Re: Please support/enable https by default in the Apache web sever.

are that paranoid the only option really is to cut that chord. And you'd be the first person who claims to be a web dev that doesn't put their name to their code, courts don't recognise an alias if someone plagiarises your work. this is bad mean person signing off lolololol -- Regards, Noel Butler

Re: Please support/enable https by default in the Apache web sever.

snakeoil. They might have been OK years ago when we were charged criminal rates by likes of verisgn, thawte and co to get a signed cert, but those days ended a long time ago. -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all

Re: Please support/enable https by default in the Apache web sever.

On 30/09/2023 22:28, General Email wrote: On Sat, 30 Sep, 2023, 5:34 pm Will Fatherley, wrote: Please support/enable https by default in the Apache web server. HTTPS is supported already by default. I like the idea of enabling by default, but as it stands now probably should not be done as

Re: Process-level htaccess cache

hooks and rewriting the patch as a module. Feedback encouraged. Thanks, Adam [0] https://gist.github.com/adsr/d6360b5cd59c084d67adc5e8e6127695 applies to 2.4.6 eh? you do realise 2.4.6 is 9 years old, we at 2.4.54 currently. -- Regards, Noel Butler This Email, including attachments, may

Re: [VOTE] Release httpd-2.4.54-rc2 as httpd-2.4.54

s year, but as usual, it went nowhere. -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without

Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53

Release whenever you want, my 30 years in this game shows most networks, including mine, are not going to touch it on a weekend anyway, so monday or tuesday before it hits test beds - assuming there is a real need to upgrade in the first place (high CVE etc), and later in the week before it

Re: release vibes?

On 08/12/2021 01:14, Mladen Turk wrote: On 06/12/2021 12:27, Noel Butler wrote: On 06/12/2021 20:36, Stefan Eissing wrote: Friends of httpd, how do you feel about a release in the next two weeks? Kind Regards, Stefan -1 Thats days before christmas, most testers and i'm sure devs

Re: release vibes?

are in embargo status in most organisations. -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without

Re: Download page appears to be broken

still -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority

Re: default conf and ScriptAlias

f you feel its not sure and needs replacing with other commands, the code for other commands should be internally called by ScriptAlias directive -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential a

Re: default conf and ScriptAlias

DocumentRoot /var/www/vhost/xxx/www/html ScriptAlias /cgi-bin/ /var/www/vhost/x/www/cgi-bin/ ...snip... This is how every person expects it. So you want to go make that more convoluted? -- Regards, Noel Butler This Email, including attachments, may contain legally privileged

Re: [VOTE] Release httpd-2.4.50-rc1 as httpd-2.4.50

good on Slackware 14.2 and 15.0-rc1 no issues after 24 hours -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate

Re: [VOTE] Release httpd-2.4.50-rc1 as httpd-2.4.50

ets copied and changed upon running of formal release processes (No, 2.4.0 was released around the start of 2012) -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright prote

Re: [VOTE] Release httpd-2.4.49-rc1 as httpd-2.4.49

on slackware 14.2 and 15.0-rc1 (running 24 hours) using apr 1.70, and apr-util-1.6.1-patched (1 patch only applied against orig src, req'd for mariadb 10.2+) and openssl-1.1.1L -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore

Re: Question about APR trunk and httpd ldap modules

On 28/05/2021 18:17, Ruediger Pluem wrote: My personal view is that I like to see this in APR just like the DBD and Crypto stuff, but as I have no time to offer to make something happen I keep myself calm in this discussion. +1 -- Regards, Noel Butler This Email, including attachments, may

Re: Build warnings in 2.4.48

SSL 1.0.2 (initial release, no letter suffix). But in openssl 1.0.2, was that not EOL'd back in late 2019? -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected un

Re: [VOTE] Release httpd-2.4.48

name) but not used in freebsd, Redhat/fedora Debian/ubuntu/mint, SuSe, Slackware, Gentoo, Arch ... When one of these guys start using it in place of openssl then perhaps it should be considered a problem, but I don't see that happening any year soon -- Regards, Noel Butler This Email

Re: [VOTE] Release httpd-2.4.48

. Thanks for RMing again. Regards, Joe All good on slackware 14.0 14.2 and 15.0beta running 48 hours -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under

