wiki/VCLExampleDefault I'd be delighted. --

[users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Petr Hracek
Dear users, I have turn on SSLFIPS on in my apache2 but it returns me following: Invalid command 'SSLFIPS', perhaps misspelled or defined by a module not included in the server configuration Do you know how to check whether apache2 or openssl is build-up with support of FIPS 140-2. Thank you in

[users@httpd] Re: Help with mod_ldap after compiling manually

2011-05-23 Thread Mark Poole
Nevermind.. strace found the problem: open("/home/bleh/output64/lib/apr-util-1/apr_ldap-1.so", O_RDONLY) = -1 ENOEN T (No such file or directory) On Mon, May 23, 2011 at 1:19 PM, Mark Poole wrote: > Hi All, > > I'm compiling openldap, apr (1.4.5), apr-util (1.3.12) and httpd > (2.2.15) manually

[users@httpd] Help with mod_ldap after compiling manually

2011-05-23 Thread Mark Poole
Hi All, I'm compiling openldap, apr (1.4.5), apr-util (1.3.12) and httpd (2.2.15) manually I'm compiling OpenLDAP first: ./configure  --enable-shared=yes --enable-static=no "--prefix=$top_dir" --enable-dynamic --enable-local=yes --enable-ipv6 --enable-ldap=yes  --enable-ssl=yes "--without-cyrus-