[Proposal for trunk] Extending RewriteMap, Reusing ip network matches

2009-12-17 Thread Rainer Jung
1) Extending RewriteMap === I plan to extend key file handling in text file RewriteMap. At the moment keys are always matched as exact strings against the map. I want to add the ability to alternatively a) match via regexp (and replace backreferences in the found values)

Re: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches

2009-12-17 Thread Rainer Jung
On 17.12.2009 14:32, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Rainer Jung Sent: Donnerstag, 17. Dezember 2009 13:38 To: dev@httpd.apache.org Subject: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches 1) Extending RewriteMap

Re: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches

2009-12-17 Thread Rainer Jung
On 17.12.2009 16:02, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Rainer Jung Sent: Donnerstag, 17. Dezember 2009 15:56 To: dev@httpd.apache.org Subject: Re: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches On 17.12.2009 14:32, Plüm, Rüdiger, VF-Group

Re: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches

2009-12-18 Thread Rainer Jung
On 17.12.2009 23:14, William A. Rowe Jr. wrote: Rainer Jung wrote: 1) Extending RewriteMap === I plan to extend key file handling in text file RewriteMap. At the moment keys are always matched as exact strings against the map. I want to add the ability to alternatively

Re: How to combine IP and user based AAA without Satisfy?

2009-12-18 Thread Rainer Jung
On 18.12.2009 00:36, Christian Seiler wrote: Hi, Since I'm also interested in AAA in future Apache versions, I decided to have a look at this. In 2.4, *without* using the deprecated Satisfy via mod_access_compat, you will always be prompted by basic auth, because the ip addresses are only

Re: [Proposal for trunk] Extending RewriteMap, Reusing ip network matches

2009-12-19 Thread Rainer Jung
On 18.12.2009 20:24, William A. Rowe Jr. wrote: Rainer Jung wrote: On 17.12.2009 23:14, William A. Rowe Jr. wrote: Rainer Jung wrote: 1) Extending RewriteMap === I plan to extend key file handling in text file RewriteMap. At the moment keys are always matched as exact

Re: ITR 1.3.x Friday

2010-01-06 Thread Rainer Jung
On 06.01.2010 12:18, Colm MacCárthaigh wrote: I don't think there's much interest in merging any of the patches that are currently in the STATUS, so I'm intending to a roll a 1.3.x release Friday for testing/voting. With a release next week. Unfortunately testing 1.3.x is more painful than it

Re: [VOTE] 1.3.42 release candidate

2010-01-08 Thread Rainer Jung
On 08.01.2010 13:29, Colm MacCárthaigh wrote: There is a 1.3.42 release candidate for testing, and voting, at; http://people.apache.org/~colm/1.3.42/ md5, sigs good, tar.Z and tar.gz same contents. I did only diff and build yet, not yet run and test, but already noticed the

Re: [VOTE] 1.3.42 release candidate

2010-01-09 Thread Rainer Jung
Hi Colm, On 08.01.2010 21:53, Colm MacCárthaigh wrote: On Fri, Jan 8, 2010 at 6:58 PM, Rainer Jungrainer.j...@kippdata.de wrote: File htdocs/manual/misc/FAQ.html was previously 150KB and now is only 5KB. I didn't yet load it from the web server itself, but it seems some generation step was

Re: [VOTE] 1.3.42 release candidate

2010-01-09 Thread Rainer Jung
On 09.01.2010 12:58, Colm MacCárthaigh wrote: On Sat, Jan 9, 2010 at 11:48 AM, Rainer Jungrainer.j...@kippdata.de wrote: There's one other manual related thing I wasn't thinking enough about before writing my last mail: the 1.3.42 manual contains SSI #include virtual statements, the 1.3.41

Re: svn commit: r904768 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/core.xml server/core.c

2010-01-30 Thread Rainer Jung
On 30.01.2010 19:40, Stefan Fritsch wrote: A related question: I want to introduce a directive to set variables that are expanded during config file parsing, just like environment variables are. The problem I want to solve is that environment variables cannot be changed during graceful restart.

Re: svn commit: r904768 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/core.xml server/core.c

2010-01-31 Thread Rainer Jung
On 31.01.2010 12:19, Stefan Fritsch wrote: On Sat, 30 Jan 2010, Rainer Jung wrote: I ported mod_define to 2.0/2.2 a few years ago. You can have a look at http://people.apache.org/~rjung/mod_define/mod_define-current-src.tar.gz It was originally written by Ralf S. Engelschall and distributed

Re: svn commit: r909323 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_proxy.xml docs/manual/mod/mod_proxy_connect.xml docs/manual/mod/mod_proxy_http.xml include/ap_mmn.h modules/proxy/mod_prox

2010-02-14 Thread Rainer Jung
On 14.02.2010 17:19, Ruediger Pluem wrote: On 12.02.2010 10:58, rj...@apache.org wrote: Author: rjung Date: Fri Feb 12 09:58:48 2010 New Revision: 909323 URL: http://svn.apache.org/viewvc?rev=909323view=rev Log: Support remote https proxies by using HTTP CONNECT. PR: 19188 Submitted by:

Re: Tagging 2.2.15 to play openssl catchup?

