You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by bill <bi...@TechServSys.com> on 2002/08/17 21:29:46 UTC

quick and dirty linix/SSL

I find myself in a bind and need to put up an Apache server with SSL in a 
quick hurry.

Previously I have used SCO UNIX, but think that Linix is a better way to go 
now.  Unfortunately I have NO experience with Linix.

Please let me borrow your experience.
  What versions of Linix have a ready to roll  Apache/SSL configuration that I 
can compile/recompile to include mod_fastcgi.

I am not asking for 10,000 replies about which is best, just which is available 
and does the job.

Thanks,

-bill-
bill atsign TechServSys  dot com
(reply only to the newsgroup, direct replies go to nobody@SpamCop.net)


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by bill <bi...@TechServSys.com>.

On 18 Aug 2002 at 21:11, George Schlossnagle wrote:

> While there is something to be said for a quick install, choosing an OS 
> for a webserver based on install time alone seems like a poor 
> methodology to me.  Not that you made a bad choice (I use freebsd 
> frequently and like it), but their are advantages and disadvantages to 
> every OS, and ease-of-install is only one of them (others might include 
> standards compliance, advanced filesystem support, good asynchronous io 
> support, a stable JVM, support for third-party products you need/want to 
> use).
> 
> At any rate, congrats on your choice!
> 
Thanks George,

FreeBSD is today's <G> choice.  I am still going to try to install Debian on a 
spare, system to learn what is what.  But now I can put that off for a month.

-bill-

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by George Schlossnagle <ge...@omniti.com>.
While there is something to be said for a quick install, choosing an OS 
for a webserver based on install time alone seems like a poor 
methodology to me.  Not that you made a bad choice (I use freebsd 
frequently and like it), but their are advantages and disadvantages to 
every OS, and ease-of-install is only one of them (others might include 
standards compliance, advanced filesystem support, good asynchronous io 
support, a stable JVM, support for third-party products you need/want to 
use).

At any rate, congrats on your choice!

George

On Sunday, August 18, 2002, at 09:01 PM, bill wrote:

> Results:
>
> Don't have a cd burner so Red Hat is out
> Debian froze part way through the initial install and no one answered my
> question on the debian list
> FreeBSD booted quickly from a downloaded floppy image, scoped out my
> ancient hardware (including a nonstandard I/O address for the ancient 
> nic)
> and downloaded what it needed from the net.
> Total install time: 90 min
> total of my time - 10 minutes.
>
> can't ask for better than that.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
// George Schlossnagle
// Principal Consultant
// OmniTI, Inc          http://www.omniti.com
// (c) 240.460.5234   (e) george@omniti.com
// 1024D/1100A5A0  1370 F70A 9365 96C9 2F5E 56C2 B2B9 262F 1100 A5A0


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by bill <bi...@TechServSys.com>.
Results:

Don't have a cd burner so Red Hat is out
Debian froze part way through the initial install and no one answered my 
question on the debian list
FreeBSD booted quickly from a downloaded floppy image, scoped out my 
ancient hardware (including a nonstandard I/O address for the ancient nic) 
and downloaded what it needed from the net.  
Total install time: 90 min
total of my time - 10 minutes.

can't ask for better than that.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by Jay States <js...@mac.com>.
>
> okay, but I can't even get my bleeding edge mandrake to lock up, never 
> mind crash. ( looks like they are getting it together. ~g~)
> nothing wrong with paid support, specially for a business 
> installation, it does become a write-off at tax time. ( mandrake 8.2 
> pro-pack came with over 300 in paid support vouchers, figuring each 
> call is roughly 50 (thier rate) you can have running before used up, 
> though never had to use any..sweet install, found and configured all 
> hardware no problems)
>
> red hat 7.3 won't boot aver installing, no valid root partiton.
>
> free bsd is a nightmare to install
>
> haven't tried deb yet.

I have been using FreeBSD since 4.2, I've tried Mandrake, Red Hat and 
Deb.  FreeBSD is it to use, the online manual is the best I've of any 
Unix/Linux OS and ssl/apache is installed with the packages.