Re: [VOTE] Release httpd-2.4.47

apr-util svn for 15 months :) http://svn.apache.org/viewvc?rev=1872061=rev Again, this is apr related, not http, so not a blocker, just a "FYI" -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains

Re: [External] RE: Inexplicable sporadic 404 & 301 responses

On 03/08/2020 23:38, Kevin A. McGrail wrote: > On 8/3/2020 3:35 AM, JunkYardMail1 wrote: > >> Getting sporadic not found (404) and redirects (301). These occur maybe >> about 1 per 1000+ or so. >> >> The 404 responses are for existing content, and the 301 response make no >> sense. Sometimes

Re: Inexplicable sporadic 404 & 301 responses

bout to release 2.4.46 > and this question is better suited to users@ not dev@ then take it up with centos, why you think someone will help you on something thats 40, yes forty versions old is beyond sane thought, either way you could ask on users list. -- Regards, Noel Butler This Emai

Re: [VOTE] Release httpd-2.4.46

ate tarball as 2.4.46: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. All good running on slackware 13.1 through to -current built with included APR 1.7.0, APR-Util 1.6.1 -- Regards, Noel

Re: Inexplicable sporadic 404 & 301 responses

.46 and this question is better suited to users@ not dev@ -- Regards, Noel Butler This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate

Re: [VOTE] Release httpd-2.4.41

9fe63e *httpd-2.4.41.tar.gz > sha256: 3c0f9663240beb0f008acf3b4501c4f339d7467ee345a36c86c46b4d6f3a5461 > *httpd-2.4.41.tar.gz > -- > Daniel Ruggeri good to go slackware 13.0 -> -current -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally privileged information, therefore rema

Re: [VOTE] Release httpd-2.4.38

> It's not just good, it's good enough! tongue in cheek here, but... shouldn't that be the other way around, "It's not just good enough, it's good!" :) -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally privilege

Re: [VOTE] Release httpd-2.4.38

32b40e *httpd-2.4.38.tar.gz > sha256: 38d0b73aa313c28065bf58faf64cec12bf7c7d5196146107df2ad07541aa26a6 > *httpd-2.4.38.tar.gz All good on slackware 14 to current, with apr-1.6.5 and apr-util 1.6.1 -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally privileged information, therefore rem

Re: 2.4.38

w of a few who moved to "courier", an oldy but a goody. The release often mentality might be good for a new nurturing project, but that is not httpd. System admins want stability. flame away..... -- Kind Regards, Noel Butler This Email, including any at

Re: Announce missing - in moderation?

y2-lw-us.apache.org (ASF Mail Server at > mailrelay2-lw-us.apache.org) with ESMTPSA id redacted > for ; Sat, 22 Sep 2018 11:41:38 +0000 (UTC) -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally privileged information, therefore rem

Re: [VOTE] Release httpd-2.4.35

On 18/09/2018 10:56, Daniel Ruggeri wrote: > Hi, all; > Please find below the proposed release tarball and signatures: > https://dist.apache.org/repos/dist/dev/httpd/ all good on slackware 13.0+ with apr 1.6.5 and apr-util 1.6.1 -- Kind Regards, Noel Butler T

Re: Wherefor 2.4.36?

On 07/08/2018 03:37, William A Rowe Jr wrote: > It appears 2.4.35 is unusable, as other distributors also paused to start > hauling in regression fixes as they eh? unusable? I have rooms full of them with no errors or problems -- Kind Regards, Noel Butler This

Re: [VOTE] Release Apache httpd 2.4.34 as GA

o > [ ] +0: meh > [ ] -1: Danger Will Robinson. And why. > > Vote will last the normal 72 hrs. > > NOTE: The *-deps are only there for convenience. > > Thx! All good on slackware 13+ w/ mysql, apr 1.6.3 , apr-util 1.6.1 Thanks Jim. -- Kind Regards, Noel Bu

Re: [VOTE] Release httpd-2.4.33

44dd2ec870c39d43e3 *httpd-2.4.33.tar.gz > sha256: cd34636caf03c9a897ddfc928fc866c965f23d909b9612880563a7ad0d1a7e5b > *httpd-2.4.33.tar.gz +1 all good to go slackware 13.37 -> -current w/apr-1.6.3 + apr-util 1.6.1 -- Kind Regards, Noel Butler This Email, including

