No, Apache Isn’t Vulnerable to the Log4j Vulnerability
The Log4j Java library has been in the news recently, and it’s not the good news either. While the details of vulnerability CVE-2021-44228 have been very well documented by others: to summarize, it...
View ArticleEasy Security Improvements for Apache Websites
Some key security measures, such as using TLS encryption (https://) are taken for granted. Others are often missed until they are flagged by a security scan. Here are two easy changes that have helped...
View ArticleApache for IBM i: Where to Find Documentation
HTTP Server for i (Powered by Apache) is the IBM i integrated web server. Although this unique implementation of Apache is well documented by IBM, that documentation can be hard to find. Internet...
View ArticleUse IBM’s Apache Directive Finder Instead of Google
When it comes to finding information on HTTP Server for IBM i (based on Apache), Google is NOT the way to go! Recently Calvin did a web search for Apache’s ServerUserID directive. It returned old forum...
View ArticleIBM i Apache Security Fixes for PCI Compliance
A few months after we published the article Apache for IBM i: Where to Find Documentation, astute reader Paul Nicolay of Cegeka shared yet another hard-to-find Apache resource with us. Paul recommends...
View ArticleIBM i Apache Directives Measure Request Speeds
Speed is critical when serving APIs and web pages from IBM i. How can we measure our speed? The IBM HTTP Server (powered by Apache) for i can log the speed of each request, but this capability needs to...
View ArticleIBM i Apache Security Setting: RequestReadTimeout
A client asked for help addressing a Denial of Service (DoS) vulnerability that their security company discovered. The company found it could slow down the Apache web server by sending it incorrect...
View ArticleRebuilding the Tomcat Plugin in IBM i 7.5
Open source saves the day once again. When one of our open source support clients discovered that Tomcat plugin for Apache was not supported on their test IBM i 7.5 system, they needed a solution. They...
View ArticleURL Rewriting with Apache Web Server
The Apache web server—included on IBM i as HTTP Server for i—contains a powerful feature known as mod_rewrite that can convert URLs (API or Web) from their original versions to any format you need....
View ArticleFinding Security Fixes for Apache on IBM i
The Apache-based IBM HTTP Server for i is a vital defense in web and API security for IBM i. As such, it requires regular attention. IBM Support’s PCI Compliance web page is a resource we use to help...
View Article
