missing EOS bucket and mod_proxy_http waits forever

2015-04-29 Thread himdeep pathak
I am using apache(2.2.28) as reverse proxy Please help me to handle following scenario.. mod_proxy_http is unable to read EOS bucket from previous output filter and it (ap_get_brigade()) stays on blocking state forever. response transfer encoding is chunk. Missing EOS bucket could be 1. due

Re: ALPN patch comments

2015-04-29 Thread Kaspar Brand
On 27.04.2015 17:04, Stefan Eissing wrote: Am 25.04.2015 um 11:47 schrieb Kaspar Brand httpd-dev.2...@velox.ch: Only tested in terms of compiles both w/ and w/o HAVE_TLS_ALPN, so it certainly needs more eyes before a backport proposal could be made. There's also a TODO: we should have a

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Eric Covener
On Wed, Apr 29, 2015 at 8:19 AM, Yann Ylavic ylavic@gmail.com wrote: Hence how about removing this whole block (is there any module today outsmarting httpd that cannot be considered as buggy?) or least disable it for forwarded responses, eg: Index: modules/http/http_filters.c

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Wed, Apr 29, 2015 at 12:57 AM, Kaspar Brand httpd-dev.2...@velox.ch wrote: On 28.04.2015 14:04, Tom Browder wrote: Maybe I need to play tricks with ld.so.conf and openssl? Depends on whether you built OpenSSL with or without shared libraries - what are the contents of the /opt/openssl/lib

Re: ALPN patch comments

2015-04-29 Thread Jim Jagielski
Thank You!! Will review ASAP. On Apr 29, 2015, at 7:05 AM, Kaspar Brand httpd-dev.2...@velox.ch wrote: On 27.04.2015 17:04, Stefan Eissing wrote: Am 25.04.2015 um 11:47 schrieb Kaspar Brand httpd-dev.2...@velox.ch: Only tested in terms of compiles both w/ and w/o HAVE_TLS_ALPN, so it

HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
Due to ap_http_header_filter(): /* This is a hack, but I can't find anyway around it. The idea is that * we don't want to send out 0 Content-Lengths if it is a head request. * This happens when modules try to outsmart the server, and return * if they see a HEAD request.

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 2:46 PM, Eric Covener cove...@gmail.com wrote: On Wed, Apr 29, 2015 at 8:19 AM, Yann Ylavic ylavic@gmail.com wrote: Hence how about removing this whole block (is there any module today outsmarting httpd that cannot be considered as buggy?) or least disable it for

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Kaspar Brand
On 28.04.2015 14:04, Tom Browder wrote: On Tue, Apr 28, 2015 at 6:45 AM, Eric Covener cove...@gmail.com wrote: about openssl 1.02 though -- what exactly do you see? I see this when attempting to start apache: /usr/local/apache2/bin/httpd: symbol lookup error: /usr/local/apache2/bin/httpd:

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 2:46 PM, Eric Covener cove...@gmail.com wrote: On Wed, Apr 29, 2015 at 8:19 AM, Yann Ylavic ylavic@gmail.com wrote: Hence how about removing this whole block (is there any module today outsmarting httpd that cannot be considered as buggy?) or least disable it for

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
(sorry for the patches spam / confused proposal) On Wed, Apr 29, 2015 at 6:07 PM, Yann Ylavic ylavic@gmail.com wrote: We could also avoid the note by setting r-clength = -1 instead in ap_content_length_filter(). Another candidate could be r-sent_bodyct = 1, eg: Index: server/protocol.c

Re: Balancer manager

2015-04-29 Thread William A Rowe Jr
On Fri, Apr 24, 2015 at 8:52 AM, Jim Jagielski j...@jagunet.com wrote: Right now, the balancer manager allows for a member to be disabled/stopped, but it cannot *remove* that member... Seems to me that that would be good, especially since we could always re-use that slot. That means you

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Wed, Apr 29, 2015 at 3:29 PM, William A Rowe Jr wr...@rowe-clan.net wrote: Just to point out the obvious, it would be a Very Bad Idea(tm) to build httpd against the dynamic apr-util linked statically to bits and pieces of the ... I'm just trying to work around the current build systems to

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Yann Ylavic
Hi Tom, On Wed, Apr 29, 2015 at 11:10 PM, Tom Browder tom.brow...@gmail.com wrote: I'm just trying to work around the current build systems to meet a specific goal and I would appreciate anyone who can tell me EXACTLY how to: + use the latest openssl + use the latest apr and apr-util +