Re: Poll: increase OpenSSL version requirement for trunk?

ts, openssl will just be one of them for httpd, no need to terrorise innocent sys admins just for your jollies :) -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally privileged information, therefore remains confidential and subject

Re: [VOTE] Release httpd-2.4.32

657ea209145169a554bbff *httpd-2.4.32.tar.gz > > sha1: fc1f26a4d302639932332ea12b40de7503f8aab0 *httpd-2.4.32.tar.gz > > sha256: 11cd0c43135ffe89706d0558abc0d19cb4a1f203e11ada52f2e1c3f790959300 > *httpd-2.4.32.tar.gz > > -- > > Daniel Ruggeri +1 Slackware built w/apr-1.6.3 apr-util-1.6.1 -- Ki

Re: [VOTE] Release Apache httpd 2.4.29 as GA

o > [ ] +0: meh > [ ] -1: Danger Will Robinson. And why. > > Vote will last the normal 72 hrs. > > NOTE: The *-deps are only there for convenience. > > Thx! +1 all good on slackware > 13.x -- Kind Regards, Noel Butler This Email, includi

Re: [VOTE] Release Apache httpd 2.4.28 as GA

o > [ ] +0: meh > [ ] -1: Danger Will Robinson. And why. > > Vote will last the normal 72 hrs. > > NOTE: The *-deps are only there for convenience. > > Thx! Hi Jim, Good to go slackware 13+ -- Kind Regards, Noel Butler This Email, including

Re: WatchdogInterval

> > WTF? I don't use it Jim, but ... enabling it on dev box confirms your finding wont start, trace is 0596 write(2, "AH00526: Syntax error on line 42 "..., 71) = 71 10596 write(2, "Duplicate WatchdogInterval direct"..., 54) = 54 -- Kind Regards, Noel Butler

Re: [VOTE] Release Apache httpd 2.4.26 as GA

o > [ ] +0: meh > [ ] -1: Danger Will Robinson. And why. > > Vote will last the normal 72 hrs. > > NOTE: The *-deps are only there for convenience. > > Thx! +1 Slackware with included apr 1.6.2 and apr-util 1.6.0 -- Kind Regards, Noel Butler Th

Re: [proposed] 2.4 Maintenance SIG

On 24/01/2017 20:22, Reindl Harald wrote: > Am 23.01.2017 um 02:52 schrieb Noel Butler: > >> Perhaps the only person who wont bend over and take it up the arse like >> some people here expect, if I have an opinion, i'll voice it > > no, you are just a hypocrite tryin

Re: [proposed] 2.4 Maintenance SIG

On 23/01/2017 19:14, Stefan Eissing wrote: > Am 23.01.2017 um 02:52 schrieb Noel Butler <noel.but...@ausics.net>: > > On 20/01/2017 07:45, Jacob Champion wrote: > > On 01/19/2017 12:52 PM, Noel Butler wrote: Frequent releases set off alarms > in system admins minds,

Re: [proposed] 2.4 Maintenance SIG

On 24/01/2017 13:58, William A Rowe Jr wrote: > On Sun, Jan 22, 2017 at 7:52 PM, Noel Butler <noel.but...@ausics.net> wrote: > >> Perhaps the only person who wont bend over and take it up the arse like some >> people here expect, if I have an opinion, i'll voice it >

Re: [proposed] 2.4 Maintenance SIG

On 20/01/2017 07:45, Jacob Champion wrote: > On 01/19/2017 12:52 PM, Noel Butler wrote: > >> Frequent releases set off alarms in system admins minds, frequent >> releases give the view of unstable/unreliable software, and that is the >> largest cause of movement to

Re: [proposed] 2.4 Maintenance SIG

On 20/01/2017 07:07, William A Rowe Jr wrote: > On Thu, Jan 19, 2017 at 2:52 PM, Noel Butler <noel.but...@ausics.net> wrote: > On 20/01/2017 05:54, William A Rowe Jr wrote: > > posts, I don't think you will find a single post where I suggested > that there is an iss

Re: [proposed] 2.4 Maintenance SIG

orter to test further, and time to see if the fix has introduced other problems before going mainstream, but should exclude very critical security hole plugging, which should go straight to release vote. -- Kind Regard, Noel Butler This Email, including any attachments, may c