2010-02-28 Thread Rainer Jung
Stefan: can you mail me your mod_reqtimeout 2.2.x backport patch? Since p.a.o is still offline; i can not download your patch. I tested a backport I made this morning and it looks fine. If it is identical to yours, I'll vote immediately for it. On 28.02.2010 15:04, Stefan Fritsch wrote: On

Re: svn commit: r919671 - /httpd/site/trunk/docs/contributors/index.html

2010-03-06 Thread Rainer Jung
On 06.03.2010 00:43, wr...@apache.org wrote: Author: wrowe Date: Fri Mar 5 23:43:05 2010 New Revision: 919671 URL: http://svn.apache.org/viewvc?rev=919671view=rev Log: sf; please note you need to update xdocs/contributors/index.xml, not this one Modified:

Re: svn commit: r919758 - in /httpd/site/trunk: docs/contributors/index.html xdocs/contributors/index.xml

2010-03-06 Thread Rainer Jung
On 06.03.2010 14:17, s...@apache.org wrote: Author: sf Date: Sat Mar 6 13:17:11 2010 New Revision: 919758 URL: http://svn.apache.org/viewvc?rev=919758view=rev Log: fix typo Modified: httpd/site/trunk/docs/contributors/index.html httpd/site/trunk/xdocs/contributors/index.xml

Re: mod_reqtimeout and mod_proxy: how to distinguish incoming from backend connections

2010-03-09 Thread Rainer Jung
Hi Stefan, On 09.03.2010 22:20, Stefan Fritsch wrote: BTW, can someone create a mod_reqtimeout entry in bugzilla? Done.

Backport of SSLInsecureRenegotiation to httpd 2.0.x

2010-03-15 Thread Rainer Jung
There's a patch candidate for SSLInsecureRenegotiation for httpd 2.0.x at: http://people.apache.org/~rjung/patches/SSLInsecureRenegotiation_httpd_2_0_x-backport-r917044.patch I still have to test (even compile) so I didn't yet propose via STATUS. Just wanted to prevent duplicate effort. Will

Re: Nod to 2.0, one more time?

2010-03-22 Thread Rainer Jung
On 22.03.2010 14:52, William A. Rowe Jr. wrote: Wondering if we are comfortable tagging and releasing 2.0.64 in the coming days? These security issues aught to be addressed, and while we are at it, it just seems like a nice thing to do as we get closer to some 2.3 beta and further from any more

Unclean process shutdown in event MPM?

2010-03-23 Thread Rainer Jung
I can currently reproduce the following problem with 2.2.15 event MPM under high load: When an httpd child process gets closed due to the max spare threads rule and it holds established client connections for which it has fully received a keep alive request, but not yet send any part of the

Re: Unclean process shutdown in event MPM?

2010-03-23 Thread Rainer Jung
On 23.03.2010 13:34, Jeff Trawick wrote: On Tue, Mar 23, 2010 at 7:19 AM, Rainer Jungrainer.j...@kippdata.de wrote: I can currently reproduce the following problem with 2.2.15 event MPM under high load: When an httpd child process gets closed due to the max spare threads rule and it holds

Re: Nod to 2.0, one more time?

2010-03-24 Thread Rainer Jung
Hi Gregg, thanks for testing, see comments below. On 24.03.2010 23:17, Gregg L. Smith wrote: Rainer Jung wrote: On 22.03.2010 14:52, William A. Rowe Jr. wrote: Wondering if we are comfortable tagging and releasing 2.0.64 in the I agree there should be a release fixing (at least) CVE-2009

Re: Nod to 2.0, one more time?

2010-03-24 Thread Rainer Jung
On 25.03.2010 00:20, William A. Rowe Jr. wrote: On 3/24/2010 5:51 PM, Rainer Jung wrote: The server only needs server initiated renegotiations. As repeated several times, there are apparently micro SSL implementations out there in the wild, e.g. cell phone browsers, who choose to renegotiate

Re: Unclean process shutdown in event MPM?

2010-04-25 Thread Rainer Jung
On 23.03.2010 15:30, Jeff Trawick wrote: On Tue, Mar 23, 2010 at 10:04 AM, Rainer Jungrainer.j...@kippdata.de wrote: On 23.03.2010 13:34, Jeff Trawick wrote: On Tue, Mar 23, 2010 at 7:19 AM, Rainer Jungrainer.j...@kippdata.de wrote: I can currently reproduce the following problem with

Re: [Survey] Maintained builds - was Re: httpd trunk, apr/apu 1.4 branches and Linux

2010-04-26 Thread Rainer Jung
On 25.04.2010 18:07, William A. Rowe Jr. wrote: On 4/23/2010 8:03 AM, William A. Rowe Jr. wrote: On 4/23/2010 7:58 AM, Jim Jagielski wrote: For those who are working on httpd trunk and Linux, what are you using? You raise interesting questions about what the httpd folks actually test on a

Re: Unclean process shutdown in event MPM?

