Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: Mod fcgid and http/2.0 |
|
| Author |
|
bagu

Joined: 06 Jan 2011 Posts: 196 Location: France
|
Posted: Sun 07 Dec '25 22:38 Post subject: Mod fcgid and http/2.0 |
|
|
Hello,
Is there a way to use fcgid and http/2.0 connexion ?
Thanks |
|
| Back to top |
|
James Blond Moderator

Joined: 19 Jan 2006 Posts: 7448 Location: EU, Germany, Next to Hamburg
|
Posted: Mon 08 Dec '25 16:37 Post subject: |
|
|
| What do you mean? mod_fcgid is for a local interpreter. http 2.0 is for the connection to the browser or to another backend server. |
|
| Back to top |
|
bagu

Joined: 06 Jan 2011 Posts: 196 Location: France
|
Posted: Tue 09 Dec '25 22:34 Post subject: |
|
|
Hello, please excuse me, I confused two issues.
I've been racking my brains for two days over a problem that I'm only encountering on my local network since changing my DNS management strategy, and I'm searching high and low for a way to restore stability.
For your information, here's what I'm encountering:
| Quote: | Connexion bloquée : problème de sécurité potentiel
Firefox a détecté une menace potentielle de sécurité et a interrompu le chargement de www.hyze.fr, car ce site web nécessite une connexion sécurisée.
Que pouvez-vous faire ?
www.hyze.fr a recours à une stratégie de sécurité HTTP Strict Transport Security (HSTS), une connexion sécurisée est obligatoire pour y accéder. Vous ne pouvez pas ajouter d’exception pour visiter ce site.
Le problème vient probablement du site web, vous ne pouvez donc pas y remédier. Vous pouvez le signaler aux personnes qui administrent le site.
En savoir plus…
Les sites web justifient leur identité par des certificats. Firefox ne fait pas confiance à ce site, car il utilise un certificat qui n’est pas valide pour www.hyze.fr. Le certificat est seulement valide pour les noms suivants : *.bagu.biz, *.bagu.fr, *.hyze.fr, bagu.biz, bagu.fr, hyze.fr
Code d’erreur : SSL_ERROR_BAD_CERT_DOMAIN |
And if I press CTRL + SHIFT + R, the site displays perfectly.
My network looks like this:
| Code: |
┌──────────┐ ┌───────────┐
│ MODEM │──────▶│ ROUTER │
└──────────┘ └─────┬─────┘
│
┌────▼────┐
│ SWITCH │
└───┬───┬─┘
┌─────────────────────┘ │
│ │
┌──────────────────┐ ┌───────────────┐
│ WEB SERVER │ │ PI-HOLE │
│ MAIL SERVER │ │ + UNBOUND │
│ ACRYLIC DNS │ │ (DNS + DHCP) │
│ (Static IP) │ └───────────────┘
│ (Forward 1.1.1.1)│
└──────────────────┘
|
PI-HOLE is for local clients |
|
| Back to top |
|
James Blond Moderator

Joined: 19 Jan 2006 Posts: 7448 Location: EU, Germany, Next to Hamburg
|
Posted: Wed 10 Dec '25 11:47 Post subject: |
|
|
Ah! Now I see the problem
Your HSTS settings require a connection via https://, but your page does not offer that.
OR
It is a pihole problem. When the Pi-hole blocks a web page, it redirects you to its own IP address to display a warning page. Since the SSL certificate does not match the domain name, your browser refuses to load the page. |
|
| Back to top |
|
bagu

Joined: 06 Jan 2011 Posts: 196 Location: France
|
Posted: Wed 10 Dec '25 23:03 Post subject: |
|
|
After hours and hours of try/test...
The faulty component is : cloudflare
If i disable the orange cloud in cloudflare, everything work smooth and fine.
If i enable the orange cloud, i get many HSTS errors
Don't know exactly why cloudflare make HSTS fail. |
|
| Back to top |
|
James Blond Moderator

Joined: 19 Jan 2006 Posts: 7448 Location: EU, Germany, Next to Hamburg
|
Posted: Thu 11 Dec '25 15:54 Post subject: |
|
|
| The "orange" is Cloudflare changing the IP address to itself and then reverse proxying to your server. |
|
| Back to top |
|
|
|
|
|
|