You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@httpd.apache.org by ed...@ita.org.mo on 2007/09/21 16:50:59 UTC

[users@httpd] https can;t be good for work

Dear All,

I can't to enable the https as the following :

<VirtualHost webmail.ita.org.mo>
Redirect / https://webmail.ita.org.mo:443
</VirtualHost>

<VirtualHost webmail.ita.org.mo>
DocumentRoot ...
ServerName webmail.ita.org.mo
ErrorLog ...
TransferLog ...
SSLEngine on
SSLCertificateFile server.crt
SSLCertificateKeyFile server.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
CustomLog /var/log/itawm-ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>


error log of web server :
[Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) 
`localhost' does NOT match server name!?
[Fri Sep 21 22:42:44 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) 
`localhost' does NOT match server name!?
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) 
`localhost' does NOT match server name!?
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) 
`localhost' does NOT match server name!?

ssl error log :
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) 
`localhost.localdomain' does NOT match server name!?
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) 
`localhost.localdomain' does NOT match server name!?

So, what mistake about the config ?

Remark : The ssl is self-signed SSL Certificate, and the Web Server come 
with FC6 System.

Thanks !

Edward.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Max Users

Posted by Joshua Slive <jo...@slive.ca>.

On 9/21/07, James Sherwood <js...@rgisolutions.com> wrote:
> My understanding if you dont have that directive the max is 250.
>
> I have tried hitting it with 1000 concurrent connections and it does not
> throw a server too busy error.

See the ListenBacklog directive.

Apache does not send a nicely-formatted html error page saying "Server
Too Busy". The basic reasoning is that, if there were resources free
to send that page, why not send what the browser requested instead.
When MaxClients is hit, apache simply doesn't accept more connections.
They are kept in the ListenBacklog and the overflow is simply
rejected.

If you really want a "Server Too Busy" message, there are some third
party modules that can do it. I haven't personally used any of them.
See: http://modules.apache.org/

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Max Users

Posted by James Sherwood <js...@rgisolutions.com>.

My understanding if you dont have that directive the max is 250.

I have tried hitting it with 1000 concurrent connections and it does not 
throw a server too busy error.

--James

----- Original Message ----- 
From: "Luis Moreira" <lu...@esi.pt>
To: <us...@httpd.apache.org>
Sent: Friday, September 21, 2007 12:18 PM
Subject: Re: [users@httpd] Max Users


> Have you tried to add that directive ?
>
> MaxClients N
>
> Luis
>
>
> James Sherwood wrote:
>> Hello,
>>
>> I am trying to get my apache to not allow users past X number.
>>
>> We are using Apache 2.0.54 on Win2003 server
>> The httpd.conf does not have a MaxClients directive in it.
>>
>> The only thing it has is:
>> <IfModule mpm_winnt.c>
>> ThreadsPerChild 450
>> MaxRequestsPerChild  0
>> </IfModule>
>>
>> There is no module called mpm_winnt.c in any of the directories.
>>
>> Basically what I am striving for is after X number of concurrent 
>> connections, return a server too busy error.  Is this possible?
>>
>> Thanks in advance,
>> James
>>
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server 
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
> -- 
> *Luis Moreira*
> *Analista*
> *E. S. Informática*
> *Gestão de Sistemas, Qualidade e Produção
> Comunicação de Dados e Segurança
> *Rua Fraternidade Operária 5
> 2799-501 Carnaxide
> Tel: +351 21 416 82 88
> Fax: +351 21 416 80 92
> Email : luis.moreira@esi.pt <ma...@esi.pt>
> URL: http://www.esi.pt <http://www.esi.pt/>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
> __________ NOD32 2543 (20070921) Information __________
>
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
>
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Max Users

Posted by Luis Moreira <lu...@esi.pt>.

Have you tried to add that directive ?

MaxClients N

Luis


James Sherwood wrote:
> Hello,
>
> I am trying to get my apache to not allow users past X number.
>
> We are using Apache 2.0.54 on Win2003 server
> The httpd.conf does not have a MaxClients directive in it.
>
> The only thing it has is:
> <IfModule mpm_winnt.c>
> ThreadsPerChild 450
> MaxRequestsPerChild  0
> </IfModule>
>
> There is no module called mpm_winnt.c in any of the directories.
>
> Basically what I am striving for is after X number of concurrent 
> connections, return a server too busy error.  Is this possible?
>
> Thanks in advance,
> James
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

-- 
*Luis Moreira*
*Analista*
*E. S. Informática*
*Gestão de Sistemas, Qualidade e Produção
Comunicação de Dados e Segurança
*Rua Fraternidade Operária 5
2799-501 Carnaxide
Tel: +351 21 416 82 88
Fax: +351 21 416 80 92
Email : luis.moreira@esi.pt <ma...@esi.pt>
URL: http://www.esi.pt <http://www.esi.pt/>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

[users@httpd] Max Users

Posted by James Sherwood <js...@rgisolutions.com>.

Hello,

I am trying to get my apache to not allow users past X number.

We are using Apache 2.0.54 on Win2003 server
The httpd.conf does not have a MaxClients directive in it.

The only thing it has is:
<IfModule mpm_winnt.c>
ThreadsPerChild 450
MaxRequestsPerChild  0
</IfModule>

There is no module called mpm_winnt.c in any of the directories.

Basically what I am striving for is after X number of concurrent 
connections, return a server too busy error.  Is this possible?

Thanks in advance,
James



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org