2010-04-29 Thread Rainer Jung
, Rainer On Sun, Apr 25, 2010 at 2:07 PM, Rainer Jung rainer.j...@kippdata.de mailto:rainer.j...@kippdata.de wrote: On 23.03.2010 15:30, Jeff Trawick wrote: Is that expected behaviour? It doesn't seem reproducible for the worker MPM

Re: svn commit: r942897 - in /httpd/httpd/trunk: CHANGES server/mpm/prefork/prefork.c

2010-05-13 Thread Rainer Jung
Rüdiger, Jeff rolled back this change in r943648 after a comment by Joe and committed an alternative approach in r943650. Regards, Rainer On 13.05.2010 10:43, Ruediger Pluem wrote: On 10.05.2010 22:47, traw...@apache.org wrote: Author: trawick Date: Mon May 10 20:47:59 2010 New Revision:

Re: Fast by default

2010-05-28 Thread Rainer Jung
On 28.05.2010 13:31, Eric Covener wrote: On Fri, May 28, 2010 at 12:08 AM, Sergey Chernyshev sergey.chernys...@gmail.com wrote: Hi, I'm working on helping people to have their sites fast by default and was wondering if Apache HTTPD team can consider enabling a few modules by default and maybe

Re: Fast by default

2010-06-01 Thread Rainer Jung
On 01.06.2010 07:19, Jerome Renard wrote: In 2010, IMO there is no good reason to have gzip disabled by default. Almost all websites enable it. There are a handful of prominent websites that do not. I've had conversations with a few of these sites. Most of them have not turned it on because they

[PROPOSAL] Keep-Alive while exiting (Was: Unclean process shutdown in event MPM?)

2010-06-01 Thread Rainer Jung
Situation: worker or event MPM. Process shutdown due to: - MaxRequestsPerChild - MaxSpareThreads - Graceful stop or graceful restart When an httpd child process shuts down due to the above conditions, it doesn't respect existing Keep-Alive connections. When the previous response signalled

Enhanced error log format for trunk?

2010-06-01 Thread Rainer Jung
I repeatedly inserted millisecond or microsecond timestamps as well as PID and thread ID information into the ErrorLog when trying to diagnose problems, most often in combination with additional log lines. Due to the increased load and capability of systems and increasing amount of

Re: drop support for OpenSSL 1.0 in trunk/2.3?

2010-06-01 Thread Rainer Jung
On 25.05.2010 15:09, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Joe Orton Sent: Dienstag, 25. Mai 2010 14:46 To: dev@httpd.apache.org Subject: RFC: drop support for OpenSSL 1.0 in trunk/2.3? I'd like to drop support for versions of OpenSSL older than 1.0 in the trunk

Re: RFC: drop support for OpenSSL 1.0 in trunk/2.3?

2010-06-02 Thread Rainer Jung
On 02.06.2010 18:23, Joe Orton wrote: Thanks very much for all the responses. There is strong consensus for retaining support for some varieties of 0.9.8 and possibly some 0.9.7. A new RFC, then, for trunk/2.3 and beyond: - support and build warning-free with OpenSSL= 0.9.8 - support and

Re: svn commit: r950693 - /httpd/mod_fcgid/trunk/configure.apxs

2010-06-02 Thread Rainer Jung
On 02.06.2010 19:55, cove...@apache.org wrote: Author: covener Date: Wed Jun 2 17:55:51 2010 New Revision: 950693 URL: http://svn.apache.org/viewvc?rev=950693view=rev Log: instead of adding another escape, protect the backrefs as they're passed to sed. /bin/dash on debian/ubuntu was getting

Info: current module enable status for trunk

2010-06-02 Thread Rainer Jung
Whoever wishes to know, which module is enabled under what conditions: I compiled a list avalable under http://people.apache.org/~rjung/patches/mods_enabled.txt Most of it is done by the script http://people.apache.org/~rjung/patches/mods_enabled.pl (it needs to be started in the trunk

Module build defaults for trunk

2010-06-03 Thread Rainer Jung
Reading the feedback on the modules list I posted got me into thinking: 1) Should static module linking be still the default for httpd building? Of course the question is only relevant for platforms which allow dynamic linking and if we have APR_HAS_DSO. I know that static linking is expected

Re: Module build defaults for trunk

2010-06-03 Thread Rainer Jung
On 03.06.2010 15:28, Jeff Trawick wrote: Here's a missing piece: A good generic httpd build has DSOs for all modules that could work on the system, but a nice httpd.conf loads only the modules that are necessary. Meanwhile, our module build system assumes that you wish to actively use the

Re: Per-module / per-dir loglevel configuration version 4

2010-06-03 Thread Rainer Jung
On 02.06.2010 22:42, Stefan Fritsch wrote: I have updated my patch to the latest trunk and to use the variant where the module for logging is selected with APLOG_USE_MODULE and AP_DECLARE_MODULE macros: ... Multi-file modules have to use APLOG_USE_MODULE in the other files. The patch is at

Re: Per-module / per-dir loglevel configuration version 5

2010-06-05 Thread Rainer Jung
On 04.06.2010 23:57, Stefan Fritsch wrote: On Friday 04 June 2010, Stefan Fritsch wrote: which are either pure bug fixes or pretty trivial. I will create a new patch series without these soon, hopefully tomorrow. The next iteration is at http://people.apache.org/~sf/per-module-loglevel-v5/