My opinion 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by "J. Greenlees" <ja...@shaw.ca>.
Gary Turner wrote:
> On Sat, 17 Aug 2002 13:23:12 -0700, J. Greenlees wrote:
> 
> 
>>bill wrote:
>>
> 
>>>I find myself in a bind and need to put up an Apache server with SSL in a 
>>>quick hurry.
>>>
>>>Previously I have used SCO UNIX, but think that Linix is a better way to go 
>>>now.  Unfortunately I have NO experience with Linix.
>>>
>>>Please let me borrow your experience.
>>>
> <snip>
> 
>>red hat, madrake, debian, basically all linux distros have apache with 
>>ssl and fastcgi included.
>>
>>real choice is which one suites your needs best.
>>check the distro sites to choose.
>>(mandrake is my personal choice, but it's bleeding edge and is often 
>>unstable, so I don't think it will suite your needs.)
>>red hat is often the distro of choice for reliability.
>>
> 
> Pretty much agreed, with exceptions.
> 
> Red Hat's main asset is company (read paid) support, not stability.  Ask
> those who find things broken upon upgrade, or even out of the box.  RH
> users, please don't take that as flame bait.  If it's broken, it's
> fixable, but it's still a PITA.
> 
> Mandrake, from hearsay, is a straight forward easy install.  It suffers
> from RPM/dependency hell, though.  Friends tell me RPMs are getting
> better, but not good yet.
> 
> Debian is a little tougher to install.  Again, friends say that that's
> getting better.  Since Debian never needs to be re-installed, ever,
> installation methods are probably not high priority for developers. :)
> I'm about to install it on a couple of boxes, so I'll find out.
> 
> More on Debian (OK, I'm biased.  I've tried it, I like it, and cannot
> imagine a reason to leave standards compliance, deb packages, and
> apt-get behind.)
> 
> Stable/Woody is rock solid stable.  Everything plays well together.  Not
> cutting edge, it is thoroughly tested and production/server ready.  Bugs
> are minor.  Bug fixes and security patches are virtually transparent.
> For example, the recent SSL and Apache security flaps were handled with
> two commands;  "apt-get update" and "apt-get upgrade".  If you
> prefer/need to compile your own, the process is only slightly more
> complex.
> 
> Testing/Sarge has more of the latest goodies.  Lots of folks like it for
> their workstations.  Things can break, but fixes are usually out within
> days, if not hours.  Hey, that's why they call it "Testing".
> 
> Unstable/Sid is cutting edge.  Not suitable for work.  Don't be
> surprised when something you're not even using breaks something you are.
> Hackers love it.
> 
> If this is a company install, the suits may have concerns about support.
> For Debian this is the debian-users mail list.  Volume averages just
> under 200 letters a day.  Solutions are very likely to be offered by the
> person who actually wrote, maintains, or documents the package in
> question.  Response times, well, who can say?  One hour or less is
> common.  I've seen <10 minutes so often, I'm over the shock.
> 
> See http://www.debian.org/
> --
> gt           kk5st@swbell.net
> The advice is free, and worth every cent.
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> 

okay, but I can't even get my bleeding edge mandrake to lock up, never 
mind crash. ( looks like they are getting it together. ~g~)
nothing wrong with paid support, specially for a business installation, 
it does become a write-off at tax time. ( mandrake 8.2 pro-pack came 
with over 300 in paid support vouchers, figuring each call is roughly 50 
(thier rate) you can have running before used up, though never had to 
use any..sweet install, found and configured all hardware no problems)

red hat 7.3 won't boot aver installing, no valid root partiton.

free bsd is a nightmare to install

haven't tried deb yet.



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by Gary Turner <kk...@swbell.net>.
On Sat, 17 Aug 2002 13:23:12 -0700, J. Greenlees wrote:

>bill wrote:

>> I find myself in a bind and need to put up an Apache server with SSL in a 
>> quick hurry.
>> 
>> Previously I have used SCO UNIX, but think that Linix is a better way to go 
>> now.  Unfortunately I have NO experience with Linix.
>> 
>> Please let me borrow your experience.
<snip>

>red hat, madrake, debian, basically all linux distros have apache with 
>ssl and fastcgi included.
>
>real choice is which one suites your needs best.
>check the distro sites to choose.
>(mandrake is my personal choice, but it's bleeding edge and is often 
>unstable, so I don't think it will suite your needs.)
>red hat is often the distro of choice for reliability.

Pretty much agreed, with exceptions.

