r3wp [groups: 83 posts: 189283]
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r3wp

[!Cheyenne] Discussions about the Cheyenne Web Server

Terry
4-Jun-2007
[1219]
Nenad, proably not necessary to have a method to restart modules 
after modifying... simplly dumped the code into an external file, 
and 'do that instead.
Dockimbel
4-Jun-2007
[1220]
do you 'do them at each request ?
Terry
4-Jun-2007
[1221x7]
um.. i 'do a script to handle my url-to-filename phase
Im intercepting 404s.. and processing them through a main script 
that handles the DB, generates responses etc.
One problem i just realized is passing  arguments (just started this 
10 mins ago)
I'll probably load the main handler into the module.
or load the functions when I boot cheyenne... this build function, 
reboot server, test thing is annoying
good thing it's not compiled ;)
Im catching the 404s nicely now.. loading up the mootools JS library, 
and pushing dynamic JS back to the page via Ajax.
Dockimbel
4-Jun-2007
[1228]
I'm glad you're having fun with Cheyenne :-)
Terry
4-Jun-2007
[1229x4]
Actually, using..  do load %myfile  in my url-to-filename phase.. 
it's loading the functions each time, but I'll move them into main 
boot script when they're stable
only a true geek has fun with this stuff.
( I guess that makes me a geek ;)
So, what are your near future plans for cheyenne?
Dockimbel
4-Jun-2007
[1233x2]
reach v1.0 ;-)
add all the missing features planned for v1.0 (see the cheyenne's 
web page for more info)
Terry
4-Jun-2007
[1235]
I might be able to help with  this.. 
Customizable HTTP error pages.

What did you have in mind?
Dockimbel
4-Jun-2007
[1236x2]
RE: "How does Cheyenne's performance and security stack up against 
the other indians (Apache, Cherrokee, Hiawatha, ...)?"


Speed: close to Apache2.x for static files (tested a year ago, so 
new tests need to be conducted).


Security: not chroot-ed and no special protection against ddos attacks 
like Hiawatha, no bandwidth throttling (could be added), no CGI time 
limit (could be added), passes Nikto generic security tests flawlessly 
(last time check : few months ago)
Customizable HTTP error pages: server-side redirection on 4xx and 
5xx errors to any pages, user-defined in config file.
Terry
4-Jun-2007
[1238x4]
I think a biggy will be SSL support
Have you looked at openSSL ?
Well, I have SSL running in Cheyenne.. it's not pretty, but was quick
I suppose one issue will be connecting to the library.. would require 
view/pro?  Can call the binary, but it's a less elegant solution
Graham
4-Jun-2007
[1242]
Why is it not pretty?
Terry
4-Jun-2007
[1243]
This method is for windows.. and runs a shell
Graham
4-Jun-2007
[1244]
stunnel ?
Terry
4-Jun-2007
[1245x6]
If you want to try this method for windows.. here's what you do.. 


1) download the windows binary from openssl.. ->   http://www.slproweb.com/products/Win32OpenSSL.html

2) Unzip.. and pull out the openssl.exe file from the bin folder.. 
. drop that file into your cheyenne www folder
3) Create a self-signed cert....
3a) run openssl.exe

3b) enter this line: req -x509 -nodes -days 365 -newkey rsa:1024 
-keyout localhost.pem -out localhost.pem
(localhost is the cert name)

3c) answer the questions... when asked 'who are you?' enter your 
domain,  or 'localhost' as I did 

This will generate the cert in your www folder (this is just a demo... 
the openssl server uses it's location as root www folder)

4) Start up the server... enter this line into openssl:  s_server 
-accept 443 -cert localhost.pem -WWW


Now open any file in your Cheyenne www folder using the https:// 
 protocol
you only need the openssl.exe file for this demo
If you acess Cheynne as https://localhost/myfile.htmlyou won't 
get the second cert warning
Stunnel would work
Wonder what Carl has in mind for library access with R3?
Can always call, but lib access would be nicer.
Graham
4-Jun-2007
[1251]
http://www.compkarori.co.nz:8080/wiki/index.php/HowTos:Stunnel
Terry
4-Jun-2007
[1252]
no go for me
Graham
4-Jun-2007
[1253]
well, I didn't try it ..just documented it!
Terry
4-Jun-2007
[1254]
ok.. working now
Graham
4-Jun-2007
[1255]
So, the howto is correct?
Terry
4-Jun-2007
[1256x7]
i missed the comment  in front of ;https[] in config
yeah
Works nicely too.. sit in sys tray
don't need to put into root folder (probably not a good place for 
the cert by the way)
and... can use to encrypt other protocols.. bonus
you could use it for cerebus
So, short of making Cheyenne cost $99. by forcing view/pro for lib 
access.. these are probably the best options.
Graham
4-Jun-2007
[1263]
R3 may well have these for free
Terry
4-Jun-2007
[1264]
You'll want to use OpenSSL to generate a cert for Stunnel to replace 
the default
Graham
4-Jun-2007
[1265x4]
If I have a large amount of html that I want to reuse in each page, 
rather than including it from the disk, can I define them as rebol 
variables to be reduced inside rsp pages?
Like Zope as it were.
And this to save me defining lots of static code in pages that is 
the same everywhere
I guess I can use Max's preprocessor for this