New answers tagged

0

You can give a try with below. I had solved the problem by using below in httpd.conf. NameVirtualHost Server_IP_Address:80 <VirtualHost Server_IP_Address:80> ........ </VirtualHost> Let us know if you are still facing issues. EDIT: NOTE The asterisks * match all addresses, so the main server serves no requests. Due to the fact that the ...


1

You would do better to set up virtual hosts. You need at least three from what I can see; a default example.com, www.example.com, and ticket.example.com. You can then place a simpler RewriteRule in the default vhost that redirects any request to https://www.example.com/$1. Then when the client hits either the www.example.com or ticket.example.com vhosts ...


1

A user reports a similar exception (0xc0000005) on stackoverflow which suggests that the problem is a memory access error, and the code accesses a nil pointer (or is blocked from access for protection reasons..); http://stackoverflow.com/a/31535903/329931 Their remedy is to disable the EMET features on the binary exe. There is some information on disabling ...


1

Similar issue, apache2 was responding to 443, nothing in the logs /etc/apache2# openssl s_client -connect localhost:443 -state -debug gave me the following SSL_connect:unknown state read from 0x1182fe0 [0x1189010] (7 bytes => 7 (0x7)) 0000 - 48 54 54 50 2f 31 2e HTTP/1. SSL_connect:error in unknown state 139790287365792:...


0

I ran into this when testing out ssl on a site that was using a wildcard cert. Just add the DNS into your /etc/hosts file and restart apache. Make sure to remove this when you are done testing.


0

EventSource should be fine with mod_proxy, since EventSource is less complex in communications and runs on your Application layer (HTML), as long as you enable persistent connections (Keep Alives). I've found a fair bit of issues with WebSockets over proxies, particularly over large corporate networks, which employ proxy routers that don't allow persistent ...


0

I believe the domain health report is simply telling you that it can't create an https connection to your website. I don't know why it can't create an https connection, because https works fine for me, and the various SSL checking and general testing sites say it's fine (example here, here, and here). I would guess that either mxtoolbox has a problem, or ...


-1

This will enable the Rewrite capabilities: RewriteEngine On This checks to make sure the connection is not already HTTPS: RewriteCond %{HTTPS} !=on This rule will redirect users from their original location, to the same: RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] The leading slash is made optional so that this will work either in httpd.conf ...


1

Off the top of my head: Optimise the list of encryption ciphers offered as some are quicker than others Ensure you're sending any intermediate certificates to the client so it doesn't have to find them by other means Make sure you have keepalives enabled to minimise the number of connections for a given client and therefore the amount of times the ...


0

Ended up with this table: **Nginx**: ngx_http_sub_module --> http://p.defau.lt/?A6UukYFKZrYLalJ5KOuTKg **Nginx**: Nginx + lua. LUA body_filter --> http://p.defau.lt/?0ZxLWENoEkFIRD17QlEtbQ **Apache**: Apache Module mod_substitute --> http://p.defau.lt/?IS8u2mnAQTSHs4qEl_MSFQ **Apache**: As of version 2.3 LUA can be used as a scripting language ...


1

As you've worked out, you have a load balancer and auto scaling creating different instances of the server from an AMI. That means some of them will be using a server that has old information. Since you're using RDS your text and configuration should be shared. Creating an AMI on each change isn't practical. I suggest you look into Amazon Elastic File ...


0

Why I am getting Network error: 403 Forbidden in firebug for files that I am not trying to access? You have Options Indexes somewhere in the httpd.conf. This allows you to see list of files in the directory, and Apache will automatically generate this page for you and automatically try to add icons for the known types. In live ( production) environment ...


0

I don't want this to happen - I would rather it show the standard / expected "Secure Connection Failed" error for the non SSL domains. In this case you must configure apache to not accept any clients which don't support SNI, i.e. SSLStrictSNIVHostCheck on. In this case virtual hosts without a configured certificate should cause an error at the client, i.e ...


0

You can block lan users by blocking their mac address with IPTables. You have a nice guilde here: http://www.cyberciti.biz/tips/iptables-mac-address-filtering.html if mac address is 00:0F:EA:91:04:08, try with iptables -A INPUT -m mac --mac-source 00:0F:EA:91:04:08 -j DROP -d 192.168.80.2


1

ServerName is not the directive you want to set. Listen should be on all interfaces and maybe test specific with: (Listen 192.168.21.128:80) as well as you want: <VirtualHost *:80> VM's IP is 192.168.21.128 - is it from the host-bridge-adapter or corporate-dhcp? Anyway if you can successfully telnet 192.168.21.128 80 your browser will do too. ...


