Re: [users@httpd] Request_URI and ErrorDocument interaction ?

2017-09-18 Thread Yann Ylavic
On Mon, Sep 18, 2017 at 11:48 AM, Cordente Emmanuel wrote: > > Is there any documentation explaining the all the env variable of the > previous request are stored under REDIRECT_xxx ? https://httpd.apache.org/docs/2.4/custom-error.html#variables seems to mention that. --

Re: [users@httpd] Request_URI and ErrorDocument interaction ?

2017-09-18 Thread Yann Ylavic
On Mon, Sep 18, 2017 at 10:06 AM, Yann Ylavic wrote: > Typo below. > > On Mon, Sep 18, 2017 at 9:50 AM, Yann Ylavic wrote: >> >> RewriteCond %{ENV:originalPath} ^$ > > The above should be: > RewriteCond %{ENV:REDIRECT_originalPath} ^$ > >> Rewrit

Re: [users@httpd] Request_URI and ErrorDocument interaction ?

2017-09-18 Thread Yann Ylavic
Typo below. On Mon, Sep 18, 2017 at 9:50 AM, Yann Ylavic wrote: > > RewriteCond %{ENV:originalPath} ^$ The above should be: RewriteCond %{ENV:REDIRECT_originalPath} ^$ > RewriteRule ^ - [E=originalPath:%{REQUEST_URI}] > > RewriteCond %{ENV:REDIRECT_originalPath} ^(.+)$ >

Re: [users@httpd] Request_URI and ErrorDocument interaction ?

2017-09-18 Thread Yann Ylavic
Sorry for the delay, I missed your response. On Mon, Sep 11, 2017 at 1:56 PM, Cordente Emmanuel wrote: > Thank you for the proposition, I tried it without success. > > I've used: > RewriteCond %{ENV:REDIRECT_URL} ^(.+)$ > RewriteRule ^ - [E=originalPath:%1] > > RewriteCond %{ENV:originalPath} ^$

Re: [users@httpd] mod_lua and subprocess_env

2017-09-17 Thread Yann Ylavic
On Sun, Sep 10, 2017 at 12:46 PM, Andrei Ivanov wrote: > Yann? > What's the next step? Your message didn't seem to draw attention from others > and it's been almost 2 months That's called lazy consensus :) In other words, I'll commit it to trunk (once rebased, since it currently applies to 2.4.x

Re: [users@httpd] Increasing packet size to 64 KB on mod_proxy and mod_proxy_balancer

2017-09-16 Thread Yann Ylavic
Hi Dhilli, On Fri, Sep 15, 2017 at 3:44 PM, DhilliPrasad Nellepalli wrote: > > We see high latency when the headers go above 8 KB. to debug the issue we > have monitored the traffic from apache to netty with wireshark. > > We noticed that apache is sending request in multiple packets to netty. Th

Re: [users@httpd] How to stop apache from debugging

2017-09-16 Thread Yann Ylavic
Hi, On Fri, Sep 15, 2017 at 7:46 AM, Hemant Chaudhary wrote: > > I started debugging with "./httpd -X" command. It starts debugging. Now I > want to stop debugging and start the server normally. > > Which command should I use to stop debugging ? Please define/be more explicit about debugging?

Re: [users@httpd] .htaccess

2017-09-16 Thread Yann Ylavic
Hi Rondon, On Fri, Sep 15, 2017 at 12:27 AM, Rondon wrote: > Hi Folks, > > Sorry to bother you. > My website is using apache at Dreamhost. > > I'm authenticating using a require valid-user at .htaccess > But I need to add more directives to authenticate the access by Referer. > > If the user come

Re: [users@httpd] Question about apache2.4, prefork and mod_perl

2017-09-13 Thread Yann Ylavic
1 200 326M 31636K select 5 0:00 0.00% httpd > - > 30830 www1 200 330M 35900K select 0 0:00 0.00% httpd > 30831 www1 200 326M 31932K select 7 0:00 0.00% httpd > 30835 www 1 200 326M 31636K select 5 0:00

Re: [users@httpd] Question about apache2.4, prefork and mod_perl

2017-09-13 Thread Yann Ylavic
On Wed, Sep 13, 2017 at 10:10 AM, Norbert wrote: > Thanks, I set (on my testmachine): > > > MinSpareServers 4 > MaxSpareServers 4 > MaxConnectionsPerChild 10 > > > but nothing changes - the httpd processes with user www:www appear and > disappear in top after seconds... We the

Re: [users@httpd] Question about apache2.4, prefork and mod_perl

2017-09-13 Thread Yann Ylavic
On Wed, Sep 13, 2017 at 9:56 AM, Yann Ylavic wrote: > > Please have a look at http://httpd.apache.org/docs/2.4/fr/mod/prefork.html. Sorry, http://httpd.apache.org/docs/2.4/mod/prefork.html or http://httpd.apache.org/docs/2.4/de/mod/prefork.html might be more appro

Re: [users@httpd] Question about apache2.4, prefork and mod_perl

2017-09-13 Thread Yann Ylavic
Hi, On Wed, Sep 13, 2017 at 9:11 AM, Norbert wrote: > > So: I am running apache 2.4 (on FreeBSD 11), use mod_perl and prefork. When > the server starts it creates several httpd processes all running under root. > This is ok. When a request arrives it creates subprocesses with the user > www:www

Re: [users@httpd] Request_URI and ErrorDocument interaction ?

