 | | | mod_jk2 https | mod_jk2 https 2004-12-01 - By Andrew M
Ralph,
ps -aux gives me:
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME
COMMAND
uzomaduj 192 5.6 5.7 162300 59492 ?? Ss 5:37PM 8:40.26
/System/Li
uzomaduj 752 1.2 1.2 160436 12656 ?? S 6:02PM 0:33.69
/Applicati
root 2 0.0 0.0 18608 212 ?? Ss 5:37PM 0:00.41
/sbin/mach
root 82 0.0 0.0 18092 212 ?? Ss 5:37PM 0:00.15
/usr/sbin/
root 88 0.0 0.2 29340 1776 ?? Ss 5:37PM 0:02.28
kextd
root 90 0.0 0.2 29920 2060 ?? Ss 5:37PM 0:00.79
/usr/sbin/
root 91 0.0 0.1 27888 1048 ?? Ss 5:37PM 0:00.93
/usr/sbin/
root 96 0.0 0.0 18676 268 ?? Ss 5:37PM 0:01.31
/usr/sbin/
root 122 0.0 0.0 27480 396 ?? Ss 5:37PM 0:02.82
netinfod -
root 124 0.0 0.0 18056 124 ?? Ss 5:37PM 0:04.11
update
root 128 0.0 0.0 27336 396 ?? S 5:37PM 0:00.00
/usr/libex
root 129 0.0 0.0 18080 132 ?? Ss 5:37PM 0:00.00
dynamic_pa
root 153 0.0 0.2 39480 2208 ?? Ss 5:37PM 0:02.57
/System/Li
root 159 0.0 0.0 27344 140 ?? Ss 5:37PM 0:00.01
/usr/sbin/
root 161 0.0 0.0 27612 188 ?? Ss 5:37PM 0:00.04
cron
root 162 0.0 0.1 27908 812 ?? S 5:37PM 0:00.04
/Library/S
root 165 0.0 0.1 27752 700 ?? Ss 5:37PM 0:01.37
/usr/sbin/
root 182 0.0 0.1 28900 1248 ?? Ss 5:37PM 0:00.58
/System/Li
nobody 186 0.0 0.1 27968 836 ?? Ss 5:37PM 0:00.05
/usr/sbin/
uzomaduj 201 0.0 0.4 80904 4672 ?? Ss 5:37PM 0:06.15
/System/Li
uzomaduj 208 0.0 0.6 127376 6096 ?? Ss 5:37PM 0:02.65
/System/Li
root 225 0.0 0.1 32268 1416 ?? Ss 5:37PM 0:01.13
/usr/sbin/
root 234 0.0 0.2 29176 1644 ?? Ss 5:38PM 0:06.47
/usr/sbin/
root 284 0.0 0.0 27328 152 ?? Ss 5:38PM 0:00.00
/usr/libex
root 297 0.0 0.0 20120 164 ?? Ss 5:38PM 0:00.00
nfsiod -n
root 310 0.0 0.0 18120 148 ?? Ss 5:38PM 0:00.00
rpc.lockd
root 319 0.0 0.1 29760 1272 ?? Ss 5:38PM 0:01.83
/usr/sbin/
root 329 0.0 0.1 28976 940 ?? Ss 5:38PM 0:00.02
/usr/sbin/
root 343 0.0 0.0 18320 344 ?? Ss 5:38PM 0:01.17
ntpd -f /v
root 350 0.0 0.1 29016 1212 ?? Ss 5:38PM 0:00.99
/usr/sbin/
root 370 0.0 0.0 27484 280 ?? Ss 5:38PM 0:00.05
xinetd -in
uzomaduj 372 0.0 0.2 45300 2116 ?? Ss 5:39PM 0:00.29
/System/Li
uzomaduj 378 0.0 0.4 146032 4428 ?? S 5:39PM 0:14.24
/System/Li
uzomaduj 379 0.0 0.6 159884 6276 ?? S 5:39PM 0:05.32
/System/Li
uzomaduj 380 0.0 2.0 176536 20764 ?? S 5:39PM 0:44.73
/System/Li
uzomaduj 382 0.0 0.3 147732 3452 ?? Ss 5:39PM 0:00.53
/System/Li
root 401 0.0 0.1 28548 1080 ?? Ss 5:39PM 0:00.36
nmbd
uzomaduj 508 0.0 1.5 164588 16120 ?? S 5:42PM 0:56.73
/Developer
root 690 0.0 0.1 27992 1080 ?? Ss 5:50PM 0:00.05
/System/Li
uzomaduj 703 0.0 0.2 37180 2152 ?? S 5:58PM 0:00.61
/System/Li
uzomaduj 745 0.0 4.2 244176 44152 ?? S 6:00PM 5:52.64
/Applicati
root 753 0.0 0.0 27540 496 p1 Ss 6:02PM 0:00.02
login -pf
uzomaduj 754 0.0 0.1 22652 904 p1 S 6:02PM 0:00.04
-tcsh
root 762 0.0 0.1 27856 644 p1 S 6:02PM 0:00.01
su - postg
postgres 763 0.0 0.1 18644 752 p1 S 6:02PM 0:00.02
-su
postgres 764 0.0 0.2 58072 1744 p1 S+ 6:02PM 0:00.21
/usr/local
postgres 766 0.0 0.0 58072 440 p1 S+ 6:02PM 0:00.55