Re: The Version Bump fallacy [Was Re: Post 2.4.25]

stays outdated, to give those users a choice of using a modern code set would be good, but requires long term dedication. -- Kind Regard, Noel Butler This Email, including any attachments, may contain legally privileged information, therefore remains confidential and subje

Re: [VOTE] Release Apache httpd 2.4.23 as GA

Good to go Slackware 14.x On 01/07/2016 04:02, Jim Jagielski wrote: +1: o OSX 10.11.5, Xcode 7.3.1 o CentOS 6, 64bit o CentOS 7, 64 bit o Ubuntu 15.10, 64 bit On Jun 30, 2016, at 1:21 PM, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.23 can be

Re: [VOTE] Release Apache httpd 2.4.21 as GA

On 17/06/2016 03:07, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.21 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.21 GA. [X] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: End of the road of 2.2.x maintenance?

On 12/05/2016 05:13, Ruediger Pluem wrote: On 05/10/2016 10:38 PM, William A Rowe Jr wrote: It's been a year, and seems to be a good time to revisit this topic while those folks who are present at ApacheCon can discuss f2f the merits of bringing the 2.2.x chapter to a close, and share their

Re: Status for 2.4.20

your short memory returns again, thank you, as that terminates any and all prior agreements we had about (not) responding to each other and your diatribe, the flood gates have now opened. But as for this post, so it seems I did, I probably stopped reading half way, my care factor isnt all

Re: Status for 2.4.20

On 29/03/2016 01:06, William A Rowe Jr wrote: > @Everyone on this thread - keep it civil. > > On Fri, Mar 25, 2016 at 10:13 PM, Noel Butler <noel.but...@ausics.net> wrote: > On 25/03/2016 19:52, Graham Leggett wrote: > On 23 Mar 2016, at 1:58 PM, Noel Butler <noel.

Re: Status for 2.4.20

On 26/03/2016 22:54, Reindl Harald wrote: *yawn* grow up! especially with your off-list hate-mails while block responses off-list hate mails? The message was pretty clear you emailed me asking me never to reply to any of your posts some time ago, I emailed you reminding you that works

Re: Status for 2.4.20

On 26/03/2016 13:32, Reindl Harald wrote: Am 26.03.2016 um 04:13 schrieb Noel Butler: On 25/03/2016 19:52, Graham Leggett wrote: On 23 Mar 2016, at 1:58 PM, Noel Butler <noel.but...@ausics.net> wrote: as stated previously, this shit will happen when certain people push with a release

Re: Status for 2.4.20

On 25/03/2016 19:52, Graham Leggett wrote: On 23 Mar 2016, at 1:58 PM, Noel Butler <noel.but...@ausics.net> wrote: as stated previously, this shit will happen when certain people push with a release often mentality AFAIK there is *ZERO* critical exploit bugs to be patched by any p

Re: Status for 2.4.20

On 23/03/2016 22:27, Jim Jagielski wrote: I see your point and have no intent or desire to flame. Release Often is hardly a Bad Thing, at least IMHO. When the time is right for a release, then we release. It seemed a good time, again IMHO. My opinion that "this shit will happen" when,

Re: Status for 2.4.20

On 23/03/2016 20:56, Jim Jagielski wrote: Let's see: I recalled the vote for 2.4.19 because of a single issue, basically related to a missing few lines in a file which prevented building on Win. Nice, easy, simple fix. Now it appears that a slew of "fixes" related to Win have been applied

Re: [VOTE] Release Apache httpd 2.4.19 as GA

On 22/03/2016 03:37, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.19 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.19 GA. [x ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: 2.4.18?

On 19/11/2015 01:43, Jim Jagielski wrote: If you don't need the stuff in 2.4.18 and 2.4.17 is fine for you then there is no need to upgrade... I certainly wont be, nor will many others from what I've heard, anyway close to holidays now so wont be doing much anyway. -- If you have the urge

Re: 2.4.18?

On 18/11/2015 19:48, Reindl Harald wrote: Am 18.11.2015 um 08:16 schrieb Noel Butler: On 17/11/2015 22:33, Reindl Harald wrote: 5 or 6 bloody weeks is a month - so what's the problem? any other software but httpd is allowed to have monthly updates? "I can accept" - seriously - yo

Re: 2.4.18?

