MESSAGE
| DATE | 2020-12-20 |
| FROM | Mithun Bhattacharya
|
| SUBJECT | Re: [Hangout - NYLXS] suggestions for perl as web development
|
From hangout-bounces-at-nylxs.com Sun Dec 20 16:56:26 2020
Return-Path:
X-Original-To: archive-at-mrbrklyn.com
Delivered-To: archive-at-mrbrklyn.com
Received: from www2.mrbrklyn.com (www2.mrbrklyn.com [96.57.23.82])
by mrbrklyn.com (Postfix) with ESMTP id 46BDF163FD4;
Sun, 20 Dec 2020 16:56:26 -0500 (EST)
X-Original-To: hangout-at-www2.mrbrklyn.com
Delivered-To: hangout-at-www2.mrbrklyn.com
Received: by mrbrklyn.com (Postfix, from userid 1000)
id 84F57161132; Sun, 20 Dec 2020 16:55:58 -0500 (EST)
Resent-From: Ruben Safir
Resent-Date: Sun, 20 Dec 2020 16:55:58 -0500
Resent-Message-ID: <20201220215558.GB30217-at-www2.mrbrklyn.com>
Resent-To: hangout-at-mrbrklyn.com
X-Original-To: ruben-at-mrbrklyn.com
Delivered-To: ruben-at-mrbrklyn.com
Received: from mxout1-he-de.apache.org (mxout1-he-de.apache.org
[95.216.194.37]) by mrbrklyn.com (Postfix) with ESMTP id B2DD4163FC0
for ; Sun, 20 Dec 2020 15:03:56 -0500 (EST)
Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153])
by mxout1-he-de.apache.org (ASF Mail Server at
mxout1-he-de.apache.org) with SMTP id 8EACC64D2B
for ; Sun, 20 Dec 2020 20:03:55 +0000 (UTC)
Received: (qmail 4596 invoked by uid 500); 20 Dec 2020 20:03:54 -0000
Mailing-List: contact modperl-help-at-perl.apache.org; run by ezmlm
Precedence: bulk
Delivered-To: mailing list modperl-at-perl.apache.org
Received: (qmail 4584 invoked by uid 99); 20 Dec 2020 20:03:54 -0000
Received: from spamproc1-he-fi.apache.org (HELO spamproc1-he-fi.apache.org)
(95.217.134.168)
by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 20 Dec 2020 20:03:54 +0000
Received: from localhost (localhost [127.0.0.1])
by spamproc1-he-fi.apache.org (ASF Mail Server at spamproc1-he-fi.apache.org)
with ESMTP id 81D26C02DD
for ; Sun, 20 Dec 2020 20:03:53 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamproc1-he-fi.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_MSPIKE_H2=-0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamproc1-he-fi.apache.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from mx1-ec2-va.apache.org ([116.203.227.195])
by localhost (spamproc1-he-fi.apache.org [95.217.134.168]) (amavisd-new,
port 10024) with ESMTP id 8H8E5KrcmYrO for ;
Sun, 20 Dec 2020 20:03:52 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.217.53;
helo=mail-vs1-f53.google.com; envelope-from=mithnb-at-gmail.com;
receiver=
Received: from mail-vs1-f53.google.com (mail-vs1-f53.google.com
[209.85.217.53])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with
ESMTPS id 2CFA3BCC04
for ; Sun, 20 Dec 2020 20:03:52 +0000 (UTC)
Received: by mail-vs1-f53.google.com with SMTP id x4so4288177vsp.7
for ; Sun, 20 Dec 2020 12:03:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=j1vXTGxU1XYOBQzMGp/wIKUKgjuT9dbP9wbN/qBrU6Y=;
b=J52g1tLh7UGdo+a1EFdumlgO2HtHhvCzW8ni7qiYTx9oM3CqSfPmGIWxIXIkad3w5p
tb76TeaR/ipLpsg+lHLeGCkbrS3Aj+00muYJMfU1/zJWLA4CN/uKnAvEothPDYHtU8Jk
+4fs34YPIP/flA/HhEXBsV9KySEt2g/JdYBvgqeoWExl9UTEaV3yirjgPVno5fwwt2dR
