The Apache Haus Forum

Advanced search  

News:

Welcome to Apache Haus Distribution Forum

Pages: [1] 2 3 ... 10
 1 
 on: December 19, 2019, 03:04:17 PM 
Started by Rezoyen - Last post by mario
Sure a vhost for each application would do a good job. If you have the time, you may set up mod_security.

 2 
 on: December 19, 2019, 12:20:07 PM 
Started by Rezoyen - Last post by Rezoyen
If I were to setup several applications on an apache webserver what would be the most secure way to route requests and prevent file traversals? Is it through virtualhosts, permanent redirects, and a document root for each app?

As an example lets say I have example.com/app1 and then example.com/app2 and rather than dropping through a shared app you have to allow direct access to app1 and app2 separately and lock down their directories separately and route file traversing back to the central application file respective to either app1 or app2. I've heard .htaccess can do this but I don't like the idea of introducing an additional attack vector when it may be possible to get the same results in a more secure and cached form.

I'm reading through the documentation but they don't seem to take an opinionated approach - so feel free to point me to a topic in the official docs and I can followup on the reading.

 3 
 on: November 19, 2019, 11:23:25 AM 
Started by mario - Last post by mario
So far I use https://github.com/microsoftarchive/redis

 4 
 on: November 19, 2019, 11:17:42 AM 
Started by davidluz09 - Last post by mario
I wonder about that version. The last one I built was mod_svn-1.9.5-ap24. But since I use git mod_svn is no longer of interest.

 5 
 on: November 18, 2019, 09:46:13 PM 
Started by davidluz09 - Last post by Gregg
Just a little curious how you got that file with it not offered from our download page. Mario stopped making them years ago.

See https://forum.apachehaus.com/index.php?topic=1578.0

 6 
 on: November 17, 2019, 11:28:06 AM 
Started by davidluz09 - Last post by davidluz09
Hello everyone,

I was just testing your Apache 2.4/SVN 1.7.7 combination. But it appears, that the file mod_svn-1.7.7-ap24-x86.zip is empty.

It doesn't contain anything in the bin and modules folders.

Could you take a look at these files?

Thanks in advance

 7 
 on: November 15, 2019, 10:19:41 AM 
Started by xeon - Last post by mario
Thank you for the feedback.
The binaries are fully compatible with ours.

 8 
 on: November 14, 2019, 11:52:46 PM 
Started by xeon - Last post by xeon
Hi all
Just wanted to share that mod_svn modules for Apache on Windows are available by a guy over at ApacheLounge. Thanks Gregg for the tip

Here is the link
https://www.apachelounge.com/viewtopic.php?t=7951&postdays=0&postorder=asc&start=0

I just installed the mod_svn modules for Subversion 1.13.0 on top of the latest Apache, everything seems ok

 9 
 on: October 20, 2019, 08:57:41 PM 
Started by Gregg - Last post by Gregg
Announcing the release of Apache 2.4.41 with LibreSSL 3.0.2

I really do not understand the LibreSSL versioning. It seems to be different from most or in other words, it is just a number and new sources are out. This is a new major version, but what does it offer that 2.9 didn't? Does it even offer TLS/1.3? No.

The numbers have change in the names of the LibreSSL DLLs, again.
crypto-45.dll now so you can remove crypto-44.dll
ssl-47.dll now so you can remove ssl-46.dll
tls-19.dll now so you can remove tls-18.dll

The Change log can be viewed Here

It is mainly just a "plethora" of bug fixes. We will see if the Visual Studio optimizations work out. It just may be worthy of a major version bump after all. I have however thought they just do not like double digit numbers in their versioning (like 2.10.2) for some time now.

Get your copy today from our download page.


 10 
 on: August 15, 2019, 12:26:22 AM 
Started by Gregg - Last post by Gregg
See https://forum.apachehaus.com/index.php?topic=1574.0 for the details.

Pages: [1] 2 3 ... 10