[users@httpd] RE: SSL Client Cert Authentication - SSLRequires

2017-02-25 Thread Bharath.C.Kolla
Surprising that no one else had to deal with this issue before. Correct me if I am wrong, is the substring for SSLRequire the only way to achieve the desired outcome? Thanks, Bharath Kolla From: bharath.c.ko...@wellsfargo.com.INVALID [mailto:bharath.c.ko...@wellsfargo.com.INVALID] Sent: Friday

[users@httpd] SSL Client Cert Authentication - SSLRequires

2017-02-24 Thread Bharath.C.Kolla
We have a client cert that contains multiple OU's (3 to be specific), but we just need to construct a substring for SSLRequire to evaluate 2 specific OU's from the OU list. I tried using: SSLRequire ( %{SSL_CLIENT_S_DN_O} eq "abc" \ and %{SSL_CLIENT_S_DN_OU} in {"test1","dev","apacheorg

RE: [users@httpd] Apache upgrade on Aix

2017-02-10 Thread Bharath.C.Kolla
Krishnachaitanya, You can set compiler flags before time to set up the build environment. You might also need coreutils depending on what your build server looks like. Below are some of the options that come in handy: export CC=/usr/vacpp/bin/xlc --- or wherever you have the compiler installed

RE: [users@httpd] Apache upgrade on Aix

2017-02-07 Thread Bharath.C.Kolla
I installed the xlc compilers on AIX to compile Apache/openssl etc. On the other hand, I compiled python 2.7.10 with gcc on AIX - 7.2 without any issues. So, if you are not sure of how the old build was built, I would try and make the gcc work on AIX as IBM compilers are very expensive. It’s the

RE: [users@httpd] Apache 2.2.32 failing F5 health check

2017-02-07 Thread Bharath.C.Kolla
Eric, Adding -clrf option at the end of openssl s_client -connect : -clrf gave a 200 OK response. Thanks a ton! Bharath Kolla -Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Monday, February 06, 2017 6:43 PM To: users@httpd.apache.org Subject: Re: [users@httpd

RE: [users@httpd] Apache 2.2.32 failing F5 health check

2017-02-06 Thread Bharath.C.Kolla
broken apache httpd version 2.2.32: openssl s_client -connect : -pause when paused input this. GET /login/healthcheck/content_check.wecv HTTP/1.0 Host: You get bad request back from apache httpd HTTP/1.1 400 Bad Request Working apache httpd version 2.2.31: openssl s_client -connect : -pause when

RE: [users@httpd] Apache 2.2.32 failing F5 health check

2017-02-06 Thread Bharath.C.Kolla
This issue is different from the CR LF issue. We checked for any delimiters/spaces etc. The F5 health checks work fine with 2.2.31 on the same server, without any change in the configuration, but when we upgrade to 2.2.32, apache reports a 400 error. Bharath Kolla -Original Message-

[users@httpd] Apache 2.2.32 failing F5 health check

2017-02-04 Thread Bharath.C.Kolla
Hi, We recently upgraded to Apache 2.2.32 and are facing issues with F5 health check. The openssl s_client from F5 to check Apache web server's health is being returned by the 2.2.32 server as 400 error. We don't see the issue with 2.2.31 however. The application can be accessed with web server