2017-09-09 Thread Yann Ylavic
Hi, On Wed, Sep 6, 2017 at 1:54 PM, Cordente Emmanuel wrote: > > Why the Request_URI environment variable is change by the ErrorDocument > treatment ? The ErrorDocument handling is an internal redirect which changes the URI internally (hence REQUEST_URI) and runs the SetEnvIf again... The origi

Re: [users@httpd] Which file creates master process

2017-09-09 Thread Yann Ylavic
Hi, On Wed, Sep 6, 2017 at 10:58 AM, Hemant Chaudhary wrote: > > I have apache-2.4.25 on my ststem. When we start server, initially master > process starts and give access to mpm. I want to know which ".c" file is > used to create master process before worker.c. The main() function (entry point

Re: [users@httpd] Negative Pattern Matching with DirectoryMatch

2017-07-31 Thread Yann Ylavic
On Mon, Jul 31, 2017 at 9:16 PM, David Copeland wrote: > Is there a way to ReDirect for all but a certain path? > > That is, is some like this possible? > > > Redirect .. > You could use: (i.e. not followed by) Regards, Yann. ---

Re: [users@httpd] Re: Mod_http2 as static

2017-07-20 Thread Yann Ylavic
On Thu, Jul 20, 2017 at 10:34 AM, Yann Ylavic wrote: > Hi, > > On Thu, Jul 20, 2017 at 8:46 AM, Hemant Chaudhary > wrote: >> >> It is not creating .so for mod_lua also. Only creating mod_lua.a and >> mod_http2.a . But for other modules like mod_authn_file.so is cr

Re: [users@httpd] Re: Mod_http2 as static

2017-07-20 Thread Yann Ylavic
Hi, On Thu, Jul 20, 2017 at 8:46 AM, Hemant Chaudhary wrote: > > It is not creating .so for mod_lua also. Only creating mod_lua.a and > mod_http2.a . But for other modules like mod_authn_file.so is create, > mod_mpm_worker.so etc. --enable-http2=shared --enable-lua=shared works for me. Regards,

Re: [users@httpd] mod_lua and subprocess_env

2017-07-14 Thread Yann Ylavic
Hi Andrei, On Thu, Jul 13, 2017 at 3:21 PM, Andrei Ivanov wrote: > > Yann? Is it a good time now? I proposed the patch on the httpd-dev mailing list. Waiting for feedbacks, then will commit it. I don't know if you are subscribed to this list, but most follow ups will happen there now... If you

Re: [users@httpd] rpmbuild of httpd-2.4.26 on CentOS 7

2017-07-04 Thread Yann Ylavic
Hello, On Sat, Jun 24, 2017 at 4:48 AM, kohmoto wrote: > > I modified spec file to add the line > "%{_libdir}/httpd/modules/mod_proxy_hcheck.so" and then tried "rpmbuild -bb > --clean rpmbuild/SPECS/httpd.spec". The result was successful. This has been committed in [1] and proposed for backport

Re: [users@httpd] Fwd: Patches for CVE-2016-8743 (apache 2.4.18)

2017-06-03 Thread Yann Ylavic
Hi Rashmi, On Thu, Jun 1, 2017 at 11:19 AM, Rashmi Srinivasan wrote: > To port the fix for CVE-2016-8743 to 2.2.29, is it ok to port the > changes from http://svn.apache.org/viewvc?view=revision&revision=1777405 > Would that suffice? > Please advise. That's indeed the

Re: [users@httpd] mod_lua and subprocess_env

2017-05-28 Thread Yann Ylavic
Hi Andrei, On Wed, May 24, 2017 at 5:50 PM, Andrei Ivanov wrote: > > Does anybody know anything about Yann? I do :) Sorry I didn't have the time to propose something to the dev team for now, while 2.4.26 is coming soon and is very unlikely to include such a change on the core expression parser

Re: [users@httpd] mod_lua and subprocess_env

2017-03-22 Thread Yann Ylavic
On Wed, Mar 22, 2017 at 2:53 PM, Andrei Ivanov wrote: > > Welcome back :-) Thanks ;) > > These expressions don't work anymore: Can't parse value expression : > Function 'PeerExtList' does not exist > > Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}" > Header set Expr1 "expr='IP Address:'.%

Re: [users@httpd] mod_lua and subprocess_env

2017-03-22 Thread Yann Ylavic
On Wed, Mar 22, 2017 at 3:45 PM, Andrei Ivanov wrote: > On Wed, Mar 22, 2017 at 3:53 PM, Andrei Ivanov > wrote: > > Argh! You've sent more emails but Gmail received them out of order so I > didn't see your initial email about the changed syntax. We seem to talk past each other :) Anyway, maybe p

Re: [users@httpd] mod_lua and subprocess_env

2017-03-06 Thread Yann Ylavic
wrote: >>> >>>> On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov < >>>> andrei.iva...@gmail.com> wrote: >>>> >>>>> On Feb 24, 2017 22:54, "Yann Ylavic" wrote: >>>>> >>>>> On Fri, Feb 24, 20

Re: [users@httpd] mod_lua and subprocess_env

2017-02-24 Thread Yann Ylavic
On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov wrote: > > I've managed to apply your patch and rebuild Apache and now I have: > Header set Client-IP "expr=%{REMOTE_ADDR}" > Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}" > Header set Client-DN "expr=%{SSL_CLIENT_S_DN}" Could you please add:

Re: [users@httpd] RE: multiple hits from single IP

2017-02-23 Thread Yann Ylavic
Hi, On Thu, Feb 23, 2017 at 4:36 PM, Chaithanya Taduri wrote: > > We are receiving many hits from single IP which is causing > performance degrade of the application. IP addresses are genuine. > When we contacted user, he is saying that page is loading > continuously but page is not getting displa

Re: [users@httpd] apache server send tlsv1.2 close notify after change cipher spec, why?