On 17/11/2015 19:24, Graham Leggett wrote: On 17 Nov 2015, at 07:13, Noel Butler <noel.but...@ausics.net> wrote: ??? We only had 2.4.17 5 weeks ago, why the rush? We have improvements, why make people wait? Regards, Graham -- You run into complacency dangers if you end up in a &q

Re: 2.4.18?

On 17/11/2015 18:02, Stefan Eissing wrote: Am 17.11.2015 um 08:13 schrieb Noel Butler <noel.but...@ausics.net>: On 17/11/2015 03:05, Jim Jagielski wrote: My plan is to T 2.4.18 sometime next week in hopes of a formal release the beginning of Dec. ??? We only had 2.4.17 5 weeks ag

Re: 2.4.18?

On 17/11/2015 22:31, Graham Leggett wrote: On 17 Nov 2015, at 2:18 PM, Noel Butler <noel.but...@ausics.net> wrote: You run into complacency dangers if you end up in a "release very often" mode, take phpmyadmin as one example, most admins I know gave up updating it, because th

Re: 2.4.18?

On 17/11/2015 22:33, Reindl Harald wrote: 5 or 6 bloody weeks is a month - so what's the problem? any other software but httpd is allowed to have monthly updates? "I can accept" - seriously - you can just ignore a release when you think it's not important for you but i don't get why anybody

Re: 2.4.18?

On 17/11/2015 03:05, Jim Jagielski wrote: My plan is to T 2.4.18 sometime next week in hopes of a formal release the beginning of Dec. ??? We only had 2.4.17 5 weeks ago, why the rush? -- If you have the urge to reply to all rather than reply to list, you best read

Re: [VOTE] Release Apache httpd 2.4.17 as GA

On 10/10/2015 03:40, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.17 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.17 GA. [X] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.16 as GA

On 11/07/2015 06:33, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.16 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.16 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger

Re: [VOTE] Release Apache httpd 2.4.15 as GA

On 20/06/2015 02:50, Jim Jagielski wrote: I'm calling a VOTE on releasing these as Apache httpd 2.4.15 GA. using included apr 1.5.2 and apr-util 1.5.4 and with mysql (mariadb) +1 Slackware 13.1 - 14.1 PS: Hopefully, 3rd time's the charm! :)

Re: SSLCertificateChainFile deprecation, still

On 15/06/2015 07:56, Yann Ylavic wrote: On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith g...@gknw.net wrote: http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff [1] I'm fine with this approach too. We have to decide whether a single [warn] is acceptable

Re: [VOTE] Release Apache httpd 2.4.14 as GA

On 12/06/2015 00:08, Jim Jagielski wrote: I'm calling a VOTE on releasing these as Apache httpd 2.4.14 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will Robinson. And why. -1 The SSLCertificateChainFile directive () is deprecated, SSLCertificateFile should be used instead The

Re: [VOTE] Release Apache httpd 2.4.13 as GA

On 05/06/2015 02:33, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.13 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.13 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger

Re: Ad-hominem [was: [VOTE] Simplified 2.2.x EOL Decision]

On 28/05/2015 17:59, William A Rowe Jr wrote: On Thu, May 28, 2015 at 2:48 AM, Noel Butler noel.but...@ausics.net wrote: On 28/05/2015 14:48, William A Rowe Jr wrote: Enough of this ad-hominem BS... [...] You've lost the argument and lost respect, you have demonstrated

Re: [VOTE] Simplified 2.2.x EOL Decision

On 28/05/2015 14:48, William A Rowe Jr wrote: Enough of this ad-hominem BS... this is in fact a majority rule decision (it is a vote not on code but on procedure), and is binding on the project as a whole. I don't want to discuss this again for six months and I'm not keen on the smug

Re: 2.2 and 2.4 and 2.6/3.0

On 28/05/2015 07:38, olli hauer wrote: - for long time there was no working mod_php module for 2.4, and changing to php-fpm was not for everyone a solution. huh? I personally since dawn of the httpd/php love have always only ever used mod_php and at no time did I have a a non usable

Re: 2.2 and 2.4 and 2.6/3.0

On 28/05/2015 03:17, Jim Jagielski wrote: No need to go off... 2.2 has been out for almost 10 years. 2.4 for a bit over 3. That is a LONG time. I'm simply *suggesting* (no BDFL posturing Mr. Rowe) that after 10 years, maybe it's time to say that 2.2's era is done, and 2.4's time is here,

