Re: Have you submitted the modified Edelkey patch to httpd-dev

2007-03-05 Thread Peter Sylvester
Following the advices below and to react to http://issues.apache.org/bugzilla/show_bug.cgi?id=34607 I inform the httpd community about the availability of a patch to mod_ssl permitting different certificates based of the the servername tls extension or Host: values. For TLS extensions the

internal dummy connection again

2007-03-05 Thread Karl Chen
Hi, I just spent 1-2 hours tracking down what turned out to be internal dummy connection. In my log files I get a ton of: ::1 - - [02/Mar/2007:19:31:22 -0800] GET / 400 705 - - For others, at least the log line would say Apache/... (internal dummy connection), for easy Googling; for me,

OpenSSL FIPS status

2007-03-05 Thread Jason Jones
Can I ask what the status is on utilizing OpenSSL's FIPS mode with mod_ssl? Thanks, Jason Jones

Re: OpenSSL FIPS status

2007-03-05 Thread William A. Rowe, Jr.
Jason Jones wrote: Can I ask what the status is on utilizing OpenSSL's FIPS mode with mod_ssl? No news from me yet - I've just finished helping migrate mod_ftp out of incubation into httpd project, and have one more critical patch to bring it into the 21.1'nd century (EPSV/EPRT

mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread Trent Nelson
William A. Rowe, Jr. [mailto:[EMAIL PROTECTED]: And I had also just finished the non-ASF release of current mod_aspdotnet code, removing the final nail from that coffin. H, has this been publicized anywhere? Can you point me to its new non-ASF home?

Re: mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread William A. Rowe, Jr.
Trent Nelson wrote: William A. Rowe, Jr. [mailto:[EMAIL PROTECTED]: And I had also just finished the non-ASF release of current mod_aspdotnet code, removing the final nail from that coffin. H, has this been publicized anywhere? Can you point me to its new non-ASF home? Was crossposted

httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
I'm planning to rename http://svn.apache.org/repos/asf/httpd/sandbox/fips-dev/ to http://svn.apache.org/repos/asf/httpd/sandbox/Gaithersburg/ just to prevent anyone from mis-understanding the current state of that sandbox, and follow our newborn place-naming convention. I'm aware of

Re: internal dummy connection again

2007-03-05 Thread Paul Querna
Karl Chen wrote: Would it be possible to connect to a non-SSL port, if possible, so at least the string internal dummy connection shows up? Even better would be to not show that string at all. When I connect to httpd and close the connection without sending anything, Not sending

Re: internal dummy connection again

2007-03-05 Thread Ruediger Pluem
On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud. Can we avoid this if we replace GET / with OPTIONS /? Would it

Re: internal dummy connection again

2007-03-05 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud. Can we avoid this if we replace GET /

Re: internal dummy connection again

2007-03-05 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Ruediger Pluem wrote: On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud. Can we avoid

Re: internal dummy connection again

2007-03-05 Thread Joe Orton
On Mon, Mar 05, 2007 at 09:33:56PM +0100, Ruediger Pluem wrote: On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud.

Re: httpd-fips is not FIPS

2007-03-05 Thread Ruediger Pluem
On 03/05/2007 08:40 PM, William A. Rowe, Jr. wrote: I'm planning to rename http://svn.apache.org/repos/asf/httpd/sandbox/fips-dev/ to http://svn.apache.org/repos/asf/httpd/sandbox/Gaithersburg/ just to prevent anyone from mis-understanding the current state of that sandbox, and

Re: httpd-fips is not FIPS

2007-03-05 Thread Joe Orton
On Mon, Mar 05, 2007 at 01:40:46PM -0600, William Rowe wrote: I'm planning to rename http://svn.apache.org/repos/asf/httpd/sandbox/fips-dev/ to http://svn.apache.org/repos/asf/httpd/sandbox/Gaithersburg/ just to prevent anyone from mis-understanding the current state of that

Content-Encoding: identity

2007-03-05 Thread Topher Fischer
Here's the deal. I'm behind a proxy/web filter (squid/dansguardian). The proxy is making requests on behalf of our users, and it uses Accept-Encoding: identity in its HTTP request to an Apache 2.2.4 server. When the reply comes back from the webserver, it has both Content-Encoding: identity

Re: Status of Bug # 39243

2007-03-05 Thread Joe Orton
On Sun, Mar 04, 2007 at 01:13:08PM +0100, Ruediger Pluem wrote: On 03/04/2007 01:53 AM, Kevin wrote: I guess redhat has applied some sort of patch. Does anyone know abou I don't think so. Joe? For the record, no, we don't use anything different to the upstream code here. Also

Re: httpd-fips is not FIPS

2007-03-05 Thread Sander Temme
On Mar 5, 2007, at 11:40 AM, William A. Rowe, Jr. wrote: I'm planning to rename http://svn.apache.org/repos/asf/httpd/sandbox/fips-dev/ to http://svn.apache.org/repos/asf/httpd/sandbox/Gaithersburg/ just to prevent anyone from mis-understanding the current state of that sandbox, and

Re: httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
Joe Orton wrote: Can you get rid of the branches of apr/apr-util? They have no place in the httpd SVN tree. As 'solving' a build of apache httpd to follow the fips security policy of openssl requires a similarly fips-ified apr/apr-util, I'll leave those in place. When you've svn'ed all the

Re: httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
Sander Temme wrote: +1. No sense confusing anyone with regards to crypto. Why Gaithersburg? http://csrc.nist.gov/ :) A play on the new city name convention, yes.

