[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

admin.linuxkb.org & SSL & included modules



-----BEGIN PGP SIGNED MESSAGE-----


As far as I can tell all the previous bugs have been fixed with regards to
SSL and POST's.  So the new SSL server is Apache 1.3.6 and the latest
OpenSSL/mod_ssl.

Hence, I've moved admin to the SSL server and turned it off from the
non-SSL server.  Hence if you want to get onto admin:

https://admin.linuxkb.org/

is the correct URL.  http:// won't work.

One thing I've noticed is that the SSL server is noticably slower than
non-SSL.  I'm guessing the slow down is caused by the RC5 client (remember
I installed the distributed.net client) not giving up enough CPU time.  If
the slowdown annoys anyone, feel free to kill the daemon.

Another thing I/we need to do it determine the required Apache modules we
need.  I'm not talking about PHP or mod_perl, but the included modules
that come with apache.  Each of these take RAM, so loading unnecessary
support is stupid.

Currently we are loading;
cern_meta
expires
usertrack
auth_dbm
access
actions
alias
asis
auth
autoindex
cgi
env
dir
include
log_config
userdir
imap
mime
negotiation
setenvif
status

Obviously some like cgi are critical.  Others like imap or cern_meta???



- -- 
Aaron Turner           | Either which way, one half dozen or another. 
aturner@pobox.com      | Check out the Red Hat Linux User's FAQ Online!
www.pobox.com/~aturner | http://www.pobox.com/~aturner/RedHat-FAQ/
All emails from this account are PGP signed.  Lack of a signature is "bad".
PGP Key fingerprint = FB E1 CE ED 57 E4 AB 80  59 6E 60 BF 45 1B 20 E8



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNv2rrTM3jpXy1kJtAQFO0wP/QKLEJfuQF9jTCwXVInRGdly3rP2OqIBc
42ec5L2QxbRiAuZmEM+VYB9/2pLhcdXPOIikGXZaesfLq+9XGineHmFj6GMcMAQo
IMfaKv2k5qUkLNx4qOsDIgD8tYvO+q0NQeb8FKrMOTm8rlnOxxKIt4XM2t/gabE9
BylWaxQ1Ryc=
=MQhy
-----END PGP SIGNATURE-----