0

I managed to solve this doing this: <Directory "/path/to/maindirectory"> [... auth stuff ... ] </Directory> <Directory "/path/to/mysubdirectory"> Allow from All Satisfy Any </Directory> Do NOT use Locations, because they're made to be case sensitive and they do not act on actual folder access, but just over the URL. So, for ...


0

I would guess that it would behave better if you used SERVER_ROOT instead of DOCUMENT_ROOT in your PHP include. Edit for right answer from comments : My bad, this var doesn't seem to be available in the $_SERVER array. Try to simply change the include to $_SERVER["DOCUMENT_ROOT"]."../../_INCLUDES/Header.php"; ?>


0

Sounds like you are using RHEL/CentOS 6.x, as it uses Apache 2.2.15 as the base version. The whole idea with RHEL and its derivates is that during a life-cycle of one major release the software versions do not change at all. Instead the severe bugs are fixed by backporting them and all kinds of small enhancements (such as support for new hardware) are made....


0

ProxyPass / http://localhost:10080/ ... RewriteCond %{HTTP_HOST} ^blog.*$ [NC] RewriteRule ^/([^/]+)$ /index/-/c/$1 [P,L] I think the reason it doesn't redirect to /index/-c/$1 is that the ProxyPass just redirects before hitting the RewriteRule. It always redirects regardless of the path, so it never proceeds to the RewriteRule. To fix it, you have to ...


0

Check if your mysql server is up and running if everything else is correct. Run the below command, /etc/init.d/mysqld status If everything is correct your wordpress should install correctly as sun rises every morning.


0

You are also vulnerable if the private key was ever used for SSLv2. In addition to updating software, consider reissuing the certificate with a new private key.


0

I had this same error and it was from mod security related to ajax uploading 500MB and less files, to fix I opened the config. sudo vi /etc/httpd/conf.d/mod_security.conf Changed this SecRequestBodyLimit 131072 SecRequestBodyNoFilesLimit SecRequestBodyInMemoryLimit To: SecRequestBodyLimit 524288000 SecRequestBodyNoFilesLimit 524288000 ...


4

The trick is to set an environment flag for certain requests with the SetEnvIf directive and then instruct Apache to not log requests matching that: SetEnvIf Request_URI \.gif do-not-log-this-request SetEnvIf Remote_Addr "192\.168\.50\.11" do-not-log-this-request SetEnvIf Request_Method OPTIONS do-not-log-this-request CustomLog logs/access_log common env=!...


0

In your case, php is essentially the same user as apache forks. So the user that owns the child apache processes is the user that requires access to files. The user apache runs as is configured in the apache conf file. You can verify who this user is on your running system by running: ps aux | grep http You will see a process owned by root, and a number ...


1

The reason for this is probably to protect the server when people when do really stupid things like changing all the permissions to 777. Being able to write data is a really essential capability for any application - the world wide web was originally designed a publishing medium but quickly became an application platform. There is no point in provisioning ...


0

There is no indication that Munin is at fault. You're just seeing the last log entries your server managed to write. There are so many reasons the server could have crashed or locked up. It would have been good to look at the console before hard resetting it. You'll have to look deeper and keep an eye on things. The first thing I'd look into is out of ...


0

Apache docs say 2.2 uses PCRE. From this question on stackoverflow a lookahead regex should be something like (note the extra padding in .\.js to make it 4 characters) <Location ~ "^.*(?!\.jpg|\.png|\.bmp|\.gif|\.css|.\.js|\.svg)....$"> This will cause .* to soak up all but the last 4 characters, then check to see if the next four characters does ...


0

I find answer from here: http://alexking.org/blog/2007/11/01/apache-2-only-serves-first-virtual-host Put 2 servername in same 1 VirtualHost tag as below: <VirtualHost *:80> ServerName beta-site-1.com DocumentRoot “/Library/WebServer/beta-site-1” ServerName beta-site-2.com DocumentRoot “/Library/WebServer/beta-site-2” </VirtualHost> I ended ...


-2

According to this munin page Your last entry corresponds to a plugin running, and it is in charge of checking status of apt packages updates in your monitored servers I would disable the plugin for a few days and see how it goes, but considering it is a bare metal server a hard drive SMART check is in order, along with a RAM test afterwards RAM test ...