2017-02-23 Thread Yann Ylavic
On Thu, Feb 23, 2017 at 3:33 PM, Falk Hackenberger wrote: > Am 23.02.2017 um 15:01 schrieb Yann Ylavic: >> Any TLS/SSL related entry in the error_log ? > no. I guess we need more info here... Would you provide a "LogLevel trace8" log of the (reproduced) issue? Privatel

Re: [users@httpd] apache server send tlsv1.2 close notify after change cipher spec, why?

2017-02-23 Thread Yann Ylavic
Hi, On Thu, Feb 23, 2017 at 11:39 AM, Falk Hackenberger wrote: > > can help me sombody to understand why the apache webserver send sometimes a > tlsv1.2 close notify without waiting for any application data > from the client? > The environment is a debian wheezy: apache2-mpm-prefork 2.2.22-13+de

Re: [users@httpd] mod_lua and subprocess_env

2017-02-22 Thread Yann Ylavic
On Wed, Feb 22, 2017 at 3:19 PM, Andrei Ivanov wrote: > On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic wrote: >> >> My bad, please try without the parentheses: >> >> Require expr "'IP Address:' . %{REMOTE_ADDR} -in >> PeerExtList('2.5.29.17

Re: [users@httpd] mod_lua and subprocess_env

2017-02-22 Thread Yann Ylavic
On Wed, Feb 22, 2017 at 11:19 AM, Andrei Ivanov wrote: > On Wed, Feb 22, 2017 at 12:02 PM, Yann Ylavic wrote: >> >> On Wed, Feb 22, 2017 at 10:58 AM, Andrei Ivanov >> wrote: >> > >> > So... do I have a chance to get it running on RHEL 7.3 which ships

Re: [users@httpd] mod_lua and subprocess_env

2017-02-22 Thread Yann Ylavic
On Wed, Feb 22, 2017 at 10:58 AM, Andrei Ivanov wrote: > > So... do I have a chance to get it running on RHEL 7.3 which ships with > 2.4.6? That may work in 2.4.6, I just didn't try ;) "Require expr ... -in" exists (as far as I can tell), and so is PeerExtList I think. Did you try it? --

Re: [users@httpd] mod_lua and subprocess_env

2017-02-21 Thread Yann Ylavic
On Wed, Feb 22, 2017 at 1:09 AM, Yann Ylavic wrote: > On Tue, Feb 21, 2017 at 5:43 PM, Andrei Ivanov > wrote: >> On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic wrote: >>> >>> On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov >>> wrote: >>>

Re: [users@httpd] mod_lua and subprocess_env

2017-02-21 Thread Yann Ylavic
On Tue, Feb 21, 2017 at 5:43 PM, Andrei Ivanov wrote: > On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic wrote: >> >> On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov >> wrote: >> >>> >> >>> Header set Client-SAN "%{PeerExtList('2.5.29.17

Re: [users@httpd] mod_lua and subprocess_env

2017-02-21 Thread Yann Ylavic
On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov wrote: >>> >>> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s" The syntax may be rather: Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}" Does it work better? - To unsub

Re: [users@httpd] apache run status: how to tell as non-root user (on *nix)?

2017-02-21 Thread Yann Ylavic
On Tue, Feb 21, 2017 at 3:19 PM, Rainer Canavan wrote: > On Tue, Feb 21, 2017 at 2:53 PM, Tom Browder wrote: >> I need to programatically determine whether httpd is running or not, whether >> I'm root or not. The only reliable way I have found is to use the system >> command 'ps -C httpd' and gre

Re: [users@httpd] Best way to redirect all traffic to secure website.

2017-02-20 Thread Yann Ylavic
On Mon, Feb 20, 2017 at 8:17 PM, Spork Schivago wrote: > > > ServerName www.mydomain.com > Redirect "/" "https://www.mydomain.com/"; > > > > ServerName subdomain1.mydomain.com > Redirect "/" "https://subdomain1.mydomain.com:2083/"; > ... > > > > Then, if I go to something l

Re: [users@httpd] forward proxy cache, 2.4.25

2017-02-20 Thread Yann Ylavic
On Mon, Feb 20, 2017 at 12:24 PM, Petr Gajdos wrote: > > While the behavior for reverse proxy is not changed, I get a > difference for forward proxy between 2.4.23 and 2.4.25: for 2.4.25, I > get no X-Cache header and also no reference to mod_cache in error_log > for trace8. > > Where I am wrong?

