You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Neil Pitman <ne...@mahjongmania.com> on 2004/04/24 04:14:35 UTC
[users@httpd] Windows Sources for 1.3.29
I'm trying to build Apache-SSL for Windows. I cannot seem to get the
sources for 1.3.29 Windows. There is no windows sources zip in the
dist/httpd directory. In the dis/binaries/win32 directory there are two
interesting files: apache_1.3.29-win32-x86-src.exe and
apache_1.3.29-win32-x86-src.msi.
apache_1.3.29-win32-x86-src.exe fails to run with "Program too big to fit in
memory"
apache_1.3.29-win32-x86-src.msi fails because it claims that I already have
an installation. It probably means the apache 2.0 executable. I don't
really want to trash that until I have at least a candidate for SSL
Finally, the win32 binaries suggests that if I'm not interested in the MSI
version, that I should get the -win32-src.zip file from the root dist/httpd
directory (sorry it's not there).
Anyone have some ideas of how I should proceed to build a secure HTTPD?
Thanks
Neil Pitman
Work +1.514.344.1218
Cell +1.514.863.5465
Neil.pitman@mahjongmania.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Windows Sources for 1.3.29
Posted by hunter <th...@sympatico.ca>.
On Sat, 2004-04-24 at 12:23, Neil Pitman wrote:
> Thanks Aaron,
>
> How do I know that this executable has not been hacked?
>
>
>
> -----Original Message-----
> From: Aaron W Morris [mailto:aaronmorris@mindspring.com]
> Sent: April 23, 2004 11:59 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Windows Sources for 1.3.29
>
>
> Neil Pitman wrote:
>
> > I'm trying to build Apache-SSL for Windows. I cannot seem to get the
> > sources for 1.3.29 Windows. There is no windows sources zip in the
> > dist/httpd directory. In the dis/binaries/win32 directory there are
> > two interesting files: apache_1.3.29-win32-x86-src.exe and
> > apache_1.3.29-win32-x86-src.msi. apache_1.3.29-win32-x86-src.exe fails
> > to run with "Program too big to fit in memory"
> > apache_1.3.29-win32-x86-src.msi fails because it claims that I already
> have
> > an installation. It probably means the apache 2.0 executable. I don't
> > really want to trash that until I have at least a candidate for SSL
> >
> > Finally, the win32 binaries suggests that if I'm not interested in the
> > MSI version, that I should get the -win32-src.zip file from the root
> > dist/httpd directory (sorry it's not there).
> >
> > Anyone have some ideas of how I should proceed to build a secure
> > HTTPD?
> >
> > Thanks
> >
> > Neil Pitman
> > Work +1.514.344.1218
> > Cell +1.514.863.5465
> > Neil.pitman@mahjongmania.com
> >
>
> You can always download the binary version instead:
> http://hunter.campbus.com/
>
>
> --
> Aaron W Morris <aa...@mindspring.com> (decep)
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info. To
> unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
Niel,
My name is Chris Lewis and I create the binaries at...
http://hunter.campbus.com located somewhere in northern United States
and
http://tor.ath.cx/~hunter located in Toronto, Canada.
I have been building these binaries for several years, both for my
download sites and also for my employer (I work for a large Canadian
bank). I have established a trust relationship with thousands of people
around the world that depend on my binaries. I do everything possible to
keep my local site secure and it gets my personal attention daily. Ken
Campney securely manages the hunter.campbus.com site in the US (I ftp
the files there and verify them).
I do not hack the code.
I will try do whatever you would like to help to establish the
confidence that you need. Off-list I will identify myself completely and
we can 'get to know one another' so to speak, if you wish.
However, the only way to be certain is to build it yourself - though you
do have to trust Apache.org and at some point perhaps trust me as well.
If you take the binaries from hunter.campbus.com you should get the MD5
from tor.ath.cx/~hunter/apache and verify the zip or get both from
there.
Chris Lewis
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Windows Sources for 1.3.29
Posted by Neil Pitman <ne...@mahjongmania.com>.
