Archive for September, 2009

October 2009 IT Toolbox Column for TechNet Magazine

Friday, September 25th, 2009

The October 2009 issue of TechNet Magazine is out on the website. Check out my IT Toolbox column here:

October 2009 TechNet Magazine IT Toolbox

In this issue I covered:

  • AxCrypt: Secure Sensative Information
  • KaVoom! KVM: Software-based KVM Switch
  • (Book) Malware Forensics: Investigating and Analyzing Malicious Code
  • filext.com: Extension Discovery Site

Check it out and let me know what you think!

And if you have a tool you want to see me review, please suggest it to me here: tntools@microsoft.com.

Apache/Subversion: SSL negotiation failed: SSL error: parse tlsext

Friday, September 25th, 2009

If you are getting an error like the following when you do a large import or commit to Subversion over SSL:

Error: MKCOL of  
‘/repository/!svn/wrk/{GUID}/project/trunk/folder/file.ext’
SSL negotiation failed: SSL error: parse tlsext (https://mysite.com)


try modifying your Apache server’s httpd.conf, changing the SSLProtocol line like this:


#SSLProtocol -ALL +SSLv3 +TLSv1
SSLProtocol -ALL +SSLv3

Of course this will only work if you don’t need TLSv1 :)

(I ran into this while running Subversion 1.6.5 over Apache 2.2.13 on Windows 2003 Server)

 

Hope this helps!

Binding Apache and IIS both to Port 80 on Different IPs / Same NIC

Friday, September 25th, 2009

If you need to run IIS 6.0 and Apache 2.2.* side-by-side on the same Windows server machine, you most likely are trying to bind apache to one IP address and IIS to another.  If you have multiple IPs bound to the same NIC, this will only work if you do some tweaking to IIS’s metabase via httpcfg.exe

The httpcfg utility is found on the installation CD in the Suppot/Tools directory in the Support.cab file (you can use WinRAR or the like to extract it).

Once you have httpcfg on your system, you force IIS to bind only to specified IP addresses with a command like:

httpcfg set iplisten -i xxx.xxx.x.x

Here’s the KB that shows in detail you how to get it done:

http://support.microsoft.com/kb/813368/EN-US/

Hope this helps!