Re: [EMAIL PROTECTED] Applying a universal rewrite

2006-07-11 Thread Andrew Clarke
On Mon, 10 Jul 2006 17:14, Boyle Owen wrote: Thanks for your response. I have some success now, although it took a fight and there's still a problem with the location of my rewrite code. For background I'll put up the geoip.conf include file contents: GeoIPEnable On GeoIPDBFile /usr/lo

Re: [EMAIL PROTECTED] Applying a universal rewrite

2006-07-09 Thread Andrew Clarke
On Mon, 10 Jul 2006 11:31, Andrew Clarke wrote: > > [second posting; looks like the mailing list filters out messages > containing the name of real "somewhere unpleasant" websites...] Dammit my first posting finally arrived just as I sent this one on it's way. I thought m

[EMAIL PROTECTED] Applying a universal rewrite

2006-07-09 Thread Andrew Clarke
Hi folks, I've downloaded and installed the free "Lite" version of a very nice little tool which will allow me to know the country a connection is coming from; I'm going to use it to block users of my website based on country so that I can eliminate vast ranges of script kiddies trying to atta

[EMAIL PROTECTED] Applying a universal rewrite

2006-07-09 Thread Andrew Clarke
Hi folks, I've downloaded and installed the free "Lite" version of a very nice little tool which will allow me to know the country a connection is coming from; I'm going to use it to block users of my website based on country so that I can eliminate vast ranges of script kiddies trying to atta

Re: [EMAIL PROTECTED] htpasswd -c -m -b validation

2005-10-10 Thread Andrew Clarke
On Tue, 13 Sep 2005 19:57, [EMAIL PROTECTED] wrote: > > i ve the http password file which is encrypted using htpasswd -c -m > -b command i.e the password which is encrypted using md5 algorithm .i > want to validate the user input password against the stored encrypted > password Umm, if you k

Re: [EMAIL PROTECTED] howto configure parameterised personal cgi bin

2005-10-10 Thread Andrew Clarke
On Tue, 11 Oct 2005 03:47, Joshua Slive wrote: > > Apache does *not* put the suid bit back. This must be something in > your OS. I still haven't been able to find it, but it's quite irritating. I'm starting to think it's part of an integrity-checking ritual somewhere deep in the O/S but I canno

[EMAIL PROTECTED] howto configure parameterised personal cgi bin

2005-10-09 Thread Andrew Clarke
Hi folks, I want to configure my Apache 2.0.54 so support a personalised cgi bin, specifically so that I can use the DirectoryIndex directive. I have the usual public_html definition: AllowOverride FileInfo AuthConfig Limit Indexes Options +Indexes DirectoryIndex /

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-04 Thread Andrew Clarke
On Wed, 05 Oct 2005 13:45, William A. Rowe, Jr. wrote: > > And good beer at that, I understand :) It's wet, it's cold, it contains roughly 5% alcohol by volume. What more can you ask for? > The 'script tools' that were part of mod_ssl were never folded into > httpd 2.0, we can kick the idea of r

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-04 Thread Andrew Clarke
On Tue, 04 Oct 2005 20:00, Paul Annesley wrote: > > Specifying http:// will cause the browser to use port 80 by default. > Specifying https:// will cause the browser to use port 443 by default. > > However, apache does not automatically assume that 80 == http and 443 > == https, you need to use the

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-04 Thread Andrew Clarke
On Tue, 04 Oct 2005 17:20, William A. Rowe, Jr. wrote: > > Feel free to buy a draft for Boyle (should he get there) and myself at > ApacheCon/US '05 (www.apachecon.com). If but someone would pay for me to take a junket overseas for a conference. I'm in Sydney. Shouldn't you guys schedule these co

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-04 Thread Andrew Clarke
On Tue, 04 Oct 2005 17:09, Boyle Owen wrote: > > This is fine. The use of "https" in the address signals the browser to > use port 443 so the two sites are distinct at the TCP/IP layer. What you > then need in your config is: > > Listen 80 > Listen 443 > > > DocumentRoot > > > > DocumentRoo

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-04 Thread Andrew Clarke
On Tue, 04 Oct 2005 17:06, Boyle Owen wrote: > > Well, I was trying to clear some confusion without everyone's eyes > glazing over. That inevitably means taking shortcuts with the precise > details of HTTPS session negotiation. Heh. Computers are tricky things. Sometimes our eyes NEED to glaze ove

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-03 Thread Andrew Clarke
On Tue, 04 Oct 2005 16:44, Boyle Owen wrote: > > Just to clear up some apparent confusion on this thread: I think the > point everyone is missing is that an SSL-encrypted website uses a > *different protocol* than plain old HTTP. Instead of thinking of SSL as > some sort of add-on (like mod_perl) t

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-03 Thread Andrew Clarke
On Tue, 04 Oct 2005 16:07, Axel-Stéphane SMORGRAV wrote: > If you are planning on serving both SSL and non-SSL connections, then > yes, a separate virtual host is necessary for one of the two. > > The fact is that the SSLEngine directive is only valid in a server or > virtual host context. I do not

Re: [EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-03 Thread Andrew Clarke
On Tue, 04 Oct 2005 10:36, Paul Annesley wrote: > I believe the error you are getting is often caused by trying to serve > plain HTTP on port 443, instead of HTTPS which the browser is > expecting.. That's a reasonable suggestion. I have not set any parameters which tell it what port serves which

[EMAIL PROTECTED] adding SSL - is a distinct virtual host mandatory?

2005-10-03 Thread Andrew Clarke
SuSE 9.3 hosting Apache 2.0.53 (the build from SuSE installs) and Firefox 1.0.6 for a self-contained server and workstation on a laptop. I'm working on getting https working for the first time, and keep reading hints that it's usual to make another virtual host to carry the SSL. Is this requir

Re: [EMAIL PROTECTED] DirectoryIndex /mybin/myindex.cgi

2005-09-08 Thread Andrew Clarke
On Fri, 09 Sep 2005 11:51, Joshua Slive wrote: > > Just remove the suid bit from the suexec binary (or rename it) and > then restart apache. Will do. Now I need to find it looking, ok there it is. Problem solved. Now, it looks like the script has /srv/www/cgi-bin as it's cwd. They are not m

Re: [EMAIL PROTECTED] DirectoryIndex /mybin/myindex.cgi

2005-09-08 Thread Andrew Clarke
On Thu, 08 Sep 2005 22:58, Joshua Slive wrote: > > Interesting. I haven't looked into it in detail, but I suspect that > what you are trying to do is not possible with suexec activated. If > the request is run through mod_userdir, then it must follow the > user-specific suexec rules. That includ

[EMAIL PROTECTED] DirectoryIndex /mybin/myindex.cgi

2005-09-08 Thread Andrew Clarke
I must be missing some essential detail, but I cannot understand what. What does it take to make DirectoryIndex work with a CGI? Thanks in advance, Andrew Clarke This email is from Civica Pty Limited and it, together with any attachments, is confidential to the intended recipient(s) and the