Armando Camarero | 1 Jan 2007 21:23

¿SSL + virtual hosts?

Hi:

    I want to enable SSL for one of my virtual servers in Cherokee. I've 
already created cherokee.pem file using the "create SSL keys" how-to 
included in the documentation. Server is correctly configured without 
SSL (I mean, virtual servers work as expected).

    I don't know how to enable SSL on a virtual server basis. If I 
create cherokee.pem for one of my domains and enable ssl module in 
Cherokee, Cherokee doesn't start:

    virtual_server.c:330: ERROR: OpenSSL: Private key does not match the 
certificate public key
    server.c:812: Can not init TLS for the default virtual server

    I suppose that it's trying to enable SSL in "default" virtual 
server. How do I tell Cherokee to use that certificate only in one 
virtual server?

Thanks in advance.

Greetings,
Armando.
Raul Murciano | 2 Jan 2007 21:10
Gravatar

Interested on new "mirror" handler


Hi folks, happy new year!

As a RoR developer, I am be *very* interested on setting up Cherokee 
instead Apache on the typical Rails stack [1] which -please correct me 
if I'm wrong- would be possible with the new "mirror" handler [2].

Some people use lighty instead Apache but its mod_proxy plugin seems 
buggy, so many people turn back to the oldie and heavy Apache. I think 
you have a great opportunity to gain the love of all those Railers!

Alvaro, please alert us if you need some RoR testing with the handler. 
Kudos for the great work!

Greetings,
   Raul

[1]http://blog.innerewut.de/articles/2006/04/21/scaling-rails-with-apache-2-2-mod_proxy_balancer-and-mongrel
[2]http://www.cherokee-project.com/pipermail/cherokee/2006-December/002034.html
Gunnar Wolf | 2 Jan 2007 21:54
Gravatar

Re: Server Side Includes

Alvaro Lopez Ortega dijo [Sat, Dec 30, 2006 at 12:29:32PM +0100]:
>  > Hello, I haven't been able to find out how to make *.shtml files
>  > with work.  Can anyone help me out?
> 
>    Cherokee doesn't support SSI yet. This is something that ought to be
>    implemented in the upcoming versions.
> 
>  > If a module must be written, can someone point me to some docs on
>  > how to do it?
> 
>    The SSI management should be contained in a new handler. My best
>    advise is to take a look at the cherokee/handler_*.c files.
> 
>    I suppose that we could start supporting the most used directives
>    like "include", "echo" and "exec" and implement the rest later on.

Hummm... Álvaro, do you really think it is a desirable feature? After
all, PHP _is_ a SSI language. Yes, not exactly the one being
requested, but functionally equivalent. And -of course, IMHO- this is
one of the few "correct" uses of PHP ;-)

Greetings,

--

-- 
Gunnar Wolf - gwolf <at> gwolf.org - (+52-55)5623-0154 / 1451-2244
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973  F800 D80E F35A 8BB5 27AF
Alvaro Lopez Ortega | 2 Jan 2007 22:49
Picon

Re: Interested on new "mirror" handler

Raul Murciano wrote, On 02/01/07 21:10:

 > As a RoR developer, I am be *very* interested on setting up Cherokee
 > instead Apache on the typical Rails stack [1] which -please correct me
 > if I'm wrong- would be possible with the new "mirror" handler [2].
 >
 > Some people use lighty instead Apache but its mod_proxy plugin seems
 > buggy, so many people turn back to the oldie and heavy Apache. I think
 > you have a great opportunity to gain the love of all those Railers!
 >
 > Alvaro, please alert us if you need some RoR testing with the handler.

   Well, we need all the testing that people can perform. Cherokee 0.6
   is meant to be released within a month, so we'd better start doing
   some serious testing.

   All kind of the testing, bug reports and questions are welcome. The
   upcoming version (current trunk in the repository) has change quite
   a bit since we forked it from the 0.5 branch: we've got a brand new
   configuration system, a few new modules and many performance
   improvements.

   By the way, wouldn't be better to use SCGI handler rather than the
   HTTP mirror module?  Actually, I suppose it depends on how performs
   each one of the modules on the RoR side.

--

-- 
Greetings, alo.
lanjoe9 | 2 Jan 2007 23:00

Re: Server Side Includes

gwolf at gwolf.org wrote:
Alvaro Lopez Ortega dijo [Sat, Dec 30, 2006 at 12:29:32PM +0100]:

Hummm... Álvaro, do you really think it is a desirable feature? After
all, PHP _is_ a SSI language. Yes, not exactly the one being
requested, but functionally equivalent. And -of course, IMHO- this is
one of the few "correct" uses of PHP

Greetings,

--
Gunnar Wolf - gwolf <at> gwolf.org


Well, I wanted to use .SHTML files with CGI PERL programs.
I went all the way as to try to develop an "example" module, which could be used as a base to build new modules, and was about to post for some help setting up autotools to compile the new module, and go on to try to develop the SHTML module, but if it turns out not to be a "desirable" feature, well, there's always Apache, I guess.