Re: svn commit: r951222 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_disk_cache.c

2010-06-06 Thread Rainer Jung
On 06.06.2010 13:35, Graham Leggett wrote: On 05 Jun 2010, at 6:51 PM, Ruediger Pluem wrote: The reason we don't see this problem very often is because we don't see a 206 very often at this point in the code. The filter that does content ranges sits after the CACHE_SAVE filter, and so under most

Re: Per-module / per-dir loglevel configuration version 5

2010-06-06 Thread Rainer Jung
On 05.06.2010 21:44, Rainer Jung wrote: During the build I also noticed, that mod_lua has two lines, where it doesn't use APLOG_MARK but instead directly passes two file/line args along. Patch along the lines of the mod_ssl solution: http://people.apache.org/~rjung/patches/httpd-trunk-per

Re: Module build defaults for trunk

2010-06-06 Thread Rainer Jung
On 03.06.2010 13:30, Rainer Jung wrote: Reading the feedback on the modules list I posted got me into thinking: 1) Should static module linking be still the default for httpd building? ... 2) Which pre-cooked sets of modules to provide via configure? Currently the default set (no configure

Re: Alpha of 2.3.6 next week

2010-06-07 Thread Rainer Jung
On 02.06.2010 17:55, Jim Jagielski wrote: I'm planning on releasing an alpha of 2.3.6 next week in hopes that we can push out a beta v. soon after. I think my changes concerning building shared modules by default and adding items to the error log format are complete. And I guess Stefans log

Re: Enhanced error log format for trunk?

2010-06-07 Thread Rainer Jung
On 01.06.2010 14:56, Rainer Jung wrote: I repeatedly inserted millisecond or microsecond timestamps as well as PID and thread ID information into the ErrorLog when trying to diagnose problems, most often in combination with additional log lines. Due to the increased load and capability

Re: Enhanced error log format for trunk?

2010-06-07 Thread Rainer Jung
On 03.06.2010 16:49, Stefan Fritsch wrote: On Tuesday 01 June 2010, Rainer Jung wrote: 4) General correlation improvements To be able to correlate error and access log, it would be helpful to share a common id, e.g. the unique_id, and be able to log it in both files. The id generated

Re: svn commit: r952201 - /httpd/httpd/trunk/server/log.c

2010-06-08 Thread Rainer Jung
On 08.06.2010 10:21, Joe Orton wrote: On Mon, Jun 07, 2010 at 12:23:26PM -, rj...@apache.org wrote: Author: rjung Date: Mon Jun 7 12:23:26 2010 New Revision: 952201 URL: http://svn.apache.org/viewvc?rev=952201view=rev Log: Add process id and thread id (if APR has thread support) to the

Re: svn commit: r952201 - /httpd/httpd/trunk/server/log.c

2010-06-08 Thread Rainer Jung
On 08.06.2010 12:11, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Rainer Jung Sent: Dienstag, 8. Juni 2010 11:14 To: dev@httpd.apache.org Subject: Re: svn commit: r952201 - /httpd/httpd/trunk/server/log.c On 08.06.2010 10:21, Joe Orton wrote: On Mon, Jun 07, 2010 at 12:23

Re: svn commit: r952201 - /httpd/httpd/trunk/server/log.c

2010-06-08 Thread Rainer Jung
On 08.06.2010 10:21, Joe Orton wrote: On Mon, Jun 07, 2010 at 12:23:26PM -, rj...@apache.org wrote: These numbers made me double-take when reading error_log since they don't have a descriptive prefix. Also the tid is not much use in a non-threaded server. Could we do something like

Re: svn commit: r952789 - /httpd/httpd/trunk/server/log.c

2010-06-08 Thread Rainer Jung
On 08.06.2010 21:41, s...@apache.org wrote: Author: sf Date: Tue Jun 8 19:41:01 2010 New Revision: 952789 URL: http://svn.apache.org/viewvc?rev=952789view=rev Log: Fix the test of ap_mpm_query's result: Both AP_MPMQ_STATIC and AP_MPMQ_DYNAMIC mean threaded. Thanks and especially for

Re: Enhanced error log format for trunk?

2010-06-08 Thread Rainer Jung
On 08.06.2010 22:56, Stefan Fritsch wrote: On Monday 07 June 2010, Rainer Jung wrote: On 03.06.2010 16:49, Stefan Fritsch wrote: On Tuesday 01 June 2010, Rainer Jung wrote: 4) General correlation improvements To be able to correlate error and access log, it would be helpful to share a common

Re: Enhanced error log format for trunk?