Sqp9aUYxQbof2ggQ0FvO3T4sWCbzoOUQi/EFF4SKWDQXdKCIQGjFZlRlXMEAsFv7o+wC
Ka5y7dq4801xB5LqNctS9CRMYzuDjUSL2l2SxcRpoHd8iYGdwLEVvzUKW/nkxeSGdmPZ
b7og==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=j1vXTGxU1XYOBQzMGp/wIKUKgjuT9dbP9wbN/qBrU6Y=;
b=OrV0D3Jx6jRhwWxoP2rbw7SITZctGzxkjfx50qblnUkOG5OT47JrOhgQDA0tK8ZazN
5qTL9aOvHnRE10YaeqzAY2DHhi+Rr38Om64KtMC25ca5Ct4vpTyVTdeBmTrwABZyER6r
YEUIPn1VFnZb03QreggBstQSf87C2JFBiCuyL17p/O4pjX3wYN1FnOv+uBTt/yHT8D6S
4APKbSTH1DAzYshhEH3mGNIxHvhtGB0dqxYVS1shKpCT7mjdERvnwhyVuLWaoIr9Hqay
XLCcoaLElaUVnLHi7WAapwZmJcfdC+2ZVB5hj7zZp874kys511LdWV5OrwiMBk8qIYNy
SQ2Q==
X-Gm-Message-State: AOAM530IAsybtsp0T6dF0FUkZ5sKY0p7XMQ4TSYzqWY/nLQD294eJCpU
36y0P8m4kcuEzN5jxIY43nkorAFEUG/zsagcHLYpTWnjedAjGQ==
X-Google-Smtp-Source: ABdhPJwx08PrNaHFJbvMx1Q+HTCmUVKhxR3CoCG6auh1KoiO//CfVz6y9PqXtqy32dov+iSywrR4df6mxFBLvMqkVSk=
X-Received: by 2002:a67:c316:: with SMTP id r22mr10766430vsj.30.1608494626216;
Sun, 20 Dec 2020 12:03:46 -0800 (PST)
MIME-Version: 1.0
References:
<3A8B7869-1464-442E-9647-08514375C4D9-at-blackmans.org>
<20200805005553.GA1176-at-www2.mrbrklyn.com>
<20201220103256.17bbe23b.lembark-at-wrkhors.com>
In-Reply-To:
From: Mithun Bhattacharya
Date: Sun, 20 Dec 2020 14:03:35 -0600
Message-ID:
To: mod_perl list
Subject: Re: [Hangout - NYLXS] suggestions for perl as web development
language [EXT]
X-BeenThere: hangout-at-nylxs.com
X-Mailman-Version: 2.1.30rc1
List-Id: NYLXS Tech Talk and Politics
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Content-Type: multipart/mixed; boundary="===============1752670290=="
Errors-To: hangout-bounces-at-nylxs.com
Sender: "Hangout"
--===============1752670290==
Content-Type: multipart/alternative; boundary="000000000000d1a01305b6ead626"
--000000000000d1a01305b6ead626
Content-Type: text/plain; charset="UTF-8"
Your external facing apache instance would do the SSL part and use
mod_proxy to redirect the request to another instance of apache which
implements the actual functionality. Just remember the second instance
needs to run on a different port and that it doesnt have to talk to the
outside world.
Did you check out the practical mod_perl article ?
https://docstore.mik.ua/orelly/weblinux2/modperl/ch12_07.htm
As for your Lets Encrypt certificate - autorenewal isnt a mod_perl thing
rather you do have to place a script in some sort of scheduler.
https://onepagezen.com/letsencrypt-auto-renew-certbot-apache
On Sun, Dec 20, 2020 at 1:45 PM Tom Browder wrote:
> On Sun, Dec 20, 2020 at 11:29 Mithun Bhattacharya
> wrote:
>
>> Just curious where exactly is the challenge in this setup ? It can't be
>> in apache supporting real certificates - neither can it be in setting up
>> reverse proxy internally...
>>
>
> The challenge to me is how exactly to code the reverse proxy on a single
> instance of Apache. I have found no one who can tell me exactly how to
> manage https in the http conf file between the outward facing side and
> inside the reverse proxy so that the auto-tls renewal works with Let's
> Encrypt, all on a single server.
