Re: [discussion] Release 2.0.65 [the final frontier]

2013-07-02 Thread MikeM
Hi, Maybe the simple option is to do the final release with the old/existing bundled APR, but put a foot note in the release notes that the newer APR v1.4.8/1.5.2 has been confirmed to successfully work with 2.0.65. This way it may give confidence to anyone who is stuck on 2.0.x for some

Re: [discussion] Release 2.0.65 [the final frontier]

2013-07-02 Thread MikeM
Hi Oh I see - I had not realised this. In that case, I agree that sticking with 0.9.x is the only sensible option at this point in time :) Mike On 02/07/2013 14:35, Jeff Trawick wrote: On Tue, Jul 2, 2013 at 8:53 AM, MikeM michaelm12-asfbugzi...@aquaorange.net mailto:michaelm12-asfbugzi

Re: Diffie-Hellman group parameters 1024 bit and Perfect Forward Secrecy

2013-06-28 Thread MikeM
Hi, I agree that the configuration of DH parameters should be possible from within Apache. Ideally the configuration should allow the size of random DH Parameters to be chosen and also allow the user to provide a preconfigured DH Parameter file. This patch should be included into 2.2 and

[PATCH 53899] SSL_OP_ALL and SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS

2013-06-23 Thread MikeM
Hi, I've added three patch files to bug 53899 (https://issues.apache.org/bugzilla/show_bug.cgi?id=53899) which add a new configuration option (SSLEnableEmptyFragments) to Apache. When this option is enabled the SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS bit is cleared from SSL_OP_AL. The three