Thanks Chris,
This was not meant to impune mistrust, at least any more that would be
natural of one follows the credo "trust no one". At first, I did no small
amount of fist-shaking at the fact that I could not find prebuilt binaries.
(Since my C days are in the dim dark past) But then I realized that if I'm
serious about security I should build them myself. (Because if I was
serious about compromising security, I would dump some hacked binaries where
the lazy guys like me would take them).
Thanks for the pointers
Neil
-----Original Message-----
From: hunter [mailto:theantigod@sympatico.ca]
Sent: April 24, 2004 3:09 PM
To: users@httpd.apache.org
Subject: RE: [users@httpd] Windows Sources for 1.3.29
On Sat, 2004-04-24 at 12:23, Neil Pitman wrote:
> Thanks Aaron,
>
> How do I know that this executable has not been hacked?
>
>
>
> -----Original Message-----
> From: Aaron W Morris [mailto:aaronmorris@mindspring.com]
> Sent: April 23, 2004 11:59 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Windows Sources for 1.3.29
>
>
> Neil Pitman wrote:
>
> > I'm trying to build Apache-SSL for Windows. I cannot seem to get
> > the
> > sources for 1.3.29 Windows. There is no windows sources zip in the
> > dist/httpd directory. In the dis/binaries/win32 directory there are
> > two interesting files: apache_1.3.29-win32-x86-src.exe and
> > apache_1.3.29-win32-x86-src.msi. apache_1.3.29-win32-x86-src.exe fails
> > to run with "Program too big to fit in memory"
> > apache_1.3.29-win32-x86-src.msi fails because it claims that I already
> have
> > an installation. It probably means the apache 2.0 executable. I
> > don't really want to trash that until I have at least a candidate
> > for SSL
> >
> > Finally, the win32 binaries suggests that if I'm not interested in
> > the
> > MSI version, that I should get the -win32-src.zip file from the root
> > dist/httpd directory (sorry it's not there).
> >
> > Anyone have some ideas of how I should proceed to build a secure
> > HTTPD?
> >
> > Thanks
> >
> > Neil Pitman
> > Work +1.514.344.1218
> > Cell +1.514.863.5465
> > Neil.pitman@mahjongmania.com
> >
>
> You can always download the binary version instead:
> http://hunter.campbus.com/
>
>
> --
> Aaron W Morris <aa...@mindspring.com> (decep)
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project. See <URL:http://httpd.apache.org/userslist.html> for more
> info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project. See <URL:http://httpd.apache.org/userslist.html> for more
> info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
Niel,
I should have said in my last note but I forgot. I can also help you with
getting the sources you are looking for.
Just download apache_1.3.29.tar.gz from Apache.org and don't worry about the
fact that is doesn't say Windows in the filename. It builds just fine and
that is how I do it. I figure they just stopped making the Windows sources
because there is nothing special about them, except perhaps the CR/LF thing.
But it does not appear to cause a problem building it.
Chris Lewis
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info. To
unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Windows Sources for 1.3.29
Posted by hunter <th...@sympatico.ca>.
On Sat, 2004-04-24 at 12:23, Neil Pitman wrote:
> Thanks Aaron,
>
> How do I know that this executable has not been hacked?
>
>
>
> -----Original Message-----
> From: Aaron W Morris [mailto:aaronmorris@mindspring.com]
> Sent: April 23, 2004 11:59 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Windows Sources for 1.3.29
>
>
> Neil Pitman wrote:
>
> > I'm trying to build Apache-SSL for Windows. I cannot seem to get the
> > sources for 1.3.29 Windows. There is no windows sources zip in the
> > dist/httpd directory. In the dis/binaries/win32 directory there are
> > two interesting files: apache_1.3.29-win32-x86-src.exe and
> > apache_1.3.29-win32-x86-src.msi. apache_1.3.29-win32-x86-src.exe fails
> > to run with "Program too big to fit in memory"
> > apache_1.3.29-win32-x86-src.msi fails because it claims that I already
> have
> > an installation. It probably means the apache 2.0 executable. I don't
> > really want to trash that until I have at least a candidate for SSL
> >
> > Finally, the win32 binaries suggests that if I'm not interested in the
> > MSI version, that I should get the -win32-src.zip file from the root
> > dist/httpd directory (sorry it's not there).
