Re: [users@httpd] Apache2 listening on 80(http) and 443(https)

hosting these sites before SNI was widely available and even when it started becoming widely available it seemed broken (I gather this is no longer the case). I don't know how or if that would change this configuration. -- David Benfell, Ph.D. benf...@parts-unknown.org signature.asc Description: OpenPGP digital signature

[users@httpd] file exists, wget succeeds, but firefox gets 404

10.2-RELEASE-p9 #0: Thu Jan 14 01:32:46 UTC 2016 r...@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 Thanks! - -- David Benfell, Ph.D. benf...@parts-unknown.org -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCgAGBQJWxr2wAAoJEOoml8Ul4D7WcsUP/jX

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

. However, when I run my sites against web site analyzers they always suggest turning on compression. So what is the consensus? Ping! Anyone? The site that seems authoritative for testing SSL is https://www.ssllabs.com/ssltest/ -- David Benfell benf...@parts-unknown.org See https://parts

Re: [users@httpd] undefined symbol: apr_crypto_init

On Thu, Apr 10, 2014 at 06:07:53PM -0600, Jeff Trawick wrote: On Thu, Apr 10, 2014 at 3:33 PM, David Benfell I unfortunately missed your clear, earlier statement that you are using the provided RPM specs which install apr + apr-util as system libraries. IMO that is not a good idea

[users@httpd] undefined symbol: apr_crypto_init

to finding my way through this upgrade from 2.2. But I'm not finding anything helpful (at least at 3:30 in the morning). What do I need to do? Thanks! -- David Benfell benf...@parts-unknown.org See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpL6d4MwGnln.pgp

Re: [users@httpd] Apache 2.4 - non adoption reasons??

other things I need to be working on. -- David Benfell benf...@parts-unknown.org See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpbdNzQu8usm.pgp Description: PGP signature

Re: [users@httpd] Apache 2.4 - non adoption reasons??

on your own. I may very well be forced to abandon this project because I simply don't know how to fix what's wrong. (See my other pending thread.) -- David Benfell benf...@parts-unknown.org See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpBCls6xN3XF.pgp Description

Re: [users@httpd] undefined symbol: apr_crypto_init

On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: On Thu, Apr 10, 2014 at 4:35 AM, David Benfell benf...@parts-unknown.org wrote: apr_crypto_init This phrase alone in a search engine gets you a number of hits saying to upgrade APR. http://stackoverflow.com/questions/22048378

Re: [users@httpd] undefined symbol: apr_crypto_init

On Thu, Apr 10, 2014 at 02:14:02PM -0600, Jeff Trawick wrote: On Thu, Apr 10, 2014 at 2:05 PM, David Benfell [1]benf...@parts-unknown.org wrote: On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: On Thu, Apr 10, 2014 at 4:35 AM, David Benfell [2]benf...@parts

[users@httpd] 2.4 authn problem

/local/apache2.4/modules/mod_authn_core.so: /usr/local/apache2.4/modules/mod_authn_core.so: undefined symbol: authn_alias_module What does it want? I'm definitely no apache guru but this sounds to me like a missing prerequisite. Is that right? What do I need to do? Thanks! -- David Benfell benf

Re: [users@httpd] 2.4 authn problem

On Wed, Apr 09, 2014 at 12:07:25AM -0600, Eric Covener wrote: On Wed, Apr 9, 2014 at 12:00 AM, David Benfell benf...@parts-unknown.org wrote: Hi all, It looks like your first and second parameter to LoadModule don't match. Change the second parameter to authn_core_module to match

Re: [users@httpd] Apache won't start, strace output enclosed

MSIE [17-9] ssl-unclean-shutdown Thanks! - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment -BEGIN PGP SIGNATURE- Version: GnuPG v2.1.0-ecc (GNU/Linux

[users@httpd] Apache won't start, strace output enclosed

in a bit of a panic. What's going wrong? Thanks! - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment -BEGIN PGP SIGNATURE- Version: GnuPG v2.1.0-ecc (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net

Re: [users@httpd] undefined reference to tls client method

--libdir=lib64 \ make make test sudo make install This overwrites the CentOS version and you will want to tell yum to ignore openssl. - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment -BEGIN PGP SIGNATURE- Version: GnuPG v2.1.0-ecc (GNU/Linux

[users@httpd] undefined reference to tls client method

line is pretty simple, just because I haven't really figured it out: ./configure --enable-modules=all --enable-ssl What am I missing? Thanks! -- David Benfell benf...@parts-unknown.org Normally you should expect a GnuPG signature: https://parts-unknown.org/node/2 But this mailer does not support

Re: [users@httpd] undefined reference to tls client method

;-)) I built openssl from source. I'm trying to get TLS 1.2 working, which the old and crufty openssl on Centos 6.4 doesn't do. Do I need to do something different to get the development libraries in place? Thanks! 2013/11/1 David Benfell benf...@mail.parts-unknown.org: Hi all, I'm trying

Re: [users@httpd] undefined reference to tls client method

On 2013-11-01 03:32, Pete Houston wrote: Hello David, On Fri, Nov 01, 2013 at 03:21:35AM -0700, David Benfell wrote: I built openssl from source. I'm trying to get TLS 1.2 working, which the old and crufty openssl on Centos 6.4 doesn't do. Do I need to do something different to get

[users@httpd] SOLVED Re: [users@httpd] undefined reference to tls client method

On 2013-11-01 04:12, David Benfell wrote: On 2013-11-01 03:32, Pete Houston wrote: OTOH, if it fails, you'll probably have to revisit your build of openssl. Actually, even though the test passed, I needed to revisit the build of openssl. The big ugly question is where in (insert obscenity

[users@httpd] Apache insists on binding to *all* addresses even though Listen directives specify specific ip addresses

for it to attempt to do. What am I missing? Thanks! -- David Benfell My mail is usually signed cryptographically, but from Zimbra, it generally will not be. Please see https://parts-unknown.org/node/2 for more information. BEGIN:VCARD VERSION:3.0 FN:David Benfell N: EMAIL;TYPE=internet:benf...@parts

Re: [users@httpd] Apache insists on binding to *all* addresses even though Listen directives specify specific ip addresses

. A file called ssl.conf that had been included and that did a blanket Listen 443. :facepalm. Thanks! Now I can move on to the next problem -- David Benfell My mail is usually signed cryptographically, but from Zimbra, it generally will not be. Please see https://parts-unknown.org/node/2