/ Zope / Apsis / Pound Mailing List

• Archive
• 2012
• 2011
• 2010
• 2009
• 2008
• 2007
• 2006
• 2005
• 2004
• 2003

Recent Posts

• 2012-02-02 20:15:42 Changing Host Headers / "Dale J. Rodriguez" <drodriguez(at)ftmsinc.com>
  Hello Pound Users, I wanted to know what is the easier way for me to change host headers for incoming traffic to my pound proxy. Example I have traffic incoming on lol.com I want to remove the hea
  
  
• 2012-02-02 19:31:05 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  And in addition, updated patches: http://goochfriend.org/pound_2.6f_xss_redirect_fix_v2.patch The only difference here is the whitespace handling. No functional changes. http://goochfriend.org/poun
  
  
• 2012-02-02 19:24:55 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  Use this one instead. http://goochfriend.org/pound_2.6f_ssl_renegotiation_and_ciphers_v2.patch Should start with hash 1698011920aa9c. Changes - Remove the SNI logging information (that never belonge
  
  
• 2012-02-02 19:01:45 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  Got it. It is introduced in that patch. Remove the logmsg line before the fnmatch line. The logmsg line was inserted in the for loop but the for loop doesn't have a {}, so it's not calling the if u
  
  
• 2012-02-02 16:40:35 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  No worries. You can PM the information to me, or really, what Pound extracts is the CN information. Or at least that's what the regex is supposed to pull. I was hoping to see the subject line so I c
  
  
• 2012-02-02 16:29:16 Re: RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / fatcharly(at)gmx.de
  Hi Joe, good news, after we applied the line "#undef SSL_CTRL_SET_TLSEXT_SERVERNAME_CB" in the config.c and a new compile, we don´t see any segfaults. I´m afraid, but it´s not possible for me to
  
  
• 2012-02-02 15:07:12 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  Also, perhaps running it with -v, or setting LogFacility -, (or both) will yield a bigger picture... That'll output all the logs on the console. (so you'll see debug and info and everything else on th
  
  
• 2012-02-02 14:59:41 RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  It still won't segfault for me. :-/ "ip" in this context means instruction pointer, not internet protocol. http://stackoverflow.com/questions/2549214/interpreting-segfault-messages addr2line -e poun
  
  
• 2012-02-02 13:56:24 Re: RE: RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / fatcharly(at)gmx.de
  Hi Joe, yes we did fix the patchfile. I did some further investigation on this and there are some news I have to share. First some answers for your questions: >1) Does this happen on every request fo
  
  
• 2012-02-01 22:18:04 RE: RE: [Pound Mailing List] Pound 2.6f and SSLHonorCipherOrder / Joe Gooch <mrwizard(at)k12system.com>
  I build a centos 6.1 x86_64 chroot on my workstation and compiled 2.6f with that patch. First, I assume you fixed the log messages in config.c, on lines 803, 807, 809, 814... Instead of servername it