>
> I think I could cobble together a cron job to do it, but not without a lot
> of trial and error, especially when I'm not sure how the proxy and proxy
> pass are supposed to look.
>
> I sure wish someone would update the old Apache Cookbook.
>
> -Tom
>
>
--000000000000d1a01305b6ead626
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Your external facing apache instance would do the SSL part= and use mod_proxy to redirect the request to another instance of apache wh= ich implements the actual functionality. Just remember the second instance = needs to run on a different=C2=A0port and that it doesnt=C2=A0have to talk = to the outside world.
l_quote"> margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-lef=
t:1ex">v> border-left:1px solid rgb(204,204,204);padding-left:1ex">J=
ust curious where exactly is the challenge in this setup ? It can't be =
in apache supporting real certificates - neither can it be in setting up re=
verse proxy internally...
iv> The challenge to me is how exactly to code the re=
verse proxy on a single instance of Apache. I have found no one who can tel=
l me exactly how to manage https in the http conf file between the outward =
facing side and inside the reverse proxy so that the auto-tls renewal works=
with Let's Encrypt, all on a single server. > I think I could cobble together a cron job to do i=
t, but not without a lot of trial and error, especially when I'm not su=
re how the proxy and proxy pass are supposed to look. ">
I sure wish someone would update the old Apac=
he Cookbook.
-Tom <= div dir=3D"auto">
--000000000000d1a01305b6ead626--
--===============1752670290==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
--===============1752670290==--
--===============1752670290==
Content-Type: multipart/alternative; boundary="000000000000d1a01305b6ead626"
--000000000000d1a01305b6ead626
Content-Type: text/plain; charset="UTF-8"
Your external facing apache instance would do the SSL part and use
mod_proxy to redirect the request to another instance of apache which
implements the actual functionality. Just remember the second instance
needs to run on a different port and that it doesnt have to talk to the
outside world.
Did you check out the practical mod_perl article ?
https://docstore.mik.ua/orelly/weblinux2/modperl/ch12_07.htm
As for your Lets Encrypt certificate - autorenewal isnt a mod_perl thing
rather you do have to place a script in some sort of scheduler.
https://onepagezen.com/letsencrypt-auto-renew-certbot-apache
On Sun, Dec 20, 2020 at 1:45 PM Tom Browder wrote:
> On Sun, Dec 20, 2020 at 11:29 Mithun Bhattacharya
> wrote:
>
>> Just curious where exactly is the challenge in this setup ? It can't be
>> in apache supporting real certificates - neither can it be in setting up
>> reverse proxy internally...
>>
>
> The challenge to me is how exactly to code the reverse proxy on a single
> instance of Apache. I have found no one who can tell me exactly how to
> manage https in the http conf file between the outward facing side and
> inside the reverse proxy so that the auto-tls renewal works with Let's
> Encrypt, all on a single server.
>
> I think I could cobble together a cron job to do it, but not without a lot
> of trial and error, especially when I'm not sure how the proxy and proxy
> pass are supposed to look.
>
> I sure wish someone would update the old Apache Cookbook.
>
> -Tom
>
>
--000000000000d1a01305b6ead626
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Your external facing apache instance would do the SSL part= and use mod_proxy to redirect the request to another instance of apache wh= ich implements the actual functionality. Just remember the second instance = needs to run on a different=C2=A0port and that it doesnt=C2=A0have to talk = to the outside world.
l_quote"> margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-lef=
t:1ex">v> border-left:1px solid rgb(204,204,204);padding-left:1ex">J=
ust curious where exactly is the challenge in this setup ? It can't be =
in apache supporting real certificates - neither can it be in setting up re=
verse proxy internally...
iv> The challenge to me is how exactly to code the re=
verse proxy on a single instance of Apache. I have found no one who can tel=
l me exactly how to manage https in the http conf file between the outward =
facing side and inside the reverse proxy so that the auto-tls renewal works=
with Let's Encrypt, all on a single server. > I think I could cobble together a cron job to do i=
t, but not without a lot of trial and error, especially when I'm not su=
re how the proxy and proxy pass are supposed to look. ">
I sure wish someone would update the old Apac=
he Cookbook.
-Tom <= div dir=3D"auto">
--000000000000d1a01305b6ead626--
--===============1752670290==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
--===============1752670290==--
|
|
