Apache 2.0.52 mod_ssl MSIE statuswrl.cgi not loading

[Shawn Iverson]

I made the following changes as a partial work around for this issue.
It isn't ideally what I wanted since statuswrl.cgi is no longer
encrypted, but at least every thing else is.

I added a Files directive below to exempt statuswrl.cgi from requiring
SSL:

ScriptAlias /nagios/cgi-bin/ /usr/local/nagios/sbin/
<Directory "/usr/local/nagios/sbin/">
    Options ExecCGI
    AllowOverride None
    Order deny,allow
    Deny from all
    Allow from 127.0.0.1
    Allow from x.x.x.x/x
    AuthType Basic
    AuthName "Nagios Web Access"
    Require user xxxxxxxxxxxxxxxxx
    AuthPAM_Enabled on
    AuthPAM_FallThrough off
    SSLCipherSuite -all:SSLv2:+HIGH
    <Files "!(statuswrl\.cgi)$">
        SSLRequireSSL
    </Files>
</Directory>

I then edited side.html in the nagios shares directory and changed the
relative hyperlink to a full hyperlink in order to change it to http
instead of https:

<td nowrap><a
href="http://10.32.1.40/nagios/cgi-bin/statuswrl.cgi?host=all"
target="main" onMouseOver="switchdot('statuswrl-dot',1)"
onMouseOut="switchdot('statuswrl-dot',0)" class="NavBarItem">3-D Status
Map</a></td>

The only problem is that any links out of the vrml world into nagios are
broken because relative hyperlinks are generated within the
statuswrl.cgi.

I think that perhaps a better solution would be to use the RewriteEngine
in apache to modify the relative hyperlink so that side.html does not
have to be changed and statuswrl.cgi hyperlinks get rewritten to
https:// instead of http://.

Shawn Iverson
Technology Associate
MCP W2K3S and W2KP, Linux+, Network+, A+
New Castle Community School Corporation
shawn at nccsc.k12.in.us


On Monday, December 20, 2004 9:01 PM Shawn wrote:
>Greetings!  
>
>I am having trouble with the statuswrl.cgi when using mod_ssl 
>support in apache with the Internet Explorer browser.  I 
>receive the following
>error:  "Internet Exploerer cannot download 
>statuswrl.cgi?host=all from x.x.x.x."  Interestingly, 
>Firefox/Mozilla does not exhibit this problem and is able to 
>get the file, but it opens Internet Explorer and calls the 
>Cortona plugin to open it locally.  A similar problem was 
>discussed in a prior posting:  
>
><START>
>
>From: Thomas Nilsen <Thomas at ro...> 
> RE: 3D statusmap   
>2003-02-10 00:18  
> found the culprit... I"m using Nagios over HTTPS, which 
>causes the 3D view to fail. I don"t know if it is 
>Nagios/Apache or the 3d plugin for the browser that"s causing 
>it, but once I swithced to HTTP it works. 
>
><END>
>
>My question continues where this one left off -- is there a 
>way to get the statuswrl.cgi to work in MSIE without 
>sacrificing SSL on the apache server?  If so, I would be very 
>much interested.  My best guess is that MSIE is not allowing 
>the vrml page to be cached locally.  Is there something I can 
>change on the server or client that would work around this?
>
>


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null