2010-06-09 Thread Rainer Jung
On 09.06.2010 14:37, Jeff Trawick wrote: On Tue, Jun 1, 2010 at 8:56 AM, Rainer Jung rainer.j...@kippdata.de mailto:rainer.j...@kippdata.de wrote: I repeatedly inserted millisecond or microsecond timestamps as well as PID and thread ID information into the ErrorLog when trying

Re: svn commit: r951893 - in /httpd/httpd/trunk: configure.in include/ap_mmn.h include/http_config.h include/http_log.h include/httpd.h server/config.c server/core.c server/log.c server/util_debug.c

2010-06-10 Thread Rainer Jung
On 10.06.2010 08:09, Ruediger Pluem wrote: On 06/09/2010 10:00 PM, Stefan Fritsch wrote: On Wed, 9 Jun 2010, Ruediger Pluem wrote: +#if __STDC_VERSION__= 199901L defined(APLOG_MAX_LOGLEVEL) +/* need additional step to expand APLOG_MARK first */ +#define ap_log_perror(...)

Re: Bumping autoconf AC_PREREQ to 2.60?

2010-06-12 Thread Rainer Jung
On 12.06.2010 21:07, Stefan Fritsch wrote: On Friday 11 June 2010, Ruediger Pluem wrote: Modified: httpd/httpd/trunk/configure.in URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/configure.in?rev= 951893r1=951892r2=951893view=diff

Re: Bumping autoconf AC_PREREQ to 2.60?

2010-06-13 Thread Rainer Jung
On 13.06.2010 13:29, Ruediger Pluem wrote: On 06/12/2010 09:07 PM, Stefan Fritsch wrote: On Friday 11 June 2010, Ruediger Pluem wrote: Modified: httpd/httpd/trunk/configure.in URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/configure.in?rev= 951893r1=951892r2=951893view=diff

Re: external links/webring

2010-06-15 Thread Rainer Jung
On 14.06.2010 21:45, William A. Rowe Jr. wrote: The asf-wide, site-dev team noticed our webring seems horribly dated, just as the ASF list of 'apache resources' was. We should determine how we might provide external/thirdparty links and under what set of criteria. The immediate question is;

Remove User, Group and ScoreBoardFile from mpmt_os2

2010-06-15 Thread Rainer Jung
I want to remove User, Group and ScoreBoardFile from the OS2 MPM. The directives have an empty implementation ignore_cmd() and have only been introduced for consistency with those MPMS which did support it. In trunk User and Group are no longer MPM directives, they moved to mod_unixd, and

MPM default config and conf/extra/httpd-mpm.conf

2010-06-15 Thread Rainer Jung
I noticed, that the values in conf/extra/httpd-mpm.conf in parts differ hugely from the corresponding MPM defaults. IMHO activating conf/extra/httpd-mpm.conf should be safe in the sense that you don't get changed MPM behaviour as long as you don't change the file contents. If we think the

Re: svn commit: r954862 - /httpd/httpd/trunk/CHANGES

2010-06-15 Thread Rainer Jung
On 15.06.2010 16:21, Jeff Trawick wrote: On Tue, Jun 15, 2010 at 9:06 AM,rj...@apache.org wrote: Author: rjung Date: Tue Jun 15 13:06:14 2010 New Revision: 954862 URL: http://svn.apache.org/viewvc?rev=954862view=rev Log: Fix obsolete reference to 2.1 in CHANGES. Likely we still have to clean

Re: MPM default config and conf/extra/httpd-mpm.conf

2010-06-15 Thread Rainer Jung
On 15.06.2010 17:58, William A. Rowe Jr. wrote: On 6/15/2010 10:36 AM, Rainer Jung wrote: I noticed, that the values in conf/extra/httpd-mpm.conf in parts differ hugely from the corresponding MPM defaults. IMHO activating conf/extra/httpd-mpm.conf should be safe in the sense that you don't get

Re: svn commit: r954862 - /httpd/httpd/trunk/CHANGES

2010-06-15 Thread Rainer Jung
On 15.06.2010 18:30, Rainer Jung wrote: Sorry for the noise, forget about the second addition, doesn't seem to be the same thing (prepared statements vs. connection pools). @@ -1131,11 +1082,6 @@ Changes with Apache 2.3.0 into the environment with the name AUTHENTICATE_COLUMN. This brings

MPM sizing defaults and config

2010-06-15 Thread Rainer Jung
The default configuration for various MPMs differs from the example configuration file conf/extra/httpd-mpm.conf. Before bringing those two in sync, I want to propose the values we want to use as new defaults as well as for the extras configuration file. Prefork ===conf default

Re: MPM default config and conf/extra/httpd-mpm.conf

2010-06-15 Thread Rainer Jung
On 15.06.2010 22:51, Igor Galić wrote: - Rainer Jungrainer.j...@kippdata.de wrote: I noticed, that the values in conf/extra/httpd-mpm.conf in parts differ hugely from the corresponding MPM defaults. IMHO activating conf/extra/httpd-mpm.conf should be safe in the sense that you don't

Re: MPM sizing defaults and config

2010-06-15 Thread Rainer Jung
would make the MPMs better comparable out of the box, but on the other hand precisely this type of comparison might not make much sense. On 6/15/2010 4:03 PM, Rainer Jung wrote: The default configuration for various MPMs differs from the example configuration file conf/extra/httpd-mpm.conf

