Linking mod_ssl with a specific OpenSSL version (Re: svn commit: r1358167 - in /httpd/httpd/trunk: acinclude.m4 modules/ssl/ssl_engine_init.c)

2012-08-05 Thread Kaspar Brand
On 08.07.2012 10:30, Kaspar Brand wrote: On 06.07.2012 14:41, b...@apache.org wrote: Author: ben Date: Fri Jul 6 12:41:10 2012 New Revision: 1358167 URL: http://svn.apache.org/viewvc?rev=1358167view=rev Log: Work correctly with a development version of OpenSSL. I suspect something

Re: Linking mod_ssl with a specific OpenSSL version (Re: svn commit: r1358167 - in /httpd/httpd/trunk: acinclude.m4 modules/ssl/ssl_engine_init.c)

2012-08-05 Thread Kaspar Brand
On 05.08.2012 10:10, Kaspar Brand wrote: test feedback would be much appreciated (remember to run buildconf after applying the patch to acinclude.m4, and before calling configure). The patch attached to the previous message was missing an important line, unfortunately (sorry to anybody who

Re: Linking mod_ssl with a specific OpenSSL version (Re: svn commit: r1358167 - in /httpd/httpd/trunk: acinclude.m4 modules/ssl/ssl_engine_init.c)

2012-08-05 Thread Guenter Knauf
Hi Kaspar, Am 05.08.2012 10:10, schrieb Kaspar Brand: My suggestion would be to handle OpenSSL paths in configure arguments like this, instead: 1) use --with-ssl-builddir for linking with the static OpenSSL libraries in that directory (and ignore --with-ssl in this case) what about splitting

Why does CacheLockPath default to a directory in /tmp instead of runtime-dir?

2012-08-05 Thread Jeff Trawick

Re: Why does CacheLockPath default to a directory in /tmp instead of runtime-dir?

2012-08-05 Thread Filipe Cifali
Normally /tmp is mounted at RAM (tmpfs) and it does provide better performance? 2012/8/5 Jeff Trawick traw...@gmail.com -- []'s Filipe Cifali Stangler

Re: Why does CacheLockPath default to a directory in /tmp instead of runtime-dir?

2012-08-05 Thread Jeff Trawick
On Sun, Aug 5, 2012 at 9:29 AM, Filipe Cifali cifali.fil...@gmail.com wrote: Normally /tmp is mounted at RAM (tmpfs) and it does provide better performance? Sure. And I guess there's a bit of value with them getting cleaned up at reboot. mod_auth_digest is another module that places in /tmp

Re: mpm-itk and upstream Apache, once again

2012-08-05 Thread Steinar H. Gunderson
On Wed, Aug 01, 2012 at 01:58:16PM -0400, Jeff Trawick wrote: Your post-perdir-config patch has been committed to trunk with r1368121. Thanks! Attached is a patch to trunk that allows you to hook in to the stat calls from directory walk. Call apr_stat() like core_dirwalk_stat() but check

Re: mpm-itk and upstream Apache, once again

2012-08-05 Thread Jeff Trawick
On Sun, Aug 5, 2012 at 11:00 AM, Steinar H. Gunderson sgunder...@bigfoot.com wrote: On Wed, Aug 01, 2012 at 01:58:16PM -0400, Jeff Trawick wrote: Your post-perdir-config patch has been committed to trunk with r1368121. Thanks! Attached is a patch to trunk that allows you to hook in to the

Re: mpm-itk and upstream Apache, once again

2012-08-05 Thread Steinar H. Gunderson
On Sun, Aug 05, 2012 at 11:05:59AM -0400, Jeff Trawick wrote: Great! I'll do something about the remaining patch before long. When the time comes, do we have any hopes of getting this back from trunk to 2.4, or would it need to wait for 2.6/3.0? FWIW, the mpm-itk security hardening that was

Re: mpm-itk and upstream Apache, once again

2012-08-05 Thread Jeff Trawick
On Sun, Aug 5, 2012 at 11:32 AM, Steinar H. Gunderson sgunder...@bigfoot.com wrote: On Sun, Aug 05, 2012 at 11:05:59AM -0400, Jeff Trawick wrote: Great! I'll do something about the remaining patch before long. When the time comes, do we have any hopes of getting this back from trunk to 2.4,

Re: RequireAll: seems to evaluate require lines unnecessarily

2012-08-05 Thread Graham Leggett
On 03 Aug 2012, at 9:25 AM, Stefan Fritsch wrote: I have a config like this using httpd v2.4, in an effort to password protect each person's userdir: RequireAll Require valid-user Require expr %{note:mod_userdir_user} == %{REMOTE_USER} /RequireAll Hit it with a browser,

Re: RequireAll: seems to evaluate require lines unnecessarily

2012-08-05 Thread Stefan Fritsch
On Sun, 5 Aug 2012, Graham Leggett wrote: This works as designed. Authentication will only be triggered if the end result depends on a valid user being present. The reason is to avoid a password dialogue if the access will be denied anyway. This breaks basic authentication though, because

Re: Additional core functions for mod_lua

2012-08-05 Thread Daniel Gruno
On 08/03/2012 04:51 PM, Igor Galić wrote: I cannot seem to be able to find this stuff… I have put together some of the scripts I use myself at http://httpd.apache.org/docs/trunk/developer/lua.html but it's far from done (and thus not linked to from any index page). Most of the scripts are

Re: RequireAll: seems to evaluate require lines unnecessarily

2012-08-05 Thread Graham Leggett
On 05 Aug 2012, at 10:39 PM, Stefan Fritsch wrote: This works as designed. Authentication will only be triggered if the end result depends on a valid user being present. The reason is to avoid a password dialogue if the access will be denied anyway. This breaks basic authentication though,

Re: RequireAll: seems to evaluate require lines unnecessarily

2012-08-05 Thread Stefan Fritsch
On Sunday 05 August 2012, Graham Leggett wrote: You mean you can't get Require expr to work. All other providers should work ok. Or do you have an example that does not involve Require expr? Most specifically, as per my original mail, I can't get the following to work: RequireAll

Re: Additional core functions for mod_lua

2012-08-05 Thread Stefan Fritsch
On Sunday 05 August 2012, Daniel Gruno wrote: On 08/03/2012 04:51 PM, Igor Galić wrote: I cannot seem to be able to find this stuff… I have put together some of the scripts I use myself at http://httpd.apache.org/docs/trunk/developer/lua.html but it's far from done (and thus not linked to

Re: Additional core functions for mod_lua

2012-08-05 Thread Daniel Gruno
On 08/06/2012 12:17 AM, Stefan Fritsch wrote: On Sunday 05 August 2012, Daniel Gruno wrote: On 08/03/2012 04:51 PM, Igor Galić wrote: I cannot seem to be able to find this stuff… I have put together some of the scripts I use myself at http://httpd.apache.org/docs/trunk/developer/lua.html but

Re: Linking mod_ssl with a specific OpenSSL version (Re: svn commit: r1358167 - in /httpd/httpd/trunk: acinclude.m4 modules/ssl/ssl_engine_init.c)

2012-08-05 Thread Kaspar Brand
On 05.08.2012 14:38, Guenter Knauf wrote: Am 05.08.2012 10:10, schrieb Kaspar Brand: 1) use --with-ssl-builddir for linking with the static OpenSSL libraries in that directory (and ignore --with-ssl in this case) what about splitting into two arguments: --with-ssl-include= --with-ssl-lib=