0

cannot comment here yet, but: Does it work if you keep the changes and restart Apache? If so, the reason is probably that PHP runs as an Apache module. If you want changes to have effect without restarting the web server, use php-cgi instead. This page explains installation and configuration; search the page for "as an Apache Module" or for "PHP 5 as a CGI ...


0

Please post the following from your httpd.conf or other configuration file for the given apache server::: StartServers ? MinSpareServers ? MaxSpareServers ? Could be you are starting way more spare servers than the server can handle for your load of simple web application. Passenger runs inside apache and forks from it.


0

I have installed new ssl certificate from godaddy and faced the similar problem "SSLPassPhraseDialog builtin is not supported on Win32" I tried many things didn't work but it was rather easy fix. Just remove PassPhrase using following command openssl rsa -in <filename1>.key -out <filename2>.key You will have to enter PassPhrase when you first ...


0

While providing input for a range you need to give at least last 3 octets. For eg, you have to use like this: DOSWhitelist xx.xx.xx.* and not this DOSWhitelist xx.xx.*


1

You have misconfigured something but with the information provided we can't even guess what it is. What information you do provide is not consistent with with your (almost content fee) narrative website1.com gives me nxdomain - it doesn't exist. website2.com gives me 185.53.178.6 - a holding page for a domain registrar. website3.com gives me 141.8.230....


1

Don't bother. See Why is HMAC-SHA1 still considered secure? Don't confuse the use of SHA1 as a certificate-signing algorithm (which is insecure) with the use of SHA1 in a cipher suite's HMAC.


0

I had this problem and it wasn't due to DNS since I was not using hostnames, it was the MaxClient and related settings that got it fixed in httpd.conf: <IfModule prefork.c> StartServers 20 MinSpareServers 15 MaxSpareServers 100 ServerLimit 2000 MaxClients 1000 MaxRequestsPerChild 10000 </IfModule> <IfModule worker.c> ...


2

Yes. Edit your default site with sudo nano /etc/apache2/sites-enabled/000default.conf And add this <VirtualHost *:80> ServerName www.domain1.com Redirect / http://www.domain2.com </VirtualHost> More info here: How To Create Temporary and Permanent Redirects with Apache and Nginx


0

I've spent about an hour trying to find a distro you could add to your yum that carries httpd 2.2.x but no such luck. One other alternative would be a fresh install of httpd 2.2.31 by building it yourself from source. You can find it here: http://www.apache.org/dist/httpd/ Downloading the source: wget http://www.apache.org/dist/httpd/httpd-2.2.31.tar.gz ...


1

The equivalent of HTacess is the content of <directory>. i used the following config in the 443 vhost : <Directory /srv/production/www/my_app/current/public/> RewriteEngine on RewriteCond %{HTTP_HOST} ^domain\.com$ [NC] RewriteRule ^(.*)$ http://www.domain.com/$1 [R=301,L] Allow from all Options -...


1

1> To configure mod_dumpio you need to enable dump_io. $ sudo a2enmod dump_io 2> in apache2.conf file write this line LogLevel dumpio:trace7 DumpIOInput On DumpIOOutput On 3) Then restart apache server


0

Check if /etc/apache2/portal.keytab is owned by the webserver user (www-data on debian systems) and only readable by this user (-r--------). Check if you configured your browser for both the domain test.com and subdomains about:config network negotiate-auth.trusted-urls test.com, .test.com


0

what i found was this https://www.apachelounge.com/viewtopic.php?p=21108 hope it helps you Thanks


0

The problem is that basic authentication is specific for the protocol://host:port and realm combination and the login needs to be repeated for each variation. If your requests are mixed over http://example.com and http://www.example.com (and maybe even httpS://www.example.com) your user will always need to separately log into each. The solution is stop ...


-1

I was also facing the same issue until I fount out the root cause of the problem... Problem: Currently, my website is running on Wordpress with XAMPP on windows cloud server and the CPU usage is going 100% Solution: checked my Apache log file(access.log) and some one continuously was trying to access the xmlrpc.php file and 10 requests every seconds that ...


0

It was a mod rewrite thing RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] The above rule needs to be applied at the proxy.


0

Apache will always respond to properly formatted requests. However, if you setup a default SSL virtual host you can return 404 or other error response to all requests. If the requested domain does not match the supported domains, the response should also trigger and SSL domain mismatch error.


0

Why do you compile apache on your own instead of using the package that is provided by your vendor (distribution)? If you compile on your own you have issues like this and security updates also requires repeated efforts.



Top 50 recent answers are included