Author |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Tue 23 Jun '15 14:37 Post subject: |
|
|
Hi James
I just launched a cmd as admin...
then C:\Apache24\bin\httpd.exe
It crashes the same way... |
|
Back to top |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Tue 23 Jun '15 16:48 Post subject: |
|
|
What makes ther server crash is this line :
#SessionCryptoPassphrase mysecret
if I uncomment it, it crashes, otherwise, it works... but cookies are not encrypted... |
|
Back to top |
|
admin Site Admin

Joined: 15 Oct 2005 Posts: 702
|
Posted: Tue 23 Jun '15 20:08 Post subject: |
|
|
You can try in httpd.conf
LogLevel info session_crypto_module:debug
And let it crash.
And post at paste bin. |
|
Back to top |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Wed 24 Jun '15 9:49 Post subject: |
|
|
Thks again for helping me on this...
I set a full LogLevel debug
And did the same thing with and without SessionCryptoPassphrase mysecret
Starting Apache... exactly the same log for both
Loading the Auth Form ... exactly the same log for both
Submitting the form :
1st case (without SessionCryptoPassphrase), the reverse proxy does it's job and the cookies are well written.
Code: |
[Wed Jun 24 09:15:40.410536 2015] [core:debug] [pid 5252:tid 984] util_cookies.c(58): [client 84.5.24.199:18604] AH00007: ap_cookie: user 'bmiot' set cookie: 'session=icCube-user=bmiot&icCube-pw=xxxxxx;path=/', referer: http://mywebsite.fr/icCube/doc/ic3report |
2nd case (with SessionCryptoPassphrase), the reverse proxy does it's job but at the exact same line #, I get :
Code: | [Wed Jun 24 09:23:20.528145 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00428: Parent: child process 3504 exited with status 255 -- Restarting. |
The windows error is triggered before anything appears in the apache log...
nothing about session_crypto_module in the log...
then the server restarts...
Code: | [Wed Jun 24 09:23:20.762146 2015] [ssl:warn] [pid 3880:tid 308] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Wed Jun 24 09:23:20.762146 2015] [ssl:info] [pid 3880:tid 308] AH01887: Init: Initializing (virtual) servers for SSL
[Wed Jun 24 09:23:20.762146 2015] [ssl:info] [pid 3880:tid 308] AH01876: mod_ssl/2.4.12 compiled against Server: Apache/2.4.12, Library: OpenSSL/1.0.2a
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00455: Apache/2.4.12 (Win64) OpenSSL/1.0.2a configured -- resuming normal operations
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00456: Apache Lounge VC14 Server built: May 27 2015 13:21:02
[Wed Jun 24 09:23:20.762146 2015] [core:notice] [pid 3880:tid 308] AH00094: Command line: 'C:\\Apache24\\bin\\httpd.exe -d C:/Apache24'
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:notice] [pid 3880:tid 308] AH00418: Parent: Created child process 5756
[Wed Jun 24 09:23:20.762146 2015] [mpm_winnt:debug] [pid 3880:tid 308] mpm_winnt.c(422): AH00402: Parent: Sent the scoreboard to the child
[Wed Jun 24 09:23:21.198947 2015] etc, etc, etc... |
|
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3117 Location: Hilversum, NL, EU
|
Posted: Wed 24 Jun '15 11:20 Post subject: |
|
|
I sent you a VC11 Win32 build with the openssl driver, maybe you can test with it. |
|
Back to top |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Wed 24 Jun '15 12:05 Post subject: |
|
|
Sure Steffen,
I'll test this afternoon!
Thxs again. |
|
Back to top |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Wed 24 Jun '15 15:27 Post subject: |
|
|
Hi Steffen,
I just tested the version You sent Me...
I did just setup the form authentification but based on file not odbc...
And... IT WORKS with or without Crypto!!!
Non encrypted : http://apaste.info/zpq
Encrypted : http://apaste.info/aMh
If You can do a Win64 Version... It will be Perfect!!!
Millions thanks!
Bertrand. |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3117 Location: Hilversum, NL, EU
|
Posted: Wed 24 Jun '15 16:54 Post subject: |
|
|
Good news ! Send you VC14 Win64.
Next version of 2.4 then I update all with the openssl driver. |
|
Back to top |
|
BMiot
Joined: 22 Jun 2015 Posts: 13 Location: France
|
Posted: Wed 24 Jun '15 17:36 Post subject: |
|
|
Tested VC14 Win64 with the files you sent me...
This is Working!
I tested number of releases and Your is the only one working (at least for me) on Win64, with form authentication, users in mysql DB accessed via odbc, and cookie encryption.
Congratulations!
Thank U so Much!!! |
|
Back to top |
|
James Blond Moderator

Joined: 19 Jan 2006 Posts: 7402 Location: EU, Germany, Next to Hamburg
|
Posted: Fri 26 Jun '15 17:12 Post subject: |
|
|
I know Steffen asked at the mailing list because of
Quote: | The SessionCryptoDriver directive specifies the name of the crypto driver to be used for encryption. If not specified, the driver defaults to the recommended driver compiled into APR-util. |
However can you load / set the driver to OSSL with SessionCryptoDriver ?
Code: |
openssl engine=name
|
I'm curious! |
|
Back to top |
|