Re: svn commit: r954862 - /httpd/httpd/trunk/CHANGES

2010-06-15 Thread Rainer Jung
On 15.06.2010 23:20, Graham Leggett wrote: On 15 Jun 2010, at 4:21 PM, Jeff Trawick wrote: trunk CHANGES needs to track fixes/enhancements since the last alpha, so the candidates for pruning would be in the section Changes with Apache 2.3.0. attached is a patch to prune 2.3.0 changes which

Re: MPM sizing defaults and config

2010-06-16 Thread Rainer Jung
On 16.06.2010 04:27, William A. Rowe Jr. wrote: On 6/15/2010 7:27 PM, Guenter Knauf wrote: Hi, Am 16.06.2010 00:37, schrieb William A. Rowe Jr.: Netware ===conf default proposed StartThreads250 50 50 MinSpareThreads 25 10 25

Re: [VOTE] Release httpd 2.3.6-alpha

2010-06-16 Thread Rainer Jung
On 11.06.2010 18:46, Jim Jagielski wrote: Test tarballs for Apache httpd 2.3.6-alpha are (will be) available at: http://httpd.apache.org/dev/dist/ Your votes please; +/- 1 [ X] Release httpd-2.3.6 as Alpha I built it on Solaris 8, Solaris 10 (both Sparc, using gcc), SuSE Linux

Re: svn commit: r952443 - /httpd/test/framework/trunk/t/apache/pr17629.t

2010-06-16 Thread Rainer Jung
Hi Joe, On 07.06.2010 23:16, jor...@apache.org wrote: Author: jorton Date: Mon Jun 7 21:16:50 2010 New Revision: 952443 URL: http://svn.apache.org/viewvc?rev=952443view=rev Log: - make more robust against failure cases Modified: httpd/test/framework/trunk/t/apache/pr17629.t Modified:

Re: Trunk makefile.win annoyance

2010-06-18 Thread Rainer Jung
On 18.06.2010 00:57, Gregg L. Smith wrote: Hello, Currently the windows make file in trunk causes nmake on VC6/SDK 2003 R2 to fail on Line 511, VC9 does not seem to have a problem with it. I have not tried on 10 and do not have 7 8. The problem on 6 is if nmake/ide does not see the comment

Re: MPM sizing defaults and config

2010-06-21 Thread Rainer Jung
On 21.06.2010 11:34, Brian Havard wrote: On 21/06/10 09:20, Igor Galić wrote: From docs/manual/upgrading.xml: +liPlatform support has been removed for BeOS, OS/2, TPF, and + even older platforms such as A/UX, Next, and Tandem. These were + believed to be broken anyway./li What

Re: [FINAL] Re: [VOTE] Release httpd 2.3.6-alpha

2010-06-21 Thread Rainer Jung
Hi Jim, On 21.06.2010 14:37, Jim Jagielski wrote: Just a FYI: I've been trying to get this puppy released, but something is *seriously* hosed with the whole svn sync process since, even as of *today*, it looks like NO mirrors have the 2.3.6-alpha tarballs, even though they have been committed

Re: server-status and privacy

2010-06-21 Thread Rainer Jung
On 21.06.2010 14:40, Jim Jagielski wrote: There have been a few reports regarding how server-status leaks info, mostly about our (the ASF's) open use of server-status and how IP addresses are exposed. I'm thinking about a patch that adjusts server-status/mod_status to have a public vs. private

Re: mod_fcgid Was Re: mod_status.h - include directory

2010-07-01 Thread Rainer Jung
On 01.07.2010 04:23, Gregg L. Smith wrote: Speaking of 2.3.6, it would be nice to see it soonish too? Looking at changes there are not a lot of them but the segfault is a bear, and it brings downs Apache. It's been six months as well, seems a perfect reason for a release. Not sure what you

Adding sub second timestamps and request end time to mod_log_config

2010-07-20 Thread Rainer Jung
There's a patch at http://people.apache.org/~rjung/patches/httpd-trunk-adding-milliseconds-and-microseconds-to-the-access-log.patch that adds configurable logging of sub second timestamp resolutions and request end timestamps to the access log (all via %{...}t). Any objections against adding

Re: Error log format configuration syntax

2010-07-20 Thread Rainer Jung
On 20.07.2010 00:39, Stefan Fritsch wrote: Hi, I have been working on making the error log format configurable. It's more or less working now, but I could use some feed-back about the config syntax. The difficulty is that many tokens only produce output in some situations (e.g. no remote IP in

Re: Error log format configuration syntax

2010-07-21 Thread Rainer Jung
On 20.07.2010 21:14, Stefan Fritsch wrote: On Tue, 20 Jul 2010, Rainer Jung wrote: message and behind the message. I guess you can get rid of the latter split by assigning a format specifier also to the log message, like '%M' or similar, and then ErrorLogFormat [%{u}t] [%l] [pid %P%{:tid }T

Re: svn commit: r966055 - /httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in

2010-07-21 Thread Rainer Jung
On 21.07.2010 01:33, gst...@apache.org wrote: Author: gstein Date: Tue Jul 20 23:33:18 2010 New Revision: 966055 URL: http://svn.apache.org/viewvc?rev=966055view=rev Log: Fix up some SSL configuration, per issue #49484. IE6 had a hotfix released for this problem quite a while back (see kb