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread William A Rowe Jr
Just to point out the obvious, it would be a Very Bad Idea(tm) to build httpd against the dynamic apr-util linked statically to bits and pieces of the libssl.a and libcrypto.a, only to then attempt to build httpd with mod_ssl compiled-in against libssl.a/libcrypto.a again. Unix dl logic doesn't

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Wed, Apr 29, 2015 at 4:51 PM, Yann Ylavic ylavic@gmail.com wrote: Hi Tom, On Wed, Apr 29, 2015 at 11:10 PM, Tom Browder tom.brow...@gmail.com wrote: I'm just trying to work around the current build systems to meet a specific goal and I would appreciate anyone who can tell me EXACTLY

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Apr 29, 2015 6:08 PM, Yann Ylavic ylavic@gmail.com wrote: On Thu, Apr 30, 2015 at 12:39 AM, Tom Browder tom.brow...@gmail.com wrote: configure: error: Crypto was requested but no crypto library could be enabled; specify the location of a crypto library using --with-openssl,

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Yann Ylavic
On Thu, Apr 30, 2015 at 12:39 AM, Tom Browder tom.brow...@gmail.com wrote: One more requirement: I want to use mod_session_crypto so I have to '--enable-sesion-crypto' and, with Yann's options, I still get the error: configure: error: Crypto was requested but no crypto library could be

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Yann Ylavic
On Thu, Apr 30, 2015 at 1:57 AM, Tom Browder tom.brow...@gmail.com wrote: apachectl httpd: Syntax error on line 147 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/mod_session_crypto.so into server: /usr/local/apache2/modules/mod_session_crypto.so: undefined symbol:

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Wed, Apr 29, 2015 at 6:30 PM, Tom Browder tom.brow...@gmail.com wrote: On Apr 29, 2015 6:08 PM, Yann Ylavic ylavic@gmail.com wrote: ... Did you try --with-openssl=/opt/openssl in addition to --with-ssl? No, but I tried other variants--let me try that. Okay, now httpd is using

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 3:17 PM, Yann Ylavic ylavic@gmail.com wrote: On Wed, Apr 29, 2015 at 2:46 PM, Eric Covener cove...@gmail.com wrote: On Wed, Apr 29, 2015 at 8:19 AM, Yann Ylavic ylavic@gmail.com wrote: Hence how about removing this whole block (is there any module today

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 3:39 PM, Yann Ylavic ylavic@gmail.com wrote: On Wed, Apr 29, 2015 at 3:17 PM, Yann Ylavic ylavic@gmail.com wrote: On Wed, Apr 29, 2015 at 2:46 PM, Eric Covener cove...@gmail.com wrote: On Wed, Apr 29, 2015 at 8:19 AM, Yann Ylavic ylavic@gmail.com wrote:

Re: HEAD response's Content-Length stripped when zero

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 3:17 PM, Yann Ylavic ylavic@gmail.com wrote: Index: modules/http/http_filters.c === --- modules/http/http_filters.c(revision 1676716) +++ modules/http/http_filters.c(working copy) @@ -1292,6

Prefetch before connecting/reusing backend and leverage ping/100-continue (was: svn commit: r1676855 - /httpd/httpd/branches/2.4.x/STATUS)

2015-04-29 Thread Yann Ylavic
On Wed, Apr 29, 2015 at 10:48 PM, yla...@apache.org wrote: + * mod_proxy_http: Don't establish or reuse a backend connection before pre- + fetching the request body, so to minimize the delay between it is supposed + to be alive and the first bytes sent: this is a best effort to

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Tom Browder
On Wed, Apr 29, 2015 at 7:09 PM, Yann Ylavic ylavic@gmail.com wrote: On Thu, Apr 30, 2015 at 1:57 AM, Tom Browder tom.brow...@gmail.com wrote: apachectl httpd: Syntax error on line 147 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/mod_session_crypto.so into server:

Proposal/RFC: informed load balancing

2015-04-29 Thread Jim Riggs
[ Long message and proposal follows. Bear with me. There are a lot of words, but that is because we need a lot of help/input! ;-) ] So, this has come up in the past several times, and we discussed it again this year at ApacheCon: How do we get the load balancer to make smarter, more informed

Re: OpenSSL 1.02, PCRE 2.10

2015-04-29 Thread Kaspar Brand
On 29.04.2015 15:06, Tom Browder wrote: On Wed, Apr 29, 2015 at 12:57 AM, Kaspar Brand httpd-dev.2...@velox.ch wrote: On 28.04.2015 14:04, Tom Browder wrote: I have no system installed openssl, Hmm, what platform is this? Are you sure there are no libcrypto/libssl libraries somewhere under