
superman.jason at gmail
Jun 18, 2009, 11:28 AM
Post #10 of 20
(1435 views)
Permalink
|
Jaime Bozza <jbozza <at> mindsites.com> writes: > > > Actually looking more closely at the spawning semaphore error...it > > calls it a warning. I think it just shows up after a server restart > > when the first php page is called. It probably looks for a running > > instance of php-cgi, and not finding one causes the warning. After > > the first php call the warning never shows again, so I think that > > is what it's all about. > > > > You can see it if you stop cherokee, and start it from a CLI and keep > > it attached, or I also see it as a console message when I restart it > > with the rc script via ssh and then access a php page on the server. > > I'll check that out - thanks for the details. > > > As for GeoIP, yes I don't think it's something I would generally need > > either, but it would be nice to have the option available. > > > > I also notice that the debian package has a separate package for the > > streaming module, so I wonder if that is another option available to > > config. > > Yes - It's in there as an option now, defaults to yes for POLA. Same thing with Admin interface. FFMPEG will be > an option (defaults to no) that depends on the ffmpeg port. > > PCRE support defaults to using the port, but there seems to be an option to use the built-in library, so I > added that as an option (defaults to no). > > > And yes as far as I can see the port is only at 0.99.2, and only > > because I sent a nudge message to the current maintainer. I think > > he is either really busy, has lost interest in it, or has gone off > > the grid. (http://www.freshports.org/www/cherokee/) > > I tried contacting him as well when I originally started testing Cherokee. Never received a response from > him, even though I had the port mostly updated. > > > On the tls note, FreeBSD only has openssl 0.9.8e in the base system > > which doesn't have SNI, therefore per virtual host SSL doesn't work. > > I tried updating using the port (0.9.8k), but for some reason a > > recompiled cherokee doesn't seem pick up the new version. I read in > > some the posts I could find that the port overwrites the base > > version, but it doesn't update the version number in the system > > although openssl is actually updated. Maybe cherokee reads the > > version that openssl returns rather than the actual version it is > > and disables SNI. It would be nice to get SNI working as that is > > a major reason to switch to cherokee on top of the other great > > reasons! Maybe someone has figured this openssl base/port thing > > already? > > By default, the OpenSSL port doesn't overwrite the base OpenSSL. You need to turn a few knobs for that. > First, you need to have WITH_OPENSSL_BASE=yes in your /etc/make.conf and also place > WITHOUT_OPENSSL=true in /etc/src.conf if you regularly update your FreeBSD system from the source. > This is correct for FreeBSD 7.x, so if you're using <7.x, check the src READMEs for specifics. > > After that, you'll need to recompile Cherokee to catch the new version. Cherokee just checks for > SSL_CTRL_SET_TLSEXT_HOSTNAME, so if that's set in the include files, it should work fine. If it isn't, > you may have two versions of ssl.h on your system, one from the base and one from the port. The system will > catch the base version first. > > On that note, 0.9.8k was just importing into HEAD, so you can always tried finding out if it'll be backported > to RELENG_7. Unlikely, but it's always possible! > > Jaime > Thanks for the info. I did find info on those knobs in my research, and I did set them. However the first time I just installed the port without those settings as it was before I found that. So the next time I uninstalled the port then reinstalled with those set. Maybe that affected it a bit. How can I manually check the output of that SSL_CTRL_SET_TLSEXT_HOSTNAME? Looking around I did find 2 ssl.h one in /usr/include/openssl/ssl.h and another in /usr/local/include/openssl/ssl.h. I'll see what I can do to rectify this. Oh, and I just checked with freebsd-update and nothing new yet with regard to openssl. (I used to go with updating from source, but I wanted to keep things simpler for this production system this time around.) Thanks for your help, looking forward to the up-to-date port! Jason _______________________________________________ Cherokee mailing list Cherokee [at] lists http://lists.octality.com/listinfo/cherokee
|