Re: svn commit: r966055 - /httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in

2010-07-21 Thread Rainer Jung
On 21.07.2010 12:59, Igor Galić wrote: +SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL Reminds me a bit of: http://journal.paul.querna.org/articles/2010/07/10/overclocking-mod_ssl/ Can't we simplify that to: SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!MD5 Since

Re: svn commit: r966055 - /httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in

2010-07-21 Thread Rainer Jung
On 21.07.2010 14:54, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Rainer Jung Sent: Mittwoch, 21. Juli 2010 14:46 To: dev@httpd.apache.org Subject: Re: svn commit: r966055 - /httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in On 21.07.2010 12:59, Igor Galić wrote

Re: [VOTE] Release httpd 2.2.16

2010-07-21 Thread Rainer Jung
On 21.07.2010 20:45, Paul Querna wrote: Test tarballs for Apache httpd 2.2.16 are available at: http://httpd.apache.org/dev/dist/ Your votes please; +/- 1 [ ] Release httpd-2.2.16 Vote closes at 02:00 UTC on Saturday July 24 2010. Just a quick info in case someone else also runs

Re: [VOTE] Release httpd 2.2.16

2010-07-21 Thread Rainer Jung
On 22.07.2010 04:17, Rainer Jung wrote: On 21.07.2010 20:45, Paul Querna wrote: Test tarballs for Apache httpd 2.2.16 are available at: http://httpd.apache.org/dev/dist/ Your votes please; +/- 1 [ ] Release httpd-2.2.16 Vote closes at 02:00 UTC on Saturday July 24 2010. Just a quick info

Re: [VOTE] Release httpd 2.2.16

2010-07-21 Thread Rainer Jung
On 22.07.2010 04:52, Paul Querna wrote: Ack-- I could re-tag with libtool 1.x, if we don't want to ship a modified apr-util. I always use an external expat it seems :( Thoughts? For the ASF release re-tag would be enough. There's a few people though, that already ran into the same problem

Re: [VOTE] Release httpd 2.2.16

2010-07-22 Thread Rainer Jung
On 22.07.2010 07:46, Ruediger Pluem wrote: On 07/22/2010 06:10 AM, William A. Rowe Jr. wrote: On 7/21/2010 10:09 PM, Rainer Jung wrote: On 22.07.2010 04:52, Paul Querna wrote: Ack-- I could re-tag with libtool 1.x, if we don't want to ship a modified apr-util. I always use an external

Re: [VOTE] Release httpd 2.2.16

2010-07-22 Thread Rainer Jung
On 22.07.2010 11:28, Paul Querna wrote: On Thu, Jul 22, 2010 at 12:23 AM, Rainer Jungrainer.j...@kippdata.de wrote: On 22.07.2010 07:46, Ruediger Pluem wrote: On 07/22/2010 06:10 AM, William A. Rowe Jr. wrote: On 7/21/2010 10:09 PM, Rainer Jung wrote: On 22.07.2010 04:52, Paul Querna

Re: [VOTE] Release httpd 2.2.16

2010-07-24 Thread Rainer Jung
On 21.07.2010 20:45, Paul Querna wrote: Test tarballs for Apache httpd 2.2.16 are available at: http://httpd.apache.org/dev/dist/ Your votes please; +/- 1 [+1] Release httpd-2.2.16 +1 for release. Tested on Solaris 8 Sparc, SuSE Linux Enterprise 10 (32Bit and 64Bit). - Signature and

Re: Error log format configuration syntax

2010-07-28 Thread Rainer Jung
On 28.07.2010 13:44, Dan Poirier wrote: On 2010-07-28 at 03:51, Alex Wulmsalex.wu...@scarlet.be wrote: Hi, While adding some debug log statements to a module I'm working on, I ran into the problem that ap_log_error (in apache 2.2) does not support %zd or %zu conversion for type_t arguments.

Re: [VOTE] Release httpd 2.2.16

2010-07-29 Thread Rainer Jung
On 29.07.2010 18:19, Sander Temme wrote: On Jul 29, 2010, at 9:07 AM, bswen wrote: httpd 2.2.16+: No more Win32 releases?? I think no one has gotten around to posting Win32 sources, that's all. In addition: None of 2.2.16 yet made it to archive.a.o, neither eu nor us. Seems something is

Re: svn commit: r981060 - /httpd/httpd/branches/2.2.x/STATUS

2010-07-31 Thread Rainer Jung
Hi Gregg, On 31.07.2010 22:11, Gregg L. Smith wrote: Hello Rainer, I am +1 for this, as a matter of fact I lobbied for this 10 months ago. http://marc.info/?l=apache-httpd-devm=125421199606305w=2 If it is going to be done however, please do it completely. Attached is the rest of what is

Re: svn commit: r981498 - in /httpd/site/trunk: docs/security/vulnerabilities-oval.xml docs/security/vulnerabilities_22.html xdocs/security/vulnerabilities-httpd.xml

