Re: svn commit: 1573360 - SSLPassPhraseDialog arguments changed in 2.4.x

2014-04-14 Thread Jan Kaluža
On 04/12/2014 12:37 PM, Kaspar Brand wrote: [picking this up from the comment in Re: svn commit: r1585902 - ...] On 09.04.2014 21:56, Jeff Trawick wrote: IMO this needs to be reworked to restore compatibility for 2.x up through 2.4.7, with the new interface used if some new keyword is added on

Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-14 Thread Jeff Trawick
(not to say there aren't complications, like trying to keep system directories out of rpath) -- Born in Roswell... married an alien... http://emptyhammock.com/ http://edjective.org/

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-14 Thread Yann Ylavic
I usually force it with ./configure LDFLAGS=-Wl,-rpath -Wl,/path/to/my/openssl. +1 to have this automagically done according to --with-ssl. On Mon, Apr 14, 2014 at 1:08 PM, Jeff Trawick traw...@gmail.com wrote: (not to say there aren't complications, like trying to keep system directories out

Re: [PATCH] mod_ssl APIs to allow implementation of Certificate Transparency as a separate mod

2014-04-14 Thread Joe Orton
On Sat, Apr 12, 2014 at 09:00:08AM -0400, Jeff Trawick wrote: So... Concerns? Suggestions? Etc.? Speak up, or forever* ask me to fix it after committing ;) (*Let's not be ridiculous though) Interesting stuff! I do think it is preferable to keep mod_ssl.h toolkit-agnostic. Because the

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-14 Thread Daniel Kahn Gillmor
On 04/14/2014 07:08 AM, Jeff Trawick wrote: (not to say there aren't complications, like trying to keep system directories out of rpath) I think that you're asking for mod_ssl to add an openssl-specific directory to its rpath. in general, i would discourage this; at the least, it needs to be

Re: The SERVER_ADDR environment variable

2014-04-14 Thread Andre Nathan
On Fri, Apr 11, 2014 at 10:55 PM, Reindl Harald h.rei...@thelounge.netwrote: simply list getenv in disable_functions, put ?php $_SERVER['SERVER_ADDR']='';? in a file listed in auto_prepend_file and you are done, no need to touch httpd for that and in case of security by obscurity allow to

Re: [PATCH] mod_ssl APIs to allow implementation of Certificate Transparency as a separate mod

2014-04-14 Thread Graham Leggett
On 14 Apr 2014, at 2:03 PM, Joe Orton jor...@redhat.com wrote: Interesting stuff! I do think it is preferable to keep mod_ssl.h toolkit-agnostic. +1. Because the API you are adding is not indended to be private, I'd suggest mod_ssl_openssl.h or something like that instead. Pass what

Facing pass request body failed to X.X.X.X:8080 from Y.Y.Y.Y () . Urgent assistance required

2014-04-14 Thread HBalakrishna
Hi Team, I am using Apache 2.2.20 version , I am facing major problem in APache is below error  my application server(Oracle weblogic ) and it is connecting to Apache 7443 and based on routing it is rewiriting to another apache instance apache on 8080 from here to back end server i.e to

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-14 Thread Jeff Trawick
On Mon, Apr 14, 2014 at 8:04 AM, Daniel Kahn Gillmor d...@fifthhorseman.netwrote: On 04/14/2014 07:08 AM, Jeff Trawick wrote: (not to say there aren't complications, like trying to keep system directories out of rpath) I think that you're asking for mod_ssl to add an openssl-specific

Re: Facing pass request body failed to X.X.X.X:8080 from Y.Y.Y.Y () . Urgent assistance required

2014-04-14 Thread Eric Covener
On Mon, Apr 14, 2014 at 8:17 AM, HBalakrishna hbalakris...@yahoo.com wrote: request is not going to OSB at all i m receiving below error pass request body failed to X.X.X.X:8080 from Y.Y.Y.Y () This is a development list. You don't have a development issue.

Re: [PATCH] mod_ssl APIs to allow implementation of Certificate Transparency as a separate mod

2014-04-14 Thread Jeff Trawick
On Mon, Apr 14, 2014 at 8:03 AM, Joe Orton jor...@redhat.com wrote: On Sat, Apr 12, 2014 at 09:00:08AM -0400, Jeff Trawick wrote: So... Concerns? Suggestions? Etc.? Speak up, or forever* ask me to fix it after committing ;) (*Let's not be ridiculous though) Interesting stuff! I do

Re: [PATCH] mod_ssl APIs to allow implementation of Certificate Transparency as a separate mod

2014-04-14 Thread Jeff Trawick
On Mon, Apr 14, 2014 at 8:14 AM, Graham Leggett minf...@sharp.fm wrote: On 14 Apr 2014, at 2:03 PM, Joe Orton jor...@redhat.com wrote: Interesting stuff! I do think it is preferable to keep mod_ssl.h toolkit-agnostic. +1. Because the API you are adding is not indended to be

Re: svn commit: r1587075 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_proxy_wstunnel.xml modules/proxy/mod_proxy_wstunnel.c

2014-04-14 Thread Jim Jagielski
Cool... How much, if any, is applicable for backporting to 2.4.x? Obviously, the leaking stuff doesn't appear to be a candidate :)

Re: mod_cache thundering herd bug

2014-04-14 Thread Maciej Bogucki
r1023398 for 2.2: http://people.apache.org/~covener/patches/httpd-2.2.x-thunder.diff The remove_url() prevents other threads from serving a stale cached file during refresh of a slow response, but it's unnecessary to have a separate path because the refresh has to deal with 200s already.