Re: [users@httpd] Problem with migration between Https and CSS

2017-02-20 Thread Yann Ylavic
Hi, On Sat, Feb 18, 2017 at 8:41 PM, Rodrigo Cunha wrote: > Dears, i installing wikimedia in my enviroment in http protocol, but i want > setting this for https acess. > I do redirect for vhost01 (old http wiki) to vhost02(current https wiki) but > the display for my wiki not work. Looks like yo

Re: [users@httpd] redirect port from 80 to 443

2017-02-18 Thread Yann Ylavic
Hi, On Sat, Feb 18, 2017 at 1:08 PM, Rodrigo Cunha wrote: > Dears, i want redirect all request from port 80 to 443. > what is better setting for fix this? https://httpd.apache.org/docs/2.4/rewrite/avoid.html#redirect - To unsub

Re: [users@httpd] Re: proxypass does'nt seem to work on apache 2.4.25

2017-02-18 Thread Yann Ylavic
On Fri, Feb 17, 2017 at 11:09 PM, @lbutlr wrote: > On 2017-02-17 (12:57 MST), Christopher Schultz > wrote: >> >> - -chris > > Please fix your signature delimiter. It should be two dashes, a space, and > end of line, no more, no less. ??? Thanks for your help anyway... > > See below. > > -- >

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Thu, Feb 16, 2017 at 5:16 PM, Andrei Ivanov wrote: > > This one still doesn't work: > Require expr "%{REMOTE_ADDR} in PeerExtList('2.5.29.17')" > AH00526: Syntax error on line 145 of /etc/httpd/conf.d/ssl.conf: > Cannot parse expression in require line: syntax error, unexpected $end The expr o

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Thu, Feb 16, 2017 at 2:46 PM, Andrei Ivanov wrote: > > I gave it a try, but seems to reach the same limitation of the expression > engine :-( > NSSRequire %{REMOTE_ADDR} in PeerExtList('2.5.29.17') > or > Require expr "%{REMOTE_ADDR} in PeerExtList('2.5.29.17')" > > AH00526: Syntax error on lin

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Tue, Feb 14, 2017 at 1:24 PM, Andrei Ivanov wrote: > > I'm using mod_nss exactly because mod_ssl doesn't expose that variable and > my issue that requests that is sitting ignored for 2 months now :-( Did you try something with SSLRequire or a expression like "'' -in PeerExtList('2.5.29.17')"

Re: [users@httpd] Session disconnection

2017-02-15 Thread Yann Ylavic
Hi, On Wed, Feb 15, 2017 at 7:32 AM, Fady Haikal wrote: > > Disable reuse set to on means that it will disconnect the connection > once the proxy call it completed. So this will affect the AJAX > functions that required the connection to be always on. Hmm, mod_proxy_http will close the connectio

Re: [users@httpd] Session disconnection

2017-02-14 Thread Yann Ylavic
Hi, On Tue, Feb 14, 2017 at 4:08 PM, Fady Haikal wrote: > > [Tue Feb 14 17:45:27.071171 2017] [proxy_http:error] [pid 1276:tid > 2080] (OS 10054)An existing connection was forcibly closed by the > remote host. : [client 10.114.117.51:51838] AH01102: error reading > status line from remote server

Re: [users@httpd] is there anyway i can change the apache web server caching directory?

2017-02-14 Thread Yann Ylavic
On Tue, Feb 14, 2017 at 5:09 PM, Pal RR wrote: > is there anyway i can change the apache web server caching directory > location /tmp to other directory location /appsdata. I don't see any options > to change default /tmp directory location in apache documentation. By > default, web server is wri

Re: [users@httpd] .htaccess rule match keyword

2017-02-06 Thread Yann Ylavic
Hi, On Mon, Feb 6, 2017 at 11:34 AM, Rajib Karmakar wrote: > > RewriteRule ^cart(.*)$ cart.php > > https://www.berkshirefurniture.com/cart/ [] > > https://www.berkshirefurniture.com/carter-upholstered-bed/p/bmV3LWFycml2YWw= > > ## For showing leaf sub category of item > RewriteCond %{REQUEST_URI}

Re: [users@httpd] Unable to fork new process

2017-01-25 Thread Yann Ylavic
Hi, On Wed, Jan 25, 2017 at 10:33 PM, Michele Mase' wrote: > = 0x00090805f) +ERR_free_strings(); +#endif +sk_SSL_COMP_free(SSL_COMP_get_compression_methods()); + /* Also don't call CRYPTO_cleanup_all_ex_data here; any registered * ex_data indices may have been cached in static

Re: [users@httpd] Fwd: Patches for CVE-2016-8743 (apache 2.4.18)

2017-01-25 Thread Yann Ylavic
Hi, On Wed, Jan 25, 2017 at 9:17 AM, Rashmi Srinivasan wrote: > We are trying to port the fix for CVE (CVE-2016-8743) to 2.4.18. Tried > checking the revision on git for the list of files fixed for this CVE. > There are lots of changes related to RFC7320 and was difficult to figure out > the f

Re: [users@httpd] https://www.berkshirefurniture.com Issue on .htaccess rule.