2010-08-02 Thread Rainer Jung
Hi Joe, On 02.08.2010 15:03, jor...@apache.org wrote: Author: jorton Date: Mon Aug 2 13:03:04 2010 New Revision: 981498 URL: http://svn.apache.org/viewvc?rev=981498view=rev Log: - add description of CVE-2010-2791 Modified: httpd/site/trunk/docs/security/vulnerabilities-oval.xml

Re: svn commit: r981498 - in /httpd/site/trunk: docs/security/vulnerabilities-oval.xml docs/security/vulnerabilities_22.html xdocs/security/vulnerabilities-httpd.xml

2010-08-02 Thread Rainer Jung
On 02.08.2010 15:47, Joe Orton wrote: On Mon, Aug 02, 2010 at 03:33:45PM +0200, Rainer Jung wrote: --- httpd/site/trunk/docs/security/vulnerabilities-oval.xml (original) +++ httpd/site/trunk/docs/security/vulnerabilities-oval.xml Mon Aug 2 13:03:04 2010 @@ -714,6 +714,31 @@ to cross-site

Re: OS Keep-alive on forward proxy

2010-08-05 Thread Rainer Jung
On 05.08.2010 05:45, Ryujiro Shibuya wrote: Hi, Can you tell if the OS Keep-alive feature should be expected to work on forward proxy? The mod_proxy of latest httpd 2.2 and trunk (2.3) has OS Keep-alive (Keep-alive connection to origin server) feature, but it seems not working when we

Changing Connection header use in forward proxy

2010-08-05 Thread Rainer Jung
It seems the forward proxy by default sets Connection: Keep-Alive although it later closes the connection when it detects is_address_reusable == 1 in the worker. Doesn't it make sense to issue Connection close instead? Since this happens in the code where we have a connection and a request,

Rephrasing worker already used

2010-08-05 Thread Rainer Jung
The message worker ... already used by another worker seems to not say what's actually happening. Situation: ProxyPass /X http://a.b.c.d/A ProxyPass /Y http://a.b.c.d/AB Wouldn't a message worker http://a.b.c.d/A; will also be used for URL /Y be more correct? In addition: we do overwrite

Re: OS Keep-alive on forward proxy

2010-08-05 Thread Rainer Jung
In adition to Rüdiger's reply: On 05.08.2010 17:31, Paul Fee wrote: Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Paul Fee Sent: Donnerstag, 5. August 2010 11:18 To: dev@httpd.apache.org Subject: Re: OS Keep-alive on forward proxy Rainer Jung wrote: snip And yes

Re: Changing Connection header use in forward proxy

2010-08-05 Thread Rainer Jung
On 05.08.2010 13:03, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Rainer Jung Sent: Donnerstag, 5. August 2010 11:51 To: dev@httpd.apache.org Subject: Changing Connection header use in forward proxy It seems the forward proxy by default sets Connection: Keep-Alive although

Talking about proxy workers

2010-08-05 Thread Rainer Jung
I created a patch for the mod_proxy docs to clarify what a worker is. The old part of the docs never talk about workers and then later down when the 2.2 attributes are described we suddenly start using that terminology. I got also confused by the worker sharing (worker already used by

Re: Talking about proxy workers

2010-08-06 Thread Rainer Jung
On 05.08.2010 21:30, Eric Covener wrote: http://people.apache.org/~rjung/httpd/trunk/manual/mod/mod_proxy.html.en#workers A direct worker is usually configured using any of ProxyPass, ProxyPassMatch or ProxySet. I don't know much about Proxy, but can this hammer home a bit more that these

Re: Talking about proxy workers

2010-08-06 Thread Rainer Jung
On 06.08.2010 13:13, Jeff Trawick wrote: nits: + There are two builtin workers, the default forward proxy worker and the built-in Done + optionally included in adirective module=mod_proxyProxy/directive + directive. How about using container at the end instead of directive?

Re: Talking about proxy workers

2010-08-06 Thread Rainer Jung
Minor additions inside. On 06.08.2010 14:49, Plüm, Rüdiger, VF-Group wrote: -Original Message- From: Paul Fee Sent: Freitag, 6. August 2010 14:44 To: dev@httpd.apache.org Subject: Re: Talking about proxy workers Also, is it possible to setup these three reuse styles for a forward

Re: trunk ping for http proxy

2010-08-16 Thread Rainer Jung
On 16.08.2010 15:41, Jim Jagielski wrote: As many know, one thing I've wanted in httpd's proxy for http is a sort of pre-request ping option (ala what we have for ajp) and nothing ever worked out fine, for a variety of reasons. Anyway, I've gone back to an idea I had a long while ago and one

Re: svn commit: r986333 - /httpd/httpd/trunk/modules/proxy/mod_proxy_http.c

2010-08-17 Thread Rainer Jung
On 17.08.2010 16:43, j...@apache.org wrote: Author: jim Date: Tue Aug 17 14:43:45 2010 New Revision: 986333 URL: http://svn.apache.org/viewvc?rev=986333view=rev Log: Further checks for non-body requests... Modified: httpd/httpd/trunk/modules/proxy/mod_proxy_http.c Modified:

<    1   2   3   4   5   6   7   8   9   10   >