Page 1 of 43 12311 ... Last
  • Jump to page:
    #1
  1. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    New Article


    This article rocks!!!! Enough said!
  2. #2
  3. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: New Article


    Thanks a lot man, I'm glad you like it!

    -Eugene
  4. #3
  5. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Certificates and separate tutorial


    It would be nice if you gave a link to the tutorial on how to make certificates. I can't find such a thing on this site.
  6. #4
  7. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Apache doesn't like "SSLEngine" directive


    Just finished setting up Apache and reading your article, and heavily modifying the httpd.conf file it made during installation.

    Apache chokes when it parses the default config file and comes upon the "SSLEngine on" which is mentioned in the SSL VirtualHost section that was added on to the httpd.conf-dist file.

    # apachectl startssl
    Syntax error on line 949 of /usr/local/apache/conf/httpd.conf:
    Invalid command 'SSLEngine', perhaps mis-spelled or defined by a module not included in the server configuration
    ./apachectl startssl: httpd could not be started

    I read Apache's website and I can't find any information on the SSLEngine directive.

    I'm going to try looking at some other websites and other example httpd.conf's to see what's going on. I think this directive may be discontinued, replaced, or invalid.

    You may want to modify your tutorial to include this tidbit of information. Otherwise, excellent tutorial...
  8. #5
  9. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Compiling Error with PHP4


    I get the following error when compling PHP4.
    <br>

    <br>
    Any clues as to why ?
    <br>

    <br>
    Thanks ...
    <br>

    <br>
    JD
    <br>

    <br>
    <code>
    <br>
    /bin/sh /home/jdare/Linux/Scratch/php-4.0.0/libtool --silent --mode=compile gcc -DHAVE_CONFIG_H -I. -I/home/jdare/Linux/Scratch/phpc
    <br>
    microtime.c: In function `php_if_getrusage':
    <br>
    microtime.c:97: storage size of `usg' isn't known
    <br>
    microtime.c:100: `RUSAGE_SELF' undeclared (first use in this function)
    <br>
    microtime.c:100: (Each undeclared identifier is reported only once
    <br>
    microtime.c:100: for each function it appears in.)
    <br>
    microtime.c:106: `RUSAGE_CHILDREN' undeclared (first use in this function)
    <br>
    microtime.c:110: warning: implicit declaration of function `getrusage'
    <br>
    microtime.c:97: warning: unused variable `usg'
    <br>
    make[3]: *** [microtime.lo] Error 1
    <br>
    make[3]: Leaving directory `/home/jdare/Linux/Scratch/php-4.0.0/ext/standard'
    <br>
    make[2]: *** [all-recursive] Error 1
    <br>
    make[2]: Leaving directory `/home/jdare/Linux/Scratch/php-4.0.0/ext/standard'
    <br>
    make[1]: *** [all-recursive] Error 1
    <br>
    make[1]: Leaving directory `/home/jdare/Linux/Scratch/php-4.0.0/ext'
    <br>
    make: *** [all-recursive] Error 1
    <br>
    </code>
  10. #6
  11. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Apache doesn't like


    I receivied no such error during compilation and installation. I followed the instructions to the tooth and everything worked perfectly. It's a very well-written article. Only thing that doesn't work properly is the SSL Certificate. I mean, it works, I just don't feel like paying verisign $1000 right now, maybe later. If you want, I can send you my httpd.conf
  12. #7
  13. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Compiling Error with PHP4


    I had the same problem a while back with one of the betas. It was cause by using the wrong path to ldap or mysql I forget which one. I fixed it by explicitly declaring the dir for it with --with-ldap=/usr/local/src/openldap-1.2.9

    After fixing the paths everything went perfectly.
  14. #8
  15. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Certificates and separate tutorial


    http://www.pache-ssl.org/

    Scroll about half way down the page and there is a little tutorial of such. Using openssl.
  16. #9
  17. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Apache doesn't like


    I followed the instructions precisely as well. After I made Apache it gave me the confirmation message about having the SSL-enabled version and everything, and to get a certificate, but just refuses to like the SSLEngine directive. It has no problem with anything before like 948 in there (and, by the way, there are other SSL-related things in the httpd.conf before that line)
    Doug
  18. #10
  19. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Why complicate things?