2017-01-23 Thread Yann Ylavic
Hi, On Mon, Jan 23, 2017 at 11:20 AM, Rajib Karmakar wrote: > > Yes i active access logs, now which date i see the log. > > Problem Statement : Few Products redirects to Cart page. > > Cart Page URL : https://www.berkshirefurniture.com/cart/ > Cart Page htaccess redirects rule : RewriteRule ^car

Re: [users@httpd] Httpd-2.4.23 not creating .so file

2017-01-12 Thread Yann Ylavic
On Thu, Jan 12, 2017 at 11:42 AM, Yann Ylavic wrote: > On Thu, Jan 12, 2017 at 7:44 AM, Hemant Chaudhary > wrote: >> Hi >> >> I am porting httpd-2.4.23 on nonstop tandem. But .so file is not created in >> modules, hence I am unable to start apache. >> >>

Re: [users@httpd] Httpd-2.4.23 not creating .so file

2017-01-12 Thread Yann Ylavic
On Thu, Jan 12, 2017 at 7:44 AM, Hemant Chaudhary wrote: > Hi > > I am porting httpd-2.4.23 on nonstop tandem. But .so file is not created in > modules, hence I am unable to start apache. > > Only .a and .la of modules are present in module folder. > > Is it possible to start httpd-2.4.23 without

Re: [users@httpd] How to modify the apache instance name in linux

2017-01-06 Thread Yann Ylavic
On Fri, Jan 6, 2017 at 11:17 AM, Muduli, Chittaranjan wrote: > > If I want to change the /http/testdomain directory should I compile > and install it again ? or is there any short way to change the > installation dir directly without any compilation ? Yes, a priori you should be able to: 1. sto

Re: [users@httpd] Web sockets & proxypass - No protocol handler was valid for the URL

2017-01-05 Thread Yann Ylavic
On Thu, Jan 5, 2017 at 10:36 AM, Yann Ylavic wrote: > > For the record (after private discussion with Adam), it seems that a > configuration like the below would work for http(s) and ws(s) on the > same URL: > > RewriteEngine on > RewriteCond %{HTTP:Upgrade} "(?i)

Re: [users@httpd] Web sockets & proxypass - No protocol handler was valid for the URL

2017-01-05 Thread Yann Ylavic
On Wed, Dec 28, 2016 at 3:53 PM, Eric Covener wrote: > On Tue, Dec 27, 2016 at 8:39 AM, Adam Teale wrote: >> Hi! >> >> I've been trying to setup a reverse proxy to a localhost websocket url. >> >> ProxyPass /chat/stream/ wss://localhost:8000/chat/stream/ >> ProxyPassReverse /chat/stream/ wss://lo

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2017-01-02 Thread Yann Ylavic
On Mon, Jan 2, 2017 at 12:43 PM, Yann Ylavic wrote: > On Mon, Jan 2, 2017 at 12:41 PM, Yann Ylavic wrote: >> Hi Hajo, >> >> On Mon, Jan 2, 2017 at 11:54 AM, Hajo Locke wrote: >>> >>> sorry guys. i think i have lost overview. Has this resulted in a p

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2017-01-02 Thread Yann Ylavic
On Mon, Jan 2, 2017 at 12:41 PM, Yann Ylavic wrote: > Hi Hajo, > > On Mon, Jan 2, 2017 at 11:54 AM, Hajo Locke wrote: >> >> sorry guys. i think i have lost overview. Has this resulted in a public >> patch? > > This patch: http://svn.apache.org/r17

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2017-01-02 Thread Yann Ylavic
Hi Hajo, On Mon, Jan 2, 2017 at 11:54 AM, Hajo Locke wrote: > > sorry guys. i think i have lost overview. Has this resulted in a public > patch? This patch: http://svn.apache.org/r1775775 Regards, Yann. - To unsubscribe, e-mai

Re: [users@httpd] Web sockets & proxypass - No protocol handler was valid for the URL

2016-12-28 Thread Yann Ylavic
On Wed, Dec 28, 2016 at 4:47 PM, Adam Teale wrote: > > As far as I know the "normal" http traffic is via "/chat/" (well at least > that is visited page url). > > When that page loads is connects to "/chat/stream" via the wss:// protocol > using a javascript library called "reconnecting-websocket".

Re: [users@httpd] Web sockets & proxypass - No protocol handler was valid for the URL

2016-12-28 Thread Yann Ylavic
On Wed, Dec 28, 2016 at 3:21 PM, Yann Ylavic wrote: > On Wed, Dec 28, 2016 at 1:32 PM, Adam Teale wrote: >> more detail from the error log: >> >> [Wed Dec 28 09:31:05.974744 2016] [proxy:debug] [pid 27844] >> mod_proxy.c(1198): [client 127.0.0.1:54002] AH01143: Ru

Re: [users@httpd] Web sockets & proxypass - No protocol handler was valid for the URL

2016-12-28 Thread Yann Ylavic
On Wed, Dec 28, 2016 at 1:32 PM, Adam Teale wrote: > more detail from the error log: > > [Wed Dec 28 09:31:05.974744 2016] [proxy:debug] [pid 27844] > mod_proxy.c(1198): [client 127.0.0.1:54002] AH01143: Running scheme wss > handler (attempt 0) Looks like the request is missing the "Upgrade: WebS

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2016-12-22 Thread Yann Ylavic
On Fri, Dec 23, 2016 at 12:11 AM, Rainer Jung wrote: > Am 22.12.2016 um 23:56 schrieb Yann Ylavic: >> >> I was thinking about always using the new code, maybe with an "if >> APLOGtrace2(s)" around to save a getsockname() call when not needed. > > I see

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2016-12-22 Thread Yann Ylavic
On Thu, Dec 22, 2016 at 11:38 PM, Rainer Jung wrote: > OK, looking closer at the suggested patch I see it fixes trace2-Loggging. > When I activate e.g. trace8, I do get the expected crash in > ap_proxy_check_connection. Yes, it depends on the LogLevel, and probably also on AP_HAVE_C99 (which avoi

Re: [users@httpd] HTTPD 2.4.25 crash in mod_proxy (ajp)