Re: SSL/TLS best current practice

Thanks Christian. On 11/05/2015 01:57, Christian Seiler wrote: On 05/10/2015 03:26 AM, Noel Butler wrote: Can any SUSE and debian users confirm the current supported stable release supports 1.2? Currently, three Debian releases are still supported: - Debian Jessie (current

Re: SSL/TLS best current practice

On 07/05/2015 12:17, William A Rowe Jr wrote: On May 6, 2015 9:09 PM, William A Rowe Jr wr...@rowe-clan.net wrote: On May 6, 2015 8:12 PM, Noel Butler noel.but...@ausics.net wrote: On 07/05/2015 09:22, William A Rowe Jr wrote: For trunk, I propose we drop TLSv1 and TLSv1.1

Re: SSL/TLS best current practice

On 10/05/2015 11:08, Reindl Harald wrote: Am 10.05.2015 um 03:02 schrieb Noel Butler: Either way, using slackware on all my servers its trivial since the distro keeps pretty much up to date by design -⁠ unlike RH/⁠debian and their kiddy versions who bring out new releases with 2+yo

Re: SSL/TLS best current practice

On 07/05/2015 09:22, William A Rowe Jr wrote: For trunk, I propose we drop TLSv1 and TLSv1.1 protocols and simply adopt the recommended cipher list illustrated below (!SSLv3) in the default extra/httpd-ssl.conf source, following the SHOULD recommendations. unless trunk is for the 2.6

Re: Apache 2.4 adoption revisited -- now 16.4% of Apache sites

On 13/03/2015 02:54, Eric Covener wrote: I stumbled on this link that Bill had shared previously and went back to look at previous snapshots: March 2014: 2.0: 4.1%, 2.4: 4.3% http://web.archive.org/web/20140327151641/http://w3techs.com/technologies/details/ws-apache/2/all [1]

Re: [VOTE] Release Apache httpd 2.4.12 as GA

On 28/01/2015 06:41, William A. Rowe Jr. wrote: There is a possibility that OP's had actually rebuilt APR (from the -deps), even with the very same APR version, which resulting in some different autoconf detection on their platform relative to time.h function handling. It would be worth

Re: [VOTE] Release Apache httpd 2.4.12 as GA

Jan 2015 11:23:20 +1000 Noel Butler noel.but...@ausics.net wrote: On 25/01/2015 17:21, Nick Edwards wrote: I am noticing a number of hits using UTC with this version? Not all, only some, is anyone else seeing this? Does not occur on 2.4.10. They are php pages, however, the main site which

Re: [VOTE] Release Apache httpd 2.4.12 as GA

On 27/01/2015 03:21, Rainer Jung wrote: Am 26.01.2015 um 14:14 schrieb Eric Covener: On Mon, Jan 26, 2015 at 8:08 AM, Jim Jagielski j...@jagunet.com wrote: svn diff https://svn.apache.org/repos/asf/httpd/httpd/tags/2.4.11 [1] https://svn.apache.org/repos/asf/httpd/httpd/tags/2.4.12 [2]

Re: [VOTE] Release Apache httpd 2.4.12 as GA

On 25/01/2015 17:21, Nick Edwards wrote: I am noticing a number of hits using UTC with this version? Not all, only some, is anyone else seeing this? Does not occur on 2.4.10. They are php pages, however, the main site which is php is static, it only uses php for counter nothing else, its

Re: [VOTE] Release Apache httpd 2.4.12 as GA

On 24/01/2015 00:56, Jim Jagielski wrote: On Jan 22, 2015, at 1:54 PM, Jim Jagielski j...@jagunet.com wrote: The pre-release test tarballs for Apache httpd 2.4.12 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache

Re: [VOTE] Release Apache httpd 2.4.11 as GA

On 16/01/2015 06:10, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.11 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.11 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger

Re: AW: Time for 2.4.11

On 15/01/2015 20:06, Yann Ylavic wrote: On Thu, Jan 15, 2015 at 9:25 AM, Yann Ylavic ylavic@gmail.com wrote: There is still missing the ListenCoresBucketsRatio documentation, and I don't think I can do it today, could you? Also, would you share maybe some recommended settings

