Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
> > You can find more about openssl tool set here: > https://www.openssl.org/docs/apps/s_client.html, its perfect for ssl > troubleshooting. > > By the way, did you import the CA_chain.pem in the browsers?

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 2:27 PM, dE wrote: > On 10/08/14 05:18, Igor Cicimov wrote: > > > On Wed, Oct 8, 2014 at 1:59 AM, dE wrote: > >> On 10/07/14 18:12, Igor Cicimov wrote: >> >> >> >> On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: >> >>> Hi. >>> >>> I'm in a situation where I got 3 certificate

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread dE
On 10/08/14 05:18, Igor Cicimov wrote: On Wed, Oct 8, 2014 at 1:59 AM, dE > wrote: On 10/07/14 18:12, Igor Cicimov wrote: On Tue, Oct 7, 2014 at 2:51 AM, dE mailto:de.tec...@gmail.com>> wrote: Hi. I'm in a situation where I got 3 certifi

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Wed, Oct 8, 2014 at 1:59 AM, dE wrote: > On 10/07/14 18:12, Igor Cicimov wrote: > > > > On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: > >> Hi. >> >> I'm in a situation where I got 3 certificates >> >> server.pem -- the end user certificate which's sent by the server to the >> client. >> intermed

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Daniel
changelog in 2.4.8 " *) mod_ssl: Remove the hardcoded algorithm-type dependency for the SSLCertificateFile and SSLCertificateKeyFile directives, to enable future algorithm agility, and deprecate the SSLCertificateChainFile directive (obsoleted by SSLCertificateFile). [Kaspar Brand]

Re: [users@httpd] Re: reg: apache webserver 2.2.27 compilation on linux OS

2014-10-07 Thread Pankaj Singh
You can follow the configuration manual on apache.org for the build process. Thanks Pankaj Singh On Wed, Oct 8, 2014 at 12:34 AM, venu thangalapally wrote: > Any one compiled http 2.2.7 on Linux OS ? please suggest what all packages > we need and what steps need to be followed. > > Reg

[users@httpd] Re: reg: apache webserver 2.2.27 compilation on linux OS

2014-10-07 Thread venu thangalapally
Any one compiled http 2.2.7 on Linux OS ? please suggest what all packages we need and what steps need to be followed. Regards Venu On Tue, Oct 7, 2014 at 10:04 AM, venu thangalapally wrote: > Hi, > while installing the apache http 2.2.27 on linux OS, am getting > these exceptions and cou

Re: [users@httpd] Apache side issue.....

2014-10-07 Thread Pankaj Singh
Server indexing is set to off, you can upload any pages to test with. Thanks Pankaj Singh On Tue, Oct 7, 2014 at 11:43 PM, Bill Vance wrote: > > Howdy; > > I'm using kubuntu 12.04, and this is kind of a side issue. > I had dwww working, but then it inexplicably quit. When > I type, "dww

[users@httpd] Apache side issue.....

2014-10-07 Thread Bill Vance
Howdy; I'm using kubuntu 12.04, and this is kind of a side issue. I had dwww working, but then it inexplicably quit. When I type, "dwww progname", instead of being presented with a bunch of info options in my browser, I get: 403 Forbidden You don't have permission to access /cgi-bin/ on thi

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread dE
On 10/07/14 22:42, Daniel wrote: SSLCertificateChainFile is deprecated in 2.4 in favour of SSLCaCertificateFile 2014-10-07 16:59 GMT+02:00 dE >: On 10/07/14 18:12, Igor Cicimov wrote: On Tue, Oct 7, 2014 at 2:51 AM, dE mailto:de.tec...@gmail.com>> wrote:

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Daniel
SSLCertificateChainFile is deprecated in 2.4 in favour of SSLCaCertificateFile 2014-10-07 16:59 GMT+02:00 dE : > On 10/07/14 18:12, Igor Cicimov wrote: > > > > On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: > >> Hi. >> >> I'm in a situation where I got 3 certificates >> >> server.pem -- the end user

[users@httpd] reg: apache webserver 2.2.27 compilation on linux OS

2014-10-07 Thread venu thangalapally
Hi, while installing the apache http 2.2.27 on linux OS, am getting these exceptions and could not start up webserver with /apps/Oracle/apache2.2/bin/httpd: error while loading shared libraries: libexpat.so.0: cannot open shared object file: No such file or directory i see these while tryi

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread dE
On 10/07/14 18:12, Igor Cicimov wrote: On Tue, Oct 7, 2014 at 2:51 AM, dE > wrote: Hi. I'm in a situation where I got 3 certificates server.pem -- the end user certificate which's sent by the server to the client. intermediate.pem -- server.pe

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread Igor Cicimov
On Tue, Oct 7, 2014 at 2:51 AM, dE wrote: > Hi. > > I'm in a situation where I got 3 certificates > > server.pem -- the end user certificate which's sent by the server to the > client. > intermediate.pem -- server.pem is signed by intermediate.pem's private key. > issuer.pem -- intermediate.pem i

Re: [users@httpd] Cannot get certificate chain to work.

2014-10-07 Thread dE
On 10/06/14 22:26, Daniel wrote: I found myself in a similar situation and I couldn't find the reason but I did find a workaround. To work around this, make a pkcs12 file with all files in it, your private key and the whole chain up until the root CA certificate, then extract them back out fr

RE: [users@httpd] How to skip setting HSTS header for certain virtual hosts only?

2014-10-07 Thread Eddie B
I am using SetEnvIF Host "^[dev\.domain\.com]$|^[\w+\.dev\.domain\.com]$" AllowDomain=1 SetEnvIF AllowDomain HTTPS HEADER_PROCESSING=1 Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" env=HEADER_PROCESSING To avoid sending the header to dev.domain.com or xx.