postgres:
postgres 767 0.0 0.0 48912 164 p1 S+ 6:02PM 0:00.06
postgres:
postgres 768 0.0 0.0 48012 344 p1 S+ 6:02PM 0:00.01
postgres:
root 770 0.0 0.0 27540 504 p2 Ss 6:04PM 0:00.03
login -pf
uzomaduj 771 0.0 0.1 22652 908 p2 S 6:04PM 0:00.03
-tcsh
uzomaduj 779 0.0 0.1 18644 636 p2 S+ 6:04PM 0:00.02
sh ./run.s
uzomaduj 785 0.0 14.9 548660 156096 p2 S+ 6:04PM 7:11.19
java -serv
uzomaduj 787 0.0 3.1 188788 32836 ?? S 6:05PM 3:20.89
/Applicati
root 1426 0.0 0.0 27540 496 std Ss 9:10PM 0:00.01
login -pf
uzomaduj 1427 0.0 0.1 22652 916 std S 9:10PM 0:00.09
-tcsh
uzomaduj 1614 0.0 1.1 156320 11016 ?? S 9:20PM 0:01.24
/Applicati
root 1623 0.0 0.0 0 0 ?? Z 1Jan70 0:00.00
(sh)
root 1667 0.0 0.1 18132 716 std R+ 9:35PM 0:00.01
ps -aux
root 1632 0.0 0.0 0 0 ?? Z 1Jan70 0:00.00
(sh)
root 1 0.0 0.0 18072 304 ?? Ss 5:37PM 0:00.03
/sbin/init
can't see any other http-thread!
regards
Andrew
On 1 Dec 2004, at 21:35, Ralf Glauberman wrote:
> there is still an application bound to port 443. use ps -aux and make
> sure there is no http-thread running.
>
> ----- Original Message ----- From: "Andrew M" <andrew@(protected)>
> To: <users@(protected)>
> Sent: Wednesday, December 01, 2004 10:27 PM
> Subject: Re: [users@(protected)] mod_jk2 https
>
>
>> ralph,
>> I have recreated a key with no encryption but now get the following
>> message in the terminal window:
>>
>> ./apachectl start
>> (13)Permission denied: make_sock: could not bind to address
>> 0.0.0.0:443
>> no listening sockets available, shutting down
>> Unable to open logs
>>
>> or
>>
>> ./apachectl startssl
>> (13)Permission denied: make_sock: could not bind to address
>> 0.0.0.0:443
>> no listening sockets available, shutting down
>> Unable to open logs
>>
>> I have attached my new key
>>
>> regards
>>
>>
>> Andrew
>>
>>
>
>
> -----------------------------------------------------------------------
> ---------
>
>
>>
>>
>> On 1 Dec 2004, at 20:59, Ralf Glauberman wrote:
>>
>>> like i sayed, your key-file is encrypted, try to use a unencrypted
>>> one.
>>>
>>> ----- Original Message ----- From: "Andrew M" <andrew@(protected)>
>>> To: <users@(protected)>
>>> Sent: Wednesday, December 01, 2004 9:45 PM
>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>
>>>
>>>> Ralph,
>>>> my test key and certificate look fine to me, take a look.
>>>>
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> -- ---------
>>>
>>>
>>>>
>>>> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
>>>>
>>>>> make sure your key-file and crt-file exist, belong together, are
>>>>> valid
>>>>> and readable for apache.
>>>>> try a non-encripted certificate/key.
>>>>> the key-file should look like this:
>>>>> -----BEGIN RSA PRIVATE KEY-----
>>>>> ...
>>>>> -----END RSA PRIVATE KEY-----
>>>>> the cert should look like this:
>>>>> Certificate:
>>>>> Data:
>>>>> Version: 1 (0x0)
>>>>> Serial Number: 4 (0x4)
>>>>> Signature Algorithm: md5WithRSAEncryption
>>>>> Issuer: ...