2016-12-22 Thread Yann Ylavic
On Thu, Dec 22, 2016 at 3:12 PM, Jim Jagielski wrote: > H... > > I wonder if it's due to: > > /* Step Two: Make the Connection */ > -if (ap_proxy_connect_backend(scheme, backend, worker, r->server)) { > +if (ap_proxy_check_connection(scheme, backend, r->server, 0, > +

Re: [users@httpd] Http sessions seems to get mixed with Apache SSL offload/reverse proxy for Exchange 2013 server

2016-11-30 Thread Yann Ylavic
On Wed, Nov 30, 2016 at 7:40 AM, Lars Bonnesen wrote: > Haven't tried that so far.. trying now, so lets see... > > What does it do more exactly? I suspect some authentication at the connection level (NTLM), connections that gets reused by mod_proxy for different clients, hence the mixup. Disabli

Re: [users@httpd] Http sessions seems to get mixed with Apache SSL offload/reverse proxy for Exchange 2013 server

2016-11-29 Thread Yann Ylavic
On Tue, Nov 29, 2016 at 11:41 PM, Lars Bonnesen wrote: > It seems that when a Mac client tries to access an Exchange 2013 server > having an Apache reverse proxy (non-caching) in between a number a strange > issues are seen: > > 1) Inbox come and go from time to time. > > ... and what is even wors

Re: [users@httpd] Graceful draining of KeepAlive Connections

2016-11-16 Thread Yann Ylavic
Hello, On Tue, Nov 15, 2016 at 7:59 PM, Alex Kaiser wrote: > I would like for idle > KeepAlive connections to shut down immediately, is this not technically > possible for some reason? If it is possible, is it a bug that the > connections stick around? There is being worked in this bugzilla rep

Re: [users@httpd] failing t/modules/filter.t

2016-10-26 Thread Yann Ylavic
On Tue, Oct 25, 2016 at 9:48 PM, Petr Gajdos wrote: > > So if I understand correctly, content of mime.types is hardcoded. > Is there another chance than patching either TestConfig.pm or > extra.conf.in to contain application/xml .xml definition? Don't you have a piece of conf that applies to your

Re: [users@httpd] Help needed on READ error in Apache

2016-10-15 Thread Yann Ylavic
Hi, On Sat, Oct 15, 2016 at 9:56 AM, Muduli, Chittaranjan wrote: > > got exception 'READ_ERROR_FROM_FILE [os error=0, line 144 of ap_proxy.cpp]: > Cannot read 0 bytes of postData from tmp file > '/tmp/domain1/_wl_proxy/_post_9995_100'', > > can someone suggest how to deal with this ? This has

Re: [users@httpd] Apache 2.4 (Apache Benchmarking) - Too many open files (24)

2016-09-22 Thread Yann Ylavic
On Thu, Sep 22, 2016 at 5:20 PM, Rashmi Srinivasan wrote: > > Access log has the following status: > [22/Sep/2016:20:17:21 +0530] "GET /cgi-bin/script.cgi HTTP/1.0" 200 16 What's in the *error* log (path from the ErrorLog directive)? What about resources (CPU, load average, ...) on the httpd mac

Re: [users@httpd] Apache 2.4 (Apache Benchmarking) - Too many open files (24)

2016-09-22 Thread Yann Ylavic
On Thu, Sep 22, 2016 at 8:57 AM, Rashmi Srinivasan wrote: > > Benchmarking x.x.x.x (be patient) > Completed 8000 requests > apr_socket_recv: Connection timed out (110) > Total of 8972 requests completed This can be related to some limits reached on the server side (cgi connection/execution time,

Re: [users@httpd] Apache 2.4 (Apache Benchmarking) - Too many open files (24)

2016-09-21 Thread Yann Ylavic
Hi, On Thu, Sep 22, 2016 at 6:32 AM, Rashmi Srinivasan wrote: > > > 2000 concurrent requests > > Benchmarking x.x.x.x (be patient) > socket: Too many open files (24) You should probably change the 'ulimit -n' on the host running ab, something like

Re: [users@httpd] failing t/modules/filter.t

2016-09-21 Thread Yann Ylavic
On Wed, Sep 21, 2016 at 11:04 AM, Petr Gajdos wrote: > > the test does not succed for me. If I got it correctly, it creates > test.xml with the content 'helloworld' and tries to add CASEFILTER to > it trough AddOutputFilterByType with application/xml. That does not > work for me, but does with tex

Re: [users@httpd] Re: confirm subscribe to users@httpd.apache.org

2016-08-28 Thread Yann Ylavic
On Sun, Aug 28, 2016 at 7:51 PM, Michael Gordon wrote: > > Just wait till you want to unsubscribe from the list! > > I have been trying for over 6 months and finally sent all "[users@httpd]" to > the Junk Folder. > [...] > - > To

Re: [users@httpd] mod_proxy_fdpass.so file missing

2016-08-13 Thread Yann Ylavic
On Sat, Aug 13, 2016 at 7:59 AM, kohmoto wrote: > > However, I have no way to check the integrity of the whole system made by > the modifications. I hope people involved in HTTPD project would erase the > rpmbuild error in the future. I would like to wait until then. This has been fixed at the b

