Difference between revisions of "HTTP"
Jump to navigation
Jump to search
Line 58: | Line 58: | ||
=== Other === | === Other === | ||
* http://monkey-project.com/ | * http://monkey-project.com/ | ||
+ | |||
+ | == Security == | ||
+ | * [http://www.troyhunt.com/2011/11/owasp-top-10-for-net-developers-part-9.html OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection] - Touching on HTTPS, SSL and TLS | ||
== Performance == | == Performance == |
Revision as of 22:15, 16 July 2012
Basics
Servers
Nginx
- Configuration
- FullExample
- HttpRewriteModule - rewriting urls
- HttpAuthBasicModule - for directory passwords
- Pitfalls
Site folder location can vary.
/var/www debian /etc/nginx/html arch linux
Site setup
Create 'Server Block' (vhost) config file in
/etc/nginx/sites-available
and later ln -s them in
/etc/nginx/sites-enabled
- ServerBlockExample - Basic examples
- FcgiExample - FastCGI example. Keep seperate and include.
- http://wiki.nginx.org/Wordpress
- https://wiki.archlinux.org/index.php/PhpMyAdmin#NGINX_Configuration
Enable logging in vhost conf;
error_log /var/log/nginx-vhostnamehere.log error;
Tools
- https://github.com/perusio/nginx_ensite - nginx_ensite and nginx_dissite for quick virtual host enabling and disabling
Apache
Other
Security
- OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection - Touching on HTTPS, SSL and TLS