>>>>> Validity
>>>>> Not Before: Jun 21 12:51:40 2004 GMT
>>>>> Not After : Dec 18 12:51:40 2004 GMT
>>>>> Subject: ...
>>>>> Subject Public Key Info:
>>>>> Public Key Algorithm: rsaEncryption
>>>>> RSA Public Key: (1024 bit)
>>>>> Modulus (1024 bit):
>>>>> ... other stuff
>>>>> -----BEGIN CERTIFICATE-----
>>>>> ...
>>>>> ----END CERTIFICATE-----
>>>>>
>>>>>
>>>>> ----- Original Message ----- From: Andrew M
>>>>> To: users@(protected)
>>>>> Sent: Wednesday, December 01, 2004 9:23 PM
>>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>>
>>>>>
>>>>> Ralph,
>>>>> I removed all the IfDefine tags from both the http.conf and
>>>>> ssl.conf
>>>>> files and then shut down. The server will now not boot up when I
>>>>> ask
>>>>> it to, and when I check the error logs I get the following:
>>>>>
>>>>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
>>>>> [Hint: key introduced or changed before restart?]
>>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
>>>>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
>>>>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
>>>>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
>>>>> error
>>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
>>>>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>>>>>
>>>>> regards
>>>>>
>>>>> Andrew
>>>>>
>>>>>
>>>>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>>>>>
>>>>>
>>>>> make sure you have removed every ifdefined in both configs, stop
>>>>> the
>>>>> server, look at ps -aux to see if all childs have exited, if not
>>>>> kill
>>>>> them. then start apache again. look at the error_log to see if
>>>>> there
>>>>> are any problems.
>>>>>
>>>>> ----- Original Message ----- From: Andrew M
>>>>> To: users@(protected)
>>>>> Sent: Wednesday, December 01, 2004 8:58 PM
>>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>>
>>>>>
>>>>> Ralph,
>>>>> already done. See message below. i attach version2 serv-info
>>>>> details
>>>>> again.
>>>>> Once I remove the tags, if I try to reboot the server it will not
>>>>> shutdown, and I also cannot access the server at all!
>>>>>
>>>>> regards
>>>>>
>>>>> Andrew
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On 1 Dec 2004, at 19:44, Andrew M wrote:
>>>>>
>>>>>
>>>>> Ralph,
>>>>> looking at the server-info myself, I was unable to see the ssl
>>>>> module
>>>>> being pulled in. I did the following:
>>>>>
>>>>> #<IfDefine SSL>
>>>>> LoadModule ssl_module modules/mod_ssl.so
>>>>> #</IfDefine>
>>>>>
>>>>> and now I can see the ssl_mod component being pulled in to the
>>>>> server-info. Is there an issue with these tags? Anyway, I enclose
>>>>> version 2 of the server-info
>>>>>
>>>>> regards
>>>>>
>>>>> Andrew
>>>>> <Server_Information2.html>
>>>>>
>>>>> On 1 Dec 2004, at 19:38, Andrew M wrote:
>>>>>
>>>>>
>>>>> Ralph,
>>>>> as requested, i have attached the server information.. ;-)
>>>>>
>>>>> regards
>>>>>
>>>>> Andrew
>>>>> <Server_Information.html>
>>>>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>>>>>
>>>>>
>>>>> i'm really sorry, but i did a mistake: it has to be server-info,
>>>>> not
>>>>> server-status. could you please try this?
>>>>>
>>>>> ----- Original Message ----- From: Andrew M
>>>>> To: users@(protected)
>>>>> Sent: Wednesday, December 01, 2004 7:13 PM
>>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>>
>>>>>
>>>>> Ralf,
>>>>> I have attached the information you requested as a html file.
>>>>>
>>>>> regards
>>>>>
>>>>> Andrew
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>>>>>
>>>>>
>>>>> <Location /server-status>
>>>>> SetHandler server-status
>>>>> Order deny,allow
>>>>> Deny from all
>>>>> Allow from 127.0.0.1
>>>>> </Location>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>>
>>>>>
>>>>> <beya-email.gif>
>>>>> +The home of urban music
>>>>> + http://www.beyarecords.com
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>> <beya-email.gif>
>>>>> +The home of urban music
>>>>> + http://www.beyarecords.com
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>> -------------------------------------------------------------------
>>>>> --
>>>>> The official User-To-User support forum of the Apache HTTP Server
>>>>> Project.
>>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>>> For additional commands, e-mail: users-help@(protected)
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> -- ---------
>>>
>>>
>>>> --------------------------------------------------------------------
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>>
>>
>>
>>
>
>
> -----------------------------------------------------------------------
> ---------
>
>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
|