Re: slight APR Version confusion

On 22/07/2014 15:02, dev wrote: I hope this is the right maillist for this sort of question. not really, the users list would be more appropriate and then build httpd after checking a few basic dependencies. Must I unpack the apr and apr-util sources into ./srclib and use

Re: httpd release version confusion re HTTP Server 2.4.10

On 21/07/2014 04:40, olli hauer wrote: On 2014-07-20 19:14, Graham Leggett wrote: On 20 Jul 2014, at 18:03, dev d...@cor0.com wrote: Has 2.4.10 been released or not ? It has been released, but we need to wait for the mirrors to update before formerly announcing the release. Regards,

Re: [VOTE] Release Apache httpd 2.4.10 as GA

On 16/07/2014 03:20, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.10 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.10 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.9 as GA

On 14/03/2014 02:49, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.9 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.9 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.8 as GA

On 12/03/2014 09:17, Noel Butler wrote: On 12/03/2014 02:34, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.8 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.8 GA. [ ] +1

Re: [VOTE] Release Apache httpd 2.4.8 as GA

On 12/03/2014 02:34, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.8 can be found at the usual place: http://httpd.apache.org/dev/dist/ [1] I'm calling a VOTE on releasing these as Apache httpd 2.4.8 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: Use of HTML on mailing lists (Re: SO_REUSEPORT in the children processes)

On Fri, 2014-03-07 at 12:58 -0500, Mikhail T. wrote: On 07.03.2014 12:28, Yann Ylavic wrote: Sorry, this was posted from gmail... Is it written anywhere in the bylaws of this mailing list, that use of HTML is something to apologize for? With all due sympathies to Reindl's medical

Re: Use of HTML on mailing lists (Re: SO_REUSEPORT in the children processes)

Harry, you have been warned before, dont bring your antics onto this list, this is about the only list you have been most well behaved on, unlike others, please remember our previous conversations. If you think a posters post violates some RFC, ignore it, or take it up with him in private, do

Re: Use of HTML on mailing lists (Re: SO_REUSEPORT in the children processes)

because they ask for easier readable posts while you are the one proven to playing net cop due maintaining a RBL? Is it written anywhere in the bylaws of this mailing list is the response you should have been attacking Am 08.03.2014 00:39, schrieb Noel Butler: Harry, you have been warned before

Re: [VOTE] obscuring (or not) commit logs/CHANGES for fixes to vulnerabilities

On Fri, 2014-01-10 at 08:38 -0500, Jeff Trawick wrote: [ X] It is mandatory to provide best available description and any available tracking information when committing fixes for vulnerabilities to any branch, delaying committing of the fix if the information shouldn't be provided yet.

Re: Looking to TR 2.4.8 in Feb...

On Thu, 2014-01-09 at 14:15 -0600, William A. Rowe Jr. wrote: I can certainly apply and propose for back port the defect fixes, this week. Those which change the configured behavior in an unexpected way are no longer easy fits on 2.2 or 2.4, and need further discussion about their

Re: [VOTE] Release Apache httpd 2.4.7 as GA

On Tue, 2013-11-19 at 12:45 -0500, Jim Jagielski wrote: I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will Robinson. And why. Vote will last the normal 72 hrs. +1 slackware 13.1 13.37 14.0 14.1 built w/ apr

Re: [VOTE] Release Apache httpd 2.4.6 as GA

On Mon, 2013-07-15 at 13:51 -0400, Jim Jagielski wrote: On Jul 15, 2013, at 12:48 PM, Jim Jagielski j...@jagunet.com wrote: The pre-release test tarballs for Apache httpd 2.4.6 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing

Re: [VOTE] Release Apache httpd 2.4.5 as GA

On Sun, 2013-07-14 at 23:40 +0200, Rainer Jung wrote: On 14.07.2013 23:05, Rainer Jung wrote: On 11.07.2013 20:54, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.5 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on

Re: [discuss] The 'RM' Baton [was VOTE]

On Wed, 2013-07-10 at 03:24 -0500, William A. Rowe Jr. wrote: Because the project is incapable of releasing more than two minor subversions, per year, at present. on holiday with a dog slow 3G vpn tonight, so I'll be brief (and wont see any replies until I return on Sunday...) I have never

  1   2   >