New answers tagged

0

You can sign the client certs with either the organization cert, or the Apache server cert. Whichever one you use, be sure to put it into a SSLCACertificateFile directive, for example: SSLCACertificateFile /path/to/apache/cert As the documentation for SSLCACertificateFile says, this is the file of "certificates of Certification Authorities (CA) whose ...


2

In general two different services can’t run on the same TCP port. The web server will be running on a different port than the one ssh uses, so pointing your web browser at http://x.x.x.x:2215 was the wrong thing to do. I would start by simply connecting to the default http port, http://x.x.x.x and then if that doesn’t show any content , then simply ...


0

The third field in Combined log format is the username given in the HTTP Basic Authentication header. If there is no HTTP authentication header in the request, the field will be -. So, the bot user simply tried HTTP authentication with admin username and probably a password from dictionary. You can read more information on HTTP Authentication at Wikipedia


2

Inside $() you can still redirect stderr to be the same as stdout, and then it will be captured by the assignment. For example: if AOUTPUT=$(/usr/sbin/apache2ctl -t 2>&1) then /usr/sbin/apache2ctl graceful else rc=$?; printf "%s\n" "$AOUTPUT" >&2; exit $rc fi I added the >&2 so the errors still come out on stderr, ...


0

First enable mode_rewrite Next remove the following line Redirect / https://example.com/ And try using mod_rewrite rule to set your https redirect instead: RewriteEngine on RewriteRule !^crm($|/) https://example.com%{REQUEST_URI} [L,R=301]


0

That's right because you've listed Redirect directive globally for your VirtualHost that will affect every URL on that host. If you need to specify this for particular URL you have 2 options at least: You can you location section like in this example: https://httpd.apache.org/docs/2.4/mod/mod_alias.html#redirect You can use .htaccess file in the ...


1

After some more digging, I believe I have found an answer. It turns out that HAproxy was adding security-related headers to requests that were going through it. That was causing the duplication. The different behaviour of the browsers was a symptom since the CSP header was specific to Chrome. The issue was fixed by introducing different CSP headers that ...


1

It seems that IE is combining the two values of Content-Security-Policy, while the other browsers don't, and this leads to different behavior. But the problem is that the header is being set twice. A couple of options: Find the other place in your configuration where Content-Security-Policy is being set, and remove that. Your header value is being set with ...


2

The best way I found so far to diagnose ssl session resumption is to look at the sent byte count First, enable mod_status and set ExtendedStatus to On. Make sure this status page is non-public accessible, probably with ACL or basic authentication with strong password. You should be able to see session cache usage from your httpd status page, something like ...


0

I ended up using docker-compose to switch between containers conditionally https://github.com/unlocomqx/conditional-xdebug-fpm-docker Inspired by https://jtreminio.com/blog/developing-at-full-speed-with-xdebug/ Here are the interesting parts Two separate php containers each with a different port and one without xdebug php: build: context: ./bin/...


1

Make a second php-fpm pool with the changed settings that you want. You only have one which you named www. Choose a different name for the second one.


0

Module is loaded now after using cache_module instead of mod_cache in APACHE_MODULES env variable (rancher configuration).


0

I think you are gonna have to pick your poison: on this question you have multiple answers, none of them pretty


0

Ok, I figured it out. Thanks to Michael Hampton in the comments. Basically, the php_flag keyword is used by php modules when they want to overwrite a particular configuration directive that was defined in the php.ini file, so it's fine to just comment it out those php_flags in the given module, if they are not supported, and then just change the ...


1

When I try to read this file in web browser, I get "File not found": https://xxxx/components/com_flexicontent/librairies/phpthumb/phpThumb.php?src=/images/piekny-wschod/festiwal-globtroterski-lublin2020-karuzela.jpg&w=290&h=177&aoe=1&q=95 If the actual filename on disk is phpThumb.php?src=%2Fimages%2Fpiekny-wschod%2Ffestiwal-...


1

I guess that the web server is misinterpreting the & character as a parameter separator, or something. It might be worth re-downloading the site with wget --restrict-file-names=windows, to make wget convert & to @ in the file names. Or maybe just bulk rename the files? find -name '*&*' | while read name ; do newname=$(echo $name | sed -e 's:&...


0

Since you said moving /var/www/html/BAR directory content to the /var/www/html/FOO/en directory is acceptable to you, do it and use the following configuration: server { ... root /var/www/html/FOO; index index.php index.html index.htm; location / { try_files $uri $uri/ /index.php?$args; } location /en/ { try_files $...


1

The file extension .pub is ambiguous, as it can refer to many MIME types (none of them being IANA assigned media types): SSH public keys: ASCII armored text files, text/plain Microsoft Publisher documents, application/x-mspublisher Corel Ventura Publisher Publication, application/x-pub By default, Apache uses /etc/mime.types for adding the correct Content-...


0

There is a problem with the SSL configuration for site1, "mcchrystals" isn't mentioned in the certificates. $ openssl s_client -connect www.mcchrystals.co.uk:443 -showcerts | grep '^subject' depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root depth=1 C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 ...


2

Securing Apache is a large topic. See the section "The A" in this answer for some pointers. Your last 3 log messages are attempts at path traversal, to read files outside of the web root on your host. Protect Server Files by Default in the Apache security docs recommends that you deny access to all files by default: <Directory "/"> ...


0

You are not required to change ModSecurity's own configuration in order to disable single rules in Apache. This enables you to disable rules on the specific context where they cause problems, e.g. per VirtualHost or per directory, using SecRuleRemoveById: <ifmodule mod_security3.c> SecRuleRemoveById 930100 </ifmodule> It is better to limit ...


1

RewriteRule !https:\/\/mainsite\.com https://mainsite.com%{REQUEST_URI} [END,NE,R=permanent] The RewriteRule directive matches against the URL-path only, not the scheme + hostname, as you are trying to do here. Since you have negated the pattern (! prefix), it will always be successful and result in a redirect loop. That is, if it is doing anything at all......


0

remove module loading at apache configuration and restart apache.


2

When PHP is running as a standalone service, php-fpm, you can stop it separately. When PHP is running as an Apache module, you can't.


Top 50 recent answers are included