> >
> > Anyone have some ideas of how I should proceed to build a secure
> > HTTPD?
> >
> > Thanks
> >
> > Neil Pitman
> > Work +1.514.344.1218
> > Cell +1.514.863.5465
> > Neil.pitman@mahjongmania.com
> >
>
> You can always download the binary version instead:
> http://hunter.campbus.com/
>
>
> --
> Aaron W Morris <aa...@mindspring.com> (decep)
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info. To
> unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
Niel,
I should have said in my last note but I forgot. I can also help you
with getting the sources you are looking for.
Just download apache_1.3.29.tar.gz from Apache.org and don't worry about
the fact that is doesn't say Windows in the filename. It builds just
fine and that is how I do it. I figure they just stopped making the
Windows sources because there is nothing special about them, except
perhaps the CR/LF thing. But it does not appear to cause a problem
building it.
Chris Lewis
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
RE: [users@httpd] Windows Sources for 1.3.29
Posted by Neil Pitman <ne...@mahjongmania.com>.
Thanks Aaron,
How do I know that this executable has not been hacked?
-----Original Message-----
From: Aaron W Morris [mailto:aaronmorris@mindspring.com]
Sent: April 23, 2004 11:59 PM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Windows Sources for 1.3.29
Neil Pitman wrote:
> I'm trying to build Apache-SSL for Windows. I cannot seem to get the
> sources for 1.3.29 Windows. There is no windows sources zip in the
> dist/httpd directory. In the dis/binaries/win32 directory there are
> two interesting files: apache_1.3.29-win32-x86-src.exe and
> apache_1.3.29-win32-x86-src.msi. apache_1.3.29-win32-x86-src.exe fails
> to run with "Program too big to fit in memory"
> apache_1.3.29-win32-x86-src.msi fails because it claims that I already
have
> an installation. It probably means the apache 2.0 executable. I don't
> really want to trash that until I have at least a candidate for SSL
>
> Finally, the win32 binaries suggests that if I'm not interested in the
> MSI version, that I should get the -win32-src.zip file from the root
> dist/httpd directory (sorry it's not there).
>
> Anyone have some ideas of how I should proceed to build a secure
> HTTPD?
>
> Thanks
>
> Neil Pitman
> Work +1.514.344.1218
> Cell +1.514.863.5465
> Neil.pitman@mahjongmania.com
>
You can always download the binary version instead:
http://hunter.campbus.com/
--
Aaron W Morris <aa...@mindspring.com> (decep)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info. To
unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Windows Sources for 1.3.29
Posted by Aaron W Morris <aa...@mindspring.com>.
Neil Pitman wrote:
> I'm trying to build Apache-SSL for Windows. I cannot seem to get the
> sources for 1.3.29 Windows. There is no windows sources zip in the
> dist/httpd directory. In the dis/binaries/win32 directory there are two
> interesting files: apache_1.3.29-win32-x86-src.exe and
> apache_1.3.29-win32-x86-src.msi.
> apache_1.3.29-win32-x86-src.exe fails to run with "Program too big to fit in
> memory"
> apache_1.3.29-win32-x86-src.msi fails because it claims that I already have
> an installation. It probably means the apache 2.0 executable. I don't
> really want to trash that until I have at least a candidate for SSL
>
> Finally, the win32 binaries suggests that if I'm not interested in the MSI
> version, that I should get the -win32-src.zip file from the root dist/httpd
> directory (sorry it's not there).
>
> Anyone have some ideas of how I should proceed to build a secure HTTPD?
>
> Thanks
>
> Neil Pitman
> Work +1.514.344.1218
> Cell +1.514.863.5465
> Neil.pitman@mahjongmania.com
>
You can always download the binary version instead:
http://hunter.campbus.com/
--
Aaron W Morris <aa...@mindspring.com> (decep)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org