Re: Content-Encoding: identity

2007-03-05 Thread Ruediger Pluem
On 03/05/2007 10:52 PM, Topher Fischer wrote: Here's the deal. I'm behind a proxy/web filter (squid/dansguardian). The proxy is making requests on behalf of our users, and it uses Accept-Encoding: identity in its HTTP request to an Apache 2.2.4 server. When the reply comes back from the

Re: Content-Encoding: identity

2007-03-05 Thread Topher Fischer
Ruediger Pluem wrote: On 03/05/2007 10:52 PM, Topher Fischer wrote: Here's the deal. I'm behind a proxy/web filter (squid/dansguardian). The proxy is making requests on behalf of our users, and it uses Accept-Encoding: identity in its HTTP request to an Apache 2.2.4 server. When the

Re: Content-Encoding: identity

2007-03-05 Thread Nick Kew
On Mon, 05 Mar 2007 16:18:30 -0700 Topher Fischer [EMAIL PROTECTED] wrote: That field exists in the reply from the webserver, and the reply given from the proxy to the client. Just to clarify: Here's what goes out from the proxy: Accept-Encoding: identity,gzip,deflate And here's what

How to cache the responses for XMLHttpRquest

2007-03-05 Thread Erica Zhang
Hi, I want to cache the responses for XMLHttpRequest, that is dynamic content. I have configureed http.conf using Expires to add headers to those responses. However, I still could not find those responses to be able to be cached by use of web browser. Regards, Erica

Re: How to cache the responses for XMLHttpRquest

2007-03-05 Thread Joshua Slive
On 3/5/07, Erica Zhang [EMAIL PROTECTED] wrote: Hi, I want to cache the responses for XMLHttpRequest, that is dynamic content. I have configureed http.conf using Expires to add headers to those responses. However, I still could not find those responses to be able to be cached by use of web

Re: How to cache the responses for XMLHttpRquest

2007-03-05 Thread Paul Querna
Erica Zhang wrote: Hi, I want to cache the responses for XMLHttpRequest, that is dynamic content. I have configureed http.conf using Expires to add headers to those responses. However, I still could not find those responses to be able to be cached by use of web browser. Some browsers (IE?)

Just starting module development

2007-03-05 Thread Farokh Irani
I'm trying to convert a plug-in that ran under WebSTAR as well as under Microsoft IIS to an Apache 2 module and I was wondering if anyone had any pointer or sample code that I should look at to make life easier. The WebSTAR code handles multiple threads (I haven't looked at the IIS code) so I

Re: How to cache the responses for XMLHttpRquest

2007-03-05 Thread Erica Zhang
Paul Querna wrote: Erica Zhang wrote: Hi, I want to cache the responses for XMLHttpRequest, that is dynamic content. I have configureed http.conf using Expires to add headers to those responses. However, I still could not find those responses to be able to be cached by use of web browser.

Re: mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread James Park (pencil_ethics)
William A. Rowe, Jr. wrote: Trent Nelson wrote: William A. Rowe, Jr. [mailto:[EMAIL PROTECTED]: And I had also just finished the non-ASF release of current mod_aspdotnet code, removing the final nail from that coffin. H, has this been publicized anywhere? Can you point me to its new

Questions on modules to provide cache functions for Apache

2007-03-05 Thread Erica Zhang
Hi, I want to develop a filter module to cache responses for XMLHttp requests for Apache. Before that, I have tried to configure using mod_cache. I found that it could not be used to cache responses for XMLHttp requests. However, I am not sure about this, because I am new to web

Re: mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread William A. Rowe, Jr.
James Park (pencil_ethics) wrote: mod_aspdotnet lives! Does this mean I should update my (presently rather dated) patch that provides .NET 2.0 support against the new code? As an aside, I managed to rid the code of that ugly _gcA_gcA_gcString.cs file :) OT :) Yes' would entirely greet anyone

Re: How to identify apache memory

2007-03-05 Thread Nick Kew
On Mon, 05 Mar 2007 07:55:06 +0100 Joachim Zobel [EMAIL PROTECTED] wrote: I am currently integrating libxml2 into an apache module. Doing this I have encountered the problem, that libxml2 tries to free memory that apache has allocated (I am using functions that are not really meant to be

Re: How to identify apache memory

2007-03-05 Thread Joachim Zobel
Am Montag, den 05.03.2007, 17:23 + schrieb Nick Kew: On Mon, 05 Mar 2007 07:55:06 +0100 Joachim Zobel [EMAIL PROTECTED] wrote: I can however provide my own memmory allocation functions to libxml2, so if I can identify apache memory, I can work around this. Have you looked at

Re: How to identify apache memory

2007-03-05 Thread William A. Rowe, Jr.
Joachim Zobel wrote: Am Montag, den 05.03.2007, 17:23 + schrieb Nick Kew: On Mon, 05 Mar 2007 07:55:06 +0100 Joachim Zobel [EMAIL PROTECTED] wrote: I can however provide my own memmory allocation functions to libxml2, so if I can identify apache memory, I can work around this. Have you

Re: How to identify apache memory

2007-03-05 Thread Joachim Zobel
Am Montag, den 05.03.2007, 13:42 -0600 schrieb William A. Rowe, Jr.: Just register one of two free functions as cleanups of the pool, based on the origin of the data. How could that help me? I think I don't get the idea. I think I should restate my problem. I can do something like