Red Hat's main asset is company (read paid) support, not stability.  Ask
those who find things broken upon upgrade, or even out of the box.  RH
users, please don't take that as flame bait.  If it's broken, it's
fixable, but it's still a PITA.

Mandrake, from hearsay, is a straight forward easy install.  It suffers
from RPM/dependency hell, though.  Friends tell me RPMs are getting
better, but not good yet.

Debian is a little tougher to install.  Again, friends say that that's
getting better.  Since Debian never needs to be re-installed, ever,
installation methods are probably not high priority for developers. :)
I'm about to install it on a couple of boxes, so I'll find out.

More on Debian (OK, I'm biased.  I've tried it, I like it, and cannot
imagine a reason to leave standards compliance, deb packages, and
apt-get behind.)

Stable/Woody is rock solid stable.  Everything plays well together.  Not
cutting edge, it is thoroughly tested and production/server ready.  Bugs
are minor.  Bug fixes and security patches are virtually transparent.
For example, the recent SSL and Apache security flaps were handled with
two commands;  "apt-get update" and "apt-get upgrade".  If you
prefer/need to compile your own, the process is only slightly more
complex.

Testing/Sarge has more of the latest goodies.  Lots of folks like it for
their workstations.  Things can break, but fixes are usually out within
days, if not hours.  Hey, that's why they call it "Testing".

Unstable/Sid is cutting edge.  Not suitable for work.  Don't be
surprised when something you're not even using breaks something you are.
Hackers love it.

If this is a company install, the suits may have concerns about support.
For Debian this is the debian-users mail list.  Volume averages just
under 200 letters a day.  Solutions are very likely to be offered by the
person who actually wrote, maintains, or documents the package in
question.  Response times, well, who can say?  One hour or less is
common.  I've seen <10 minutes so often, I'm over the shock.

See http://www.debian.org/
--
gt           kk5st@swbell.net
The advice is free, and worth every cent.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by "J. Greenlees" <ja...@shaw.ca>.
Bill,
red hat, madrake, debian, basically all linux distros have apache with 
ssl and fastcgi included.

real choice is which one suites your needs best.
check the distro sites to choose.
(mandrake is my personal choice, but it's bleeding edge and is often 
unstable, so I don't think it will suite your needs.)
red hat is often the distro of choice for reliability.

bill wrote:
> I find myself in a bind and need to put up an Apache server with SSL in a 
> quick hurry.
> 
> Previously I have used SCO UNIX, but think that Linix is a better way to go 
> now.  Unfortunately I have NO experience with Linix.
> 
> Please let me borrow your experience.
>   What versions of Linix have a ready to roll  Apache/SSL configuration that I 
> can compile/recompile to include mod_fastcgi.
> 
> I am not asking for 10,000 replies about which is best, just which is available 
> and does the job.
> 
> Thanks,
> 
> -bill-
> bill atsign TechServSys  dot com
> (reply only to the newsgroup, direct replies go to nobody@SpamCop.net)
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> 




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: quick and dirty linix/SSL

Posted by Daniel Lopez <da...@rawbyte.com>.
Any Linux (not Linix :) distribution will do. Most people use Red Hat or
Mandrake. Both of them you can either buy or download for free.
They include precompiled versions of Apache with SSL support.
The contribution section of www.modssl.org also has precompiled binaries of
Apache.
I have a chapter online that explains how to run Apache 2 with SSL (Apache 2
does not support fast_cgi yet afaik, but many of the concepts in the
chapter, like generating keys and certificates should apply)
http://www.apacheworld.org/ty24/site.chapter17.html

Daniel


On Sat, Aug 17, 2002 at 03:29:46PM -0400, bill wrote:
> I find myself in a bind and need to put up an Apache server with SSL in a 
> quick hurry.
> 
> Previously I have used SCO UNIX, but think that Linix is a better way to go 
> now.  Unfortunately I have NO experience with Linix.
> 
> Please let me borrow your experience.
>   What versions of Linix have a ready to roll  Apache/SSL configuration that I 
> can compile/recompile to include mod_fastcgi.
> 
> I am not asking for 10,000 replies about which is best, just which is available 
> and does the job.
> 
> Thanks,
> 
> -bill-
> bill atsign TechServSys  dot com
> (reply only to the newsgroup, direct replies go to nobody@SpamCop.net)
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org

-- 
Teach Yourself Apache 2 -- http://apacheworld.org/ty24/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org