Re: [users@httpd] HTTPD asking for password after power failure

2016-08-12 Thread Yann Ylavic
On Fri, Aug 12, 2016 at 9:31 PM, Christopher Schultz wrote: > > On 8/11/16 11:10 PM, Marat Khalili wrote: >> From what I saw, this behavior of /dev/random is totally normal on >> an idle Linux system. > > There seems to be some confusion about /dev/random on Linux systems. > Yes, the behavior desc

Re: [users@httpd] getting disk cache to respect removing key from request query string

2016-08-10 Thread Yann Ylavic
On Wed, Aug 10, 2016 at 5:12 PM, Raphaƫl wrote: > On Tue, Aug 09, 2016 at 01:03:33AM -0600, Anthony Biacco wrote: >> Is there any way i can rewrite the query string so that only the modified >> query string is used to create the cache files? > > https://bz.apache.org/bugzilla/show_bug.cgi?id=21935

Re: [users@httpd] getting disk cache to respect removing key from request query string

2016-08-10 Thread Yann Ylavic
On Wed, Aug 10, 2016 at 6:31 AM, Anthony Biacco wrote: > > On Tue, Aug 9, 2016 at 4:47 PM, Eric Covener wrote: >> >> On Tue, Aug 9, 2016 at 3:03 AM, Anthony Biacco wrote: >> > The only way i found so far is to do a redirect in the rewrite rule with >> > [R]. I just don't want the extra overhead

Re: [users@httpd] getting disk cache to respect removing key from request query string

2016-08-09 Thread Yann Ylavic
On Tue, Aug 9, 2016 at 9:03 AM, Anthony Biacco wrote: > > Is there any way i can rewrite the query string so that only the modified > query string is used to create the cache files? Maybe you could try to delay mod_cache processing by using: CacheQuickHandler off Regards, Yann. -

Re: [users@httpd] Remote Forward Proxy Does Not Forward Request after PR 55892 Fix

2016-08-06 Thread Yann Ylavic
On Sun, Aug 7, 2016 at 2:34 AM, Dana Wang wrote: > > The challenge I'm facing is that the remote forward proxy no longer forwards > requests due to relative URL. You want your proxy to talk https with a forward proxy via a remote CONNECT proxy, right? Not so common, is your proxy itself a forward

Re: [users@httpd] mod_proxy: failonstatus does not work.

2016-08-03 Thread Yann Ylavic
Hi, On Sun, Jul 31, 2016 at 9:28 AM, dE wrote: > > ProxyPass / balancer://localbalance/ failonstatus=200 forcerecovery=off > BalancerMember balancer://localbalance/ http://[fc00::1:4]/ retry=600 > loadfactor=99 > BalancerMember balancer://localbalance/ http://[fc00::1:6]/ retry=600 > > Both the b

Re: [users@httpd] Customized error page for application.ear down

2016-07-30 Thread Yann Ylavic
On Fri, Jul 29, 2016 at 9:37 PM, wrote: > > Is there any possibility override the message which is getting displayed > from application server through web server. Please have a look at "ProxyErrorOverride on" (https://httpd.apache.org/docs/current/mod/mod_proxy.html#proxyerroroverride). This can

Re: [users@httpd] mod_proxy: When does a backend be considered as failed?

2016-07-30 Thread Yann Ylavic
On Sat, Jul 30, 2016 at 8:36 AM, dE wrote: > > Yes, as you said I did try that before -- Your previous configuration had timeout=10 on the ProxyPass line, not the BalancerMember one as expected. > > BalancerMember balancer://localbalance/ http://[fc00::1:4]/ timeout=10 > ProxyPass / balancer://l

Re: [users@httpd] Using SetEnvIf for query string

2016-07-29 Thread Yann Ylavic
On Fri, Jul 29, 2016 at 12:47 PM, Mohit Chawla wrote: > Hi, > > I am trying to use SetEnvIf with QUERY_STRING, but can't get it to work. The QUERY_STRING variable is not recognized by SetEnvif (see [1] for the list), hence it is considered a header name. You may want to use mod_rewrite's Rewrite

Re: [users@httpd] SSLHonorCipherOrder not working as expected

2016-07-28 Thread Yann Ylavic
On Thu, Jul 28, 2016 at 10:00 PM, Michele Mase' wrote: > > Any suggestion? Ciphers must be negotiated before HTTP is decrypted (and hence vhost selection can happen). With SSLHonorCipherOrder off, the negotiated cipher is probably RC4-SHA (the one preferred by the client). With SSLHonorCipherOrde

Re: [users@httpd] mod_proxy: When does a backend be considered as failed?

2016-07-25 Thread Yann Ylavic
On Mon, Jul 25, 2016 at 5:18 AM, dE wrote: > > Config -- [] > > ProxyPass / balancer://localbalance/ failontimeout=on timeout=10 > failonstatus=502 You are defining a balancer here, so the timeout= parameter relates to the balancer (like the two others) However for a balancer, the timeout= param

Re: [users@httpd] Use an Apache handler after declining another

2016-07-19 Thread Yann Ylavic
On Tue, Jul 19, 2016 at 4:21 PM, Yann Ylavic wrote: > > There are other ways to do this (by setting an environment variable > with for example SetEnvIf, and checking it in your handler), in any > case a DECLINing handler should not have to deal with r->handler > unless it know

Re: [users@httpd] Use an Apache handler after declining another

2016-07-19 Thread Yann Ylavic
On Tue, Jul 19, 2016 at 2:42 PM, Amlaan Kar wrote: > example1_handler is as given below: > module AP_MODULE_DECLARE_DATA example1_module; > > static int example1_handler(request_rec *r) > { > if (!r->handler || strcmp(r->handler, "example1-handler")) return > (DECLINED); So it does nothing un

Re: [users@httpd] Use an Apache handler after declining another

2016-07-19 Thread Yann Ylavic
On Tue, Jul 19, 2016 at 2:15 PM, Amlaan Kar wrote: > static void register_hooks(apr_pool_t *pool) > { > static const char *const succs[] = {"mod_example1.c", NULL }; > ap_hook_handler(example5_handler, NULL, succs, APR_HOOK_FIRST); > } > AP_DECLARE_MODULE(example5) = > { > STANDARD20_M

Re: [users@httpd] mod_proxy: When does a backend be considered as failed?