Re: svn commit: r1587075 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_proxy_wstunnel.xml modules/proxy/mod_proxy_wstunnel.c

2014-04-14 Thread Eric Covener
On Mon, Apr 14, 2014 at 8:49 AM, Jim Jagielski j...@jagunet.com wrote: Cool... How much, if any, is applicable for backporting to 2.4.x? Obviously, the leaking stuff doesn't appear to be a candidate :) The error handlng, POLLHUP, and directive for the non-infinite poll should go to 2.4.x. I

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-14 Thread olli hauer
On 2014-04-14 13:08, Jeff Trawick wrote: (not to say there aren't complications, like trying to keep system directories out of rpath) On FreeBSD it is possible that a user has openssl 0.9.x or 1.0.x in the base OS (/usr/lib) but installs openssl 1.x.x from the ports system (/usr/local/lib).

Re: Configuration error handling after httpd restart

2014-04-14 Thread Mike Rumph
Hello Jim, Thanks for taking a look at this and providing a patch for case 2 (duplicate Listen directives). I will need to evaluate this patch in more detail. Your approach of simply ignoring duplicate Listen directives with a warning seems reasonable. At least in the simple case that I

Re: [PATCH] mod_ssl APIs to allow implementation of Certificate Transparency as a separate mod

2014-04-14 Thread Joe Orton
On Mon, Apr 14, 2014 at 08:32:18AM -0400, Jeff Trawick wrote: FWIW, I think it is reasonable to say This *is* a private mod_ssl interface for the purposes of introducing some modularity within this particular SSL/TLS implementation, and these interfaces aren't intended for third-party modules.

Re: Configuration error handling after httpd restart

2014-04-14 Thread Eric Covener
On Thu, Mar 27, 2014 at 4:16 PM, Mike Rumph mike.ru...@oracle.com wrote: - And the logs/httpd.pid file remains intact. I noticed this once, IIRC if the 2nd pass of post-config returns an error, the pidfile is not cleaned up. Modules like to cheat and only do their work in the 2nd pass. --

Re: Configuration error handling after httpd restart

2014-04-14 Thread Eric Covener
On Mon, Apr 14, 2014 at 11:15 AM, Mike Rumph mike.ru...@oracle.com wrote: If there is an unknown directive in the config file, simply ignore it with a warning. You can't do that. What if it was Reqiure?

Re: Configuration error handling after httpd restart

2014-04-14 Thread Jim Riggs
On 14 Apr 2014, at 10:38, Eric Covener cove...@gmail.com wrote: On Mon, Apr 14, 2014 at 11:15 AM, Mike Rumph mike.ru...@oracle.com wrote: If there is an unknown directive in the config file, simply ignore it with a warning. You can't do that. What if it was Reqiure? I agree with Eric. I

Zombies from rotatelogs

2014-04-14 Thread Daniel Ruggeri
I was taking a look at a server that had a handful of zombies and came to see they are caused by rotatelogs. It seems pretty straight forward why - I am calling gzip post-rotate to compress the log file and child cleanup only happens during the post_rotate function, but before apr_proc_create for

Re: Configuration error handling after httpd restart

2014-04-14 Thread Yehuda Katz
Since this is up for discussion anyway, what if there was an option to set a directive as ignore-able. For example, PHP allows you to preface a function with `@` to ignore errors (http://www.php.net/manual/en/language.operators.errorcontrol.php). That way, if you restart and the error is Invalid

Re: Zombies from rotatelogs

2014-04-14 Thread Joe Orton
On Mon, Apr 14, 2014 at 11:06:25AM -0500, Daniel Ruggeri wrote: I was taking a look at a server that had a handful of zombies and came to see they are caused by rotatelogs. It seems pretty straight forward why - I am calling gzip post-rotate to compress the log file and child cleanup only

Re: Zombies from rotatelogs

2014-04-14 Thread Daniel Ruggeri
On 4/14/2014 11:41 AM, Joe Orton wrote: It's free... dunno why I didn't think of this before. http://svn.apache.org/viewvc?view=revisionrevision=1587255 Regards, Joe Awesome - proposed for backport in 2.4. Thanks! -- Daniel Ruggeri