    Why does some parts of the unix community absolutely want to compile everything themselves?
    <br>
    <br>
    At least on modern Linux installations, everything needed may be downloaded as install-ready packages that are even - to a certain degree - capable of making proper post-installation adjustments in required configuration files.
    <br>
    <br>
    Example: Take a Red Hat 6.2 installation:
    <br>
    <br>
    1. Get an openssl package from a FTP mirror site, e.g. ftp://ftp.de.openbsd.org/pub/unix/OpenBSD/OpenSSH/portable/rpm/openssl-0.9.5a-1.i386.rpm and install it.
    <br>
    (install openssh while you are at it)
    <br>
    <br>
    2. Get the nice Apache-mod_ssl package from http://www.modssl.org:
    <br>
    http://www.modssl.org/contrib/apache-mod_ssl-1.3.12.2.6.4-0.6.0.i686.rpm
    <br>
    Create SSL keys/certificates as described at http://www.modssl.org/docs/2.6/ssl_faq.html#ToC24
    <br>
    Start Apache and see that everything works:
    <br>
    apachectl startssl
    <br>
    <br>
    3. Get MySQL packages from the nearest mirror, like
    <br>
    ftp://ftp.sunet.se/pub/unix/databases/relational/mysql/Downloads/MySQL-3.22/MySQL-3.22.32-1.i386.rpm and ftp://ftp.sunet.se/pub/unix/databases/relational/mysql/Downloads/MySQL-3.22/MySQL-client-3.22.32-1.i386.rpm
    <br>
    Install them, and check that it works.
    <br>
    <br>
    4. Get relevant PHP 4 packages and install them:
    <br>
    http://fsr.ku.dk/people/troels/rpms/php/
    <br>
    <br>
    5. Re-start Apache (apachectl restart) and check that everything works, initially by checking the output of a the PHP phpinfo() function in an otherwise empty index.php file:
    <br>
    <?php phpinfo() ?>
    <br>
    <br>
    Done.
  20. #11
  21. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Linux is not RedHat


    Too easy. Some of us, who like our systems secure, use less rudimentary methods by using robust Slackware distributions of Linux. =)

    Nothing personal, just my opinion.
  22. #12
  23. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Linux is not RedHat


    No, it's not "too easy".
    <br>
    <br>
    It's simply non-sense to say that easy==insecure. And compiling software yourself does /not/ make it more secure.
    <br>
    <br>
    By skipping the compiling step (which _can_ be a very frustrating step), the administrator can spend more time getting used to the software and fine-tune it. I have seen many installations where software was installed in a - may I say - semi-optimal way, because the system administrator had gotten frustrated during compilation; after something looked like it was working, he didn't have patience to also perform decent post-installation steps.
    <br>
    <br>
    Actually, having a proper package management system helps _improve_ security by adding a well-defined, systematic software management system. - A system where there is a well-defined way to query the status of a package (which file belongs to what package, what packages have files which have been modified since installation, and so on).
    <br>
    <br>
    Also, sticking to the system's package management system makes the system easier for other system administrators to work with (e.g. if the normal sysadm is ill, is on vacation or has found an other occupation).
    <br>
    <br>
    I'm not familiar with the Slackware package system, but I assume that it does have one.
    <br>
    <br>
    Finally: You are right that Linux != Red Hat. But I know for sure that SuSE, Mandrake and Debian have package management systems, too (so does Solaris, AIX and probably Tru64). Why not make use of them? They were created for a reason...
  24. #13
  25. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Apache doesn't like


    Did you make sure to uninstall previous versions of Apache, PHP, etc.?
    <BR>
    -Eugene
  26. #14
  27. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Apache doesn't like


    Yes, I did all that uninstallation previously.
    <br>
    <P>
    <br>
    The only thing different is that I'm not installing MySQL or PHP on this machine, only Apache and SSL. I am also trying to compile in mod_info.c as well. But Apache did not like me requesting /server-info after I started the server up in non-SSL mode. But, I still made sure I was doing everything required that was in this setup process.
    <br>
    <P>
    <br>
    Doug
  28. #15
  29. No Profile Picture
    guest
    Guest
    Devshed Newbie (0 - 499 posts)

    Re: Linux is not RedHat


    I'm sure your original message would be helpful to RedSplat and ManDrunk users, but if all tutorials were written like "Just download so and so RPM's and that's that!" the rest of the Linux community would be plan SOL. Such a poorly written "tutorial" would be of no help to us at all, and would really detriment to the "do-it-yourself" nature of Unix in general. Thanks.
Page 1 of 43 12311 ... Last
  • Jump to page:

IMN logo majestic logo threadwatch logo seochat tools logo