2016-07-19 Thread Yann Ylavic
Hello, On Sun, Jul 17, 2016 at 9:41 AM, dE wrote: > It appears that mod_proxy considers a backend as failed only when the > transport layer connection to that backend fails. Is this expected? Unless failonstatus/failontimeout is used, usually. Which httpd version are you using? Could you pl

Re: [users@httpd] Use an Apache handler after declining another

2016-07-19 Thread Yann Ylavic
On Tue, Jul 19, 2016 at 1:58 PM, Amlaan Kar wrote: > Thank You for answering. The method described above is not working. Please describe not working.. Your handler does not run before the one you specified as successor ? > Do I > have to make any changes before using the above given code? > PS:

Re: [users@httpd] Use an Apache handler after declining another

2016-07-19 Thread Yann Ylavic
On Tue, Jul 19, 2016 at 12:29 PM, Amlaan Kar wrote: > I have two handlers to be accessed. My motive is to use the second handler > if the first handler returns DECLINED. > > I have tried various combinations of SetHandler, AddHandler and AddType but > none has worked as overriding takes place in a

Re: [users@httpd] ProxyPreserveHost doesn't work with SSL

2016-07-04 Thread Yann Ylavic
On Mon, Jul 4, 2016 at 5:36 PM, Yann Ylavic wrote: > On Mon, Jul 4, 2016 at 5:00 PM, Marat Khalili wrote: >> On 04/07/16 17:29, Eric Covener wrote: >>> >>> SNI is in the ClientHello, you'd be able to eliminate/confirm that bit. >> >> >> Yes

Re: [users@httpd] ProxyPreserveHost doesn't work with SSL

2016-07-04 Thread Yann Ylavic
On Mon, Jul 4, 2016 at 5:00 PM, Marat Khalili wrote: > On 04/07/16 17:29, Eric Covener wrote: >> >> SNI is in the ClientHello, you'd be able to eliminate/confirm that bit. > > > Yes you're right. But now I cannot reproduce original problem. And SNI is > correctly transferred from client in packet

Re: [users@httpd] ProxyPreserveHost doesn't work with SSL

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 6:26 PM, Marat Khalili wrote: > > Because of SSL the problem is somewhat hard to debug, can't just packet > trace. I tried to replace IIS application with CGI script on different > Apache, without SSL, and found that ProxyPreserveHost is not ignored > (environment variable S

Re: [users@httpd] Issues migrating Weblogic proxies from Sun One 6.1 to Apache 2.4

2016-07-01 Thread Yann Ylavic
On Fri, Jul 1, 2016 at 12:49 AM, Joe Muller wrote: > > One interesting thing we did find on a packet capture on the back end > between the proxy server and the application server is that 3 seconds after > the proxy server apparently closed the port, the Weblogic application server > tried to

Re: [users@httpd] mod_proxy and DNS resolving

2016-05-27 Thread Yann Ylavic
Hi Luca, On Mon, May 23, 2016 at 2:21 PM, Luca Toscano wrote: > > I replied to the comment that you pointed out with Jim's answer and I > updated the trunk documentation with a note about DNS resolution: > > http://httpd.apache.org/docs/trunk/mod/mod_proxy.html#workers > > HTML diff only: > http:

Re: [users@httpd] "DSO load failed" when using mod_authn_dbm for Berkeley DB

2016-05-13 Thread Yann Ylavic
On Thu, May 12, 2016 at 10:22 PM, Tianyin Xu wrote: > > I'm using all the latest versions of httpd, apr, and apr-util: > httpd-2.4.20 > apr-1.5.2 > apr-util-1.5.4 > > and I build the binaries using, > $ ./configure --with-included-apr --enable-load-all-modules > > It seems I failed to build "apr-u

Re: [users@httpd] Restart or Reload after changing MaxClients and ServerLimit

2016-04-25 Thread Yann Ylavic
On Mon, Apr 25, 2016 at 8:00 PM, Cohen, Laurence wrote: > Hi, I really appreciate your response. What I'd like to know is, how do I > look up this > information on my own? > I use this mailing list generally as a last resort when I can't find the > answer myself. > In the case, I did a lot of r

Re: [users@httpd] Apache proxy keeps cache directory empty

2016-04-19 Thread Yann Ylavic
On Fri, Apr 15, 2016 at 11:02 PM, Bjoern Voigt wrote: > > Here is my Apache proxy configuration. [] > > > > CacheRoot /var/cache/apache-proxy > CacheEnable disk / This prevents caching of forward-proxy URLs since they do not start / (but rather http://). Can you try: CacheEna

<    1   2   3   4   5   >