Re: [users@httpd] SSLOpenSSLConfCmd DHParameters and 2048-bit groups in Apache httpd 2.2.29 (current)

2015-05-22 Thread Yann Ylavic
On Fri, May 22, 2015 at 11:08 PM, karl karloff wrote: > > Apache httpd 2.4.8+ (including 2.4.12 -- current) appear to have support for > this using the a configuration entry similar to this one: > > SSLOpenSSLConfCmd DHParameters "/PATH/dhparams.pem" > > It has also been reported that Apa

[users@httpd] Re: Removing query string through .htaccess

2015-05-22 Thread Kurtis Rader
On Thu, May 21, 2015 at 10:02 PM, Bob wrote: > Thanks for your kind response. I have tried your rule sets but > unfortunately it is working as before. > > i.e. http://mydomain.com/page1/?xyz and http://mydomain.com/page1?xyz > both redirect to http://mydomain.com My guess is that you still have

[users@httpd] SSLOpenSSLConfCmd DHParameters and 2048-bit groups in Apache httpd 2.2.29 (current)

2015-05-22 Thread karl karloff
In light of the recent publicity of the "logjam attack" (e.g. https://weakdh.org/) Diffie-Hellman key exchange has come under some scrutiny. Industry wisdom seems to suggest that to prevent possible nation-state decryption an httpd server should generate a 2048-bit group of parameters (for Diff

[users@httpd] Apache 24 & DAViCal issue with mod_rewrite

2015-05-22 Thread Leander Schäfer
Hi I have a fully functional DAViCal installation. Clients can connect the regular way via URL like: https://DAViCal.Hostname.MyDomain.Local/caldav.php/username/collection while "collection" stands for a calendar or addressbook name. Now I also need to make it possible that clients can provi

[users@httpd] preventing acting as open relay

2015-05-22 Thread robert
Hi there, I try to harden a virtual host against acting as proxy relay. However running the command: curl --proxy http://slovensko.ch:80 http://yahoo.com does return the yahoos site, so I assume, that I failed. Can anybody please point me to any mistake in the following configuration. The sit

[users@httpd] Warning at startup while using a variable set by rewrite rule in the ProxyPassReverseCookieDomain directive

2015-05-22 Thread Sylvain Goulmy
Hi all, Since i migrate from Apache 2.2.22 to 2.4.10 i have the following warning when i launch Apache : [core:warn] [pid 26605:tid 140610782807808] AH00111: Config variable ${B2C_DOMAIN} is not defined This variable is set using a rewrite rule : ProxyPassInterpolateEnv On RewriteCond %