[users@httpd] SSL - How client certificates are verified?

2015-08-22 Thread Sterpu Victor
Hello I have a web page that asks for client certificate. These are the options for this: SSLVerifyClient require SSLVerifyDepth 10 How does SSLVerifyClient verifies the client certificate? This option protects against certificates manual made with a fake public-private key pair? So can someoa

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-22 Thread jeffmonte101 .
Hey Mohan, You may want to take a look into this link. http://blog.ivanristic.com/2013/08/compiling-apache-with-static-openssl.html The above link shows how to do that. On Friday, August 14, 2015, Mohanavelu Subramanian wrote: > Hi Daniel, > > Thanks a lot for the reply. > > I have download

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Kurtis Rader
On Sat, Aug 22, 2015 at 1:15 PM, Tom Browder wrote: > Sorry for the confusion, Kurt, but I appreciate your look and > analysis. Shall I file the bug, or would it be better coming from > you. You should open the issue since I have no special relationship with the project. I was simply intrigued

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Tom Browder
On Sat, Aug 22, 2015 at 2:12 PM, Kurtis Rader wrote: ... > I was confused as well since your original message made it sound like you > saw DOCUMENT_ROOT in the 2.2 CGI environment and not in the 2.4 CGI > environment. Which I simply assumed meant someone had updated the code to > more strictly co

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Kurtis Rader
On Sat, Aug 22, 2015 at 9:11 AM, Tom Browder wrote: > On Sat, Aug 22, 2015 at 11:03 AM, Eric Covener wrote: > > On Sat, Aug 22, 2015 at 12:01 PM, Tom Browder > wrote: > >> Mine, too. > > > > I'm confused, is this where the thread started or did you have to > > change something in your scripts f

Re: [users@httpd] svn export - how come it bypasses authentication??

2015-08-22 Thread David Newman
This is probably a question for the subversion list, but I would bet your credentials have been cached in ~/.subversion/auth -Dave On Fri, Aug 21, 2015 at 12:38 PM, lejeczek wrote: > hi everybody > > a usual config: > > ... > Options Indexes MultiViews FollowSymLinks > AllowOverride No

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Tom Browder
On Sat, Aug 22, 2015 at 11:03 AM, Eric Covener wrote: > On Sat, Aug 22, 2015 at 12:01 PM, Tom Browder wrote: >> Mine, too. > > I'm confused, is this where the thread started or did you have to > change something in your scripts for 2.4? The thread began with my query about whether anything chang

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Eric Covener
On Sat, Aug 22, 2015 at 12:01 PM, Tom Browder wrote: > Mine, too. I'm confused, is this where the thread started or did you have to change something in your scripts for 2.4? - To unsubscribe, e-mail: users-unsubscr...@httpd.apac

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Tom Browder
On Sat, Aug 22, 2015 at 10:37 AM, Eric Covener wrote: > On Sat, Aug 22, 2015 at 11:19 AM, Tom Browder wrote: ... >> So that's my confusion: it [DOCUMENT_ROOT] is not listed in the RFC and the >> Apache docs >> do not mention it that I can find, but Apache 2.4 does pass it. > > It's set for my CG

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Eric Covener
On Sat, Aug 22, 2015 at 11:19 AM, Tom Browder wrote: > Thanks, Kurt, but my problem specifically is the DOCUMENT_ROOT which > Apache 2.4 does pass but it's not mentioned in the RFC that I can > find. I first started using it because it is mentioned in "CGI > Programming with Perl" (Scott Guelich

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Tom Browder
On Sat, Aug 22, 2015 at 10:02 AM, Kurtis Rader wrote: > On Sat, Aug 22, 2015 at 3:41 AM, Tom Browder wrote: >> >> On Aug 20, 2015 5:03 PM, "Tom Browder" wrote: >> > I had some CGI scripts running on Apache 2.2 which tested for >> > "$ENV{DOCUMENT_ROOT}" and worked fine. >> > >> > Now I am attemp

Re: [users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Kurtis Rader
On Sat, Aug 22, 2015 at 3:41 AM, Tom Browder wrote: > On Aug 20, 2015 5:03 PM, "Tom Browder" wrote: > > I had some CGI scripts running on Apache 2.2 which tested for > > "$ENV{DOCUMENT_ROOT}" and worked fine. > > > > Now I am attempting to use the same scripts on Apache 2.4 and, so far, > > I ca

Re: [users@httpd] apache segfault debugging with gdb - need advice

2015-08-22 Thread R T
>However, in my experience it is unusual for a too low limit on the number of open files to result in a segmentation fault. Especially in a well written program like Apache HTTPD. A well written program will normally check whether the >open (or any syscall which returns a file descriptor) failed an

Re: [users@httpd] apache segfault debugging with gdb - need advice

2015-08-22 Thread Daryl King
I have set my siege concurrency level a bit lower (20 users) and that seems to have resolved the segfault issue. Its strange that I hadn't read anywhere else that a lack of resources could cause that, but there it is. I guess that running Debian 8, Apache 2.4.10, php-fpm and Mariadb was just a bit

[users@httpd] Re: CGI environment variables different between 2.2 and 2.4?

2015-08-22 Thread Tom Browder
On Aug 20, 2015 5:03 PM, "Tom Browder" wrote: > I had some CGI scripts running on Apache 2.2 which tested for > "$ENV{DOCUMENT_ROOT}" and worked fine. > > Now I am attempting to use the same scripts on Apache 2.4 and, so far, > I can't seem to find that variable defined. Okay, all is well, but wh