Re: SSL_CLIENT_S_DN and proxy

2004-05-17 Thread Marc Stern
It compiles correctly, now I will try it. You also need to #include apr_optional.h Marc - Original Message - From: Mathihalli, Madhusudan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 14, 2004 6:50 PM Subject: RE: SSL_CLIENT_S_DN and proxy Hi, I just realized that Joe had

[PATCH AP13] ./src/os/netware/ApacheCore.imp - missing symbol

2004-05-17 Thread Guenter Knauf
Hi, need ap_escape_logitem exported for a third-party module: --- ApacheCore.imp.orig Thu Apr 15 17:51:52 2004 +++ ApacheCore.imp Mon May 17 15:42:04 2004 @@ -79,6 +79,7 @@ ap_each_byterange, ap_error_log2stderr, ap_escape_html, + ap_escape_logitem, ap_escape_path_segment,

ssl_callback_SSLVerify_CRL() ok parameter

2004-05-17 Thread Marc Stern
Hi, Could you please explain me what is the purpose of the ok parameter. More specifically, am I correct in understanding that this function (that I am modifying to add OCSP) must return the value of the parameter ((ok) if it succeeds, and !ok if it fails ? Thanks, Marc

Re: [PATCH AP13] ./src/os/netware/ApacheCore.imp - missing symbol

2004-05-17 Thread Brad Nicholes
Done, thanks Brad Brad Nicholes Senior Software Engineer Novell, Inc., the leading provider of Net business solutions http://www.novell.com [EMAIL PROTECTED] Monday, May 17, 2004 7:59:21 AM Hi, need ap_escape_logitem exported for a third-party module: --- ApacheCore.imp.orig Thu Apr 15

Re: cvs commit: httpd-2.0/server core.c

2004-05-17 Thread Bill Stoddard
[EMAIL PROTECTED] wrote: jorton 2004/05/17 08:24:31 Modified:server core.c Log: * server/core.c (core_output_filter): Don't explicitly delete the EOC bucket, and don't buffer the brigade if it ends in an EOC. Won't this change result in a memory leak? Bill

Re: Discover which MPM is loaded?

2004-05-17 Thread Mark Wolgemuth
On May 15, 2004, at 12:25 PM, Adam Tilghman wrote: I'm writing a module which plays with seteuid/setegid, and should therefore only be run under the prefork MPM. at low level your reliance is on a single-threaded process handling requests? That's correct - I'm switching UID/GID on every request

Re: Discover which MPM is loaded?

2004-05-17 Thread Adam Tilghman
That's correct - I'm switching UID/GID on every request based on the provided authenticated username. It seems to me a multi-threaded server wouldn't be able to handle this situation very well. You know, I'd recommend using apache in reverse proxy mode. [...] Of course, this would assume you

Re: cvs commit: httpd-2.0/server core.c

2004-05-17 Thread Joe Orton
On Mon, May 17, 2004 at 01:06:04PM -0400, Bill Stoddard wrote: [EMAIL PROTECTED] wrote: jorton 2004/05/17 08:24:31 Modified:server core.c Log: * server/core.c (core_output_filter): Don't explicitly delete the EOC bucket, and don't buffer the brigade if it ends in an EOC.

Re: SSL_CLIENT_S_DN and proxy

2004-05-17 Thread xset
- Original Message - From: Mathihalli, Madhusudan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 14, 2004 6:50 PM Subject: RE: SSL_CLIENT_S_DN and proxy Hi, I just realized that Joe had already developed something similar in httpd-2.1. The only difference was in the function

Re: SSL_CLIENT_S_DN and proxy

2004-05-17 Thread Marc Stern
Madhu, I tested Joe's code, and it works very well. I hope it will be included in 2.1 Just a few remarks on the code: - We must add #include apr_optional.h - header_request_ssl_var() should return NULL instead of (null) in order to possibly add other header getters As a more general question,

Re: SSL_CLIENT_S_DN and proxy

2004-05-17 Thread Marc Stern
Thanks Madhu, I will definitively try this. I normally use 2.0.49. As I need to have something to go in a production environment, I suppose it's a bit early to try 2.1. If I understood correctly, with that patch I will be able to use Header SSL_REMOTE_CLIENT_S_DN %{SSL_CLIENT_S_DN}e The