Header with trailing space in field name passed to CGI script

2015-04-14 Thread George Chelidze
Hello, According to the rfc822#section-3.2, SPACE character is not allowed in the header field name. I have tested apache httpd version 2.2.16 and 2.4.12 and with both installations a header with the trailing space in the field name is passed to a CGI script's environment (in both cases

Re: Header with trailing space in field name passed to CGI script

2015-04-14 Thread Nick Kew
On Tue, 2015-04-14 at 10:09 +0400, George Chelidze wrote: Hello, According to the rfc822#section-3.2, SPACE character is not allowed in the header field name. Be liberal in what you accept. Stripping whitespace between a field name and a colon looks to me like a reasonable thing to do.

Re: Header with trailing space in field name passed to CGI script

2015-04-14 Thread George Chelidze
Hello Nick, Please see my comments below: On 04/14/2015 10:41 AM, Nick Kew wrote: On Tue, 2015-04-14 at 10:09 +0400, George Chelidze wrote: Hello, According to the rfc822#section-3.2, SPACE character is not allowed in the header field name. Be liberal in what you accept. Stripping

Re: Header with trailing space in field name passed to CGI script

2015-04-14 Thread Nick Kew
On Tue, 2015-04-14 at 11:48 +0400, George Chelidze wrote: It looks reasonable to me as well, however there are two things: 1. according to http://tools.ietf.org/html/rfc7230#section-3.2.4, we have: No whitespace is allowed between the header field-name and colon. In the past,

Re: [RELEASE CANDIDATE] Apache-Test-1.39 RC1

2015-04-14 Thread Jan Kaluža
On 04/13/2015 09:23 AM, Steve Hay wrote: On 8 April 2015 at 18:04, Steve Hay steve.m@googlemail.com wrote: On 8 April 2015 at 14:24, Steve Hay steve.m@googlemail.com wrote: Please download, test, and report back on this Apache-Test 1.39 release candidate.

Re: Header with trailing space in field name passed to CGI script

2015-04-14 Thread George Chelidze
On 04/14/2015 01:21 PM, Nick Kew wrote: Damn, I'm getting behind with my RFCs. Yes, that seems to support your position, though it's not entirely clear whether the server or proxy rules should apply (the CGI script is the origin server and never receives the whitespace, while HTTPD's role is

unbreak mod_ssl build following removal of chil engine in LibreSSL

2015-04-14 Thread Stefan Sperling
I'm trying to update OpenBSD's port of Apache HTTPD to the 2.4 series. This is the first in a small series of diffs from the OpenBSD ports tree. I hope OpenBSD will eventually be able to drop its custom patches. If you're at ApacheCon in Austin this week please feel free to talk to me in person.

Extending mod_authz_dbd

2015-04-14 Thread Jose Kahan
Hi, We're preparing the migration to apache 2.4 and we're happy to see that many features now available allow us to put to rest most of our custom developed modules. Looking at mod_authz_dbd, we would like to make a request against a dbase passing different parameters (REQUEST_URI,

Re: FYI - version checking against libressl - FYI (not yet a bug)

2015-04-14 Thread Eric Covener
Now fixed in trunk On Apr 12, 2015 4:17 PM, Michael Felt mamf...@gmail.com wrote: I have rebuilt my build systems - basically stripping them of accumulated libraries, and now no OpenSSL installed, but LibreSSL. A basic characteristic of LibreSSL is to remove exposed parts of the API/ABI in

Re: unbreak mod_ssl build following removal of chil engine in LibreSSL

2015-04-14 Thread Eric Covener
On Tue, Apr 14, 2015 at 9:53 AM, Stefan Sperling s...@apache.org wrote: ENGINE_CTRL_CHIL_SET_FORKCHECK Thanks Stefan and Stuart, committed verbatim in r1673455 and will propose for backport soon. I'd expect it in 2.4.13.

Photos at ApacheCon

2015-04-14 Thread Rich Bowen
httpd developers, If you're at ApacheCon, please try to drop by the registration desk at 3:50 for a photo of the httpd committers with The Feather Context - https://www.flickr.com/photos/iamamoose/63963722/ We're going to take several photos with the feather to recreate this photo from

Re: svn commit: r1673470 - /httpd/httpd/trunk/docs/manual/mod/mod_deflate.xml

2015-04-14 Thread Rainer Jung
Am 14.04.2015 um 19:06 schrieb rbo...@apache.org: Author: rbowen Date: Tue Apr 14 17:06:10 2015 New Revision: 1673470 URL: http://svn.apache.org/r1673470 Log: Add pre-compressed content recipe, as per https://bz.apache.org/bugzilla/show_bug.cgi?id=51336 Modified:

Re: Header with trailing space in field name passed to CGI script

2015-04-14 Thread George Chelidze
Have you test-driven any other web server or proxy software with this? A quick update: I have made some tests with lighttpd/1.4.31 and below are the results: 1. Trailing SPACE between the field name and the colon is translated to the underscore in CGI environment: so for X-MSISDN : test you

Re: Photos at ApacheCon

2015-04-14 Thread Rich Bowen
A huge thank you to those who managed to show up on such short notice. The photos are at https://www.flickr.com/photos/rbowen/sets/72157651553317030/ --Rich On 04/14/2015 03:32 PM, Rich Bowen wrote: httpd developers, If you're at ApacheCon, please try to drop by the registration desk at