Anyway, here's what I managed to do. http://mexinetica.com/~lanjoe9/archivos/cherokee/handler_example.zip.

It should compile with the 0.5.6 source code release, I couldn't get the SVN version to compile at all.
Please help me figure out how to set up GNU autotools (autoconf, automake, etc), so they compile the new module. I'm kind of new to the autojungle.
Thanks.



gReetings frrom LIDSOL, México!
http://lidsol.org/




-------

Read this topic online here:
http://www.cherokee-project.com/forum/viewtopic.php?p=183#183

-------
_______________________________________________
Cherokee mailing list
Cherokee <at> cherokee-project.com
http://cherokee-project.com/cgi-bin/mailman/listinfo/cherokee
lanjoe9 | 2 Jan 2007 23:14

Re: Server Side Includes

And while PHP may be functionally equivalent, the app I'm trying to run on cherokee would need to be totally re-implemented, which would be an "undesirable feature".

And another thing: I don't like PHP.



gReetings frrom LIDSOL, México!
http://lidsol.org/




-------

Read this topic online here:
http://www.cherokee-project.com/forum/viewtopic.php?p=184#184

-------
_______________________________________________
Cherokee mailing list
Cherokee <at> cherokee-project.com
http://cherokee-project.com/cgi-bin/mailman/listinfo/cherokee
Alvaro Lopez Ortega | 2 Jan 2007 23:16
Picon
Gravatar

Re: Server Side Includes

Gunnar Wolf wrote, On 02/01/07 21:54:

 >> I suppose that we could start supporting the most used directives
 >> like "include", "echo" and "exec" and implement the rest later on.
 >
 > Hummm... Álvaro, do you really think it is a desirable feature?
 > After all, PHP _is_ a SSI language. Yes, not exactly the one being
 > requested, but functionally equivalent. And -of course, IMHO- this
 > is one of the few "correct" uses of PHP ;-)

   We ought to let people make that decision by themselves, don't you
   think? Independently of whether we think SSI is a good technology or
   not.. ;-)

   Actually, I suppose it worth investing a reasonable amount of work
   to write it down once the rest of the higher priority tasks are done
   and dusted.  Currently it isn't in my top priority task list, but if
   someone writes it down I'd be happy to include it.

--

-- 
Greetings, alo.
http://www.alobbs.com
lanjoe9 | 3 Jan 2007 00:08

Re: Server Side Includes


Can anyone help me out a bit to make the "example" module compile with the rest of cherokee? I've read the GNU documentation but still can't figure it out :S
Cherokee is a complex project indeed...



gReetings frrom LIDSOL, México!
http://lidsol.org/




-------

Read this topic online here:
http://www.cherokee-project.com/forum/viewtopic.php?p=186#186

-------
_______________________________________________
Cherokee mailing list
Cherokee <at> cherokee-project.com
http://cherokee-project.com/cgi-bin/mailman/listinfo/cherokee
Alvaro Lopez Ortega | 3 Jan 2007 00:10
Picon
Gravatar

Re: ¿SSL + virtual hosts?

Armando Camarero wrote, On 01/01/07 21:23:

 > I suppose that it's trying to enable SSL in "default" virtual
 > server. How do I tell Cherokee to use that certificate only in one
 > virtual server?

   You only have to add the appropriate entries to the virtual host
   configuration: SSLCertificateFile, SSLCertificateKeyFile or
   SSLCAListFile.

   By the way, double check that you added it inside the "Server"
   entry. It should be something like this:

   Server host2.com, www.host2.com {
      # Basic stuff
      # (..)

      # HTTPS
      SSLCertificateFile /path/file
      # (..)
   }

--

-- 
Greetings, alo.
http://www.alobbs.com
Raul Murciano | 3 Jan 2007 00:42
Gravatar

Re: Interested on new "mirror" handler


Hi Alvaro!

Alvaro Lopez Ortega escribió:
>   Well, we need all the testing that people can perform. Cherokee 0.6
>   is meant to be released within a month, so we'd better start doing
>   some serious testing.

Within a month? Great news! :)

>   All kind of the testing, bug reports and questions are welcome. The
>   upcoming version (current trunk in the repository) has change quite
>   a bit since we forked it from the 0.5 branch: we've got a brand new
>   configuration system, a few new modules and many performance
>   improvements.

Ok, is there any doc about the new configuration system?

>   By the way, wouldn't be better to use SCGI handler rather than the
>   HTTP mirror module?  Actually, I suppose it depends on how performs
>   each one of the modules on the RoR side.

Yeah, I tried the SCGI approach but:
- Zed Shaw himself discourages users from using SCGI Rails in favour of 
Mongrel[1].
- SCGI Rails looks discontinued: latest release is more than a year old.

So it seems that Mongrel has become the way to go now.

Greetings,
   Raul

[1] http://rubyforge.org/pipermail/mongrel-users/2006-May/000190.html

Gmane