Re: [VOTE] httpd-2.2.4 release candidate for review

2007-01-10 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: http://httpd.apache.org/dev/dist/ will soon (within the hour, upon resync) contain the following tarballs for approval httpd-2.2.4.tar.bz2 [.asc|.md5] httpd-2.2.4.tar.gz [.asc|.md5] httpd-2.2.4-win32-src.zip [.asc|.md5] I counted 7+1, 0-1. Thanks everyone.

2.2.4 windows binary w/ssl?

2007-01-10 Thread William A. Rowe, Jr.
I'd like to propose we ship apache_2.2.4-win32-x86-openssl-0.9.8d.msi with this release. Couple of notes... Roy has started the details spelled out at http://www.apache.org/dev/crypto.html and I'm certain he will complete them sometime shortly, here. That's a red flag that prevents us from

Re: 2.2.4 windows binary w/ssl?

2007-01-10 Thread William A. Rowe, Jr.
Jorge Schrauwen wrote: Do note that not all users that will chose the SSL package will know how to correctly fill in the fields. s/not all/a small minority of/ They can't figure out what Domain Name means, let's be serious :) On 1/10/07, *Issac Goldstand* [EMAIL PROTECTED] mailto:[EMAIL

Re: 2.2.4 windows binary w/ssl?

2007-01-11 Thread William A. Rowe, Jr.
Issac Goldstand wrote: I'd agree if mod_ssl is disabled by default, but if it is, why are they downloading the mod_ssl-enabled installer? You miss the point, it's illegal in some jurisdictions to possess/use such cryptography. That installer will remain as a service to those communities,

Re: Add 2.2.4 to bugzilla

2007-01-11 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: Hi, could someone please add version 2.2.4 to the product Apache httpd-2 in bugzilla? Are there any ideas how we can document / automate this as part of the release process? This issue pops up regulary after each release. My bad, sorry, it's already been done.

Re: svn commit: r495422 - in /httpd/site/trunk: docs/dev/release.html xdocs/dev/release.xml

2007-01-11 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: Author: rpluem Date: Thu Jan 11 14:48:47 2007 New Revision: 495422 URL: http://svn.apache.org/viewvc?view=revrev=495422 Log: * - Clarified location of release.sh script - minotaur is an internal server name. Replaced it with people.apache.org - Added a

Re: Add 2.2.4 to bugzilla

2007-01-12 Thread William A. Rowe, Jr.
Joe Orton wrote: On Thu, Jan 11, 2007 at 10:11:18PM -0800, Sander Temme wrote: Yes, Closed should be the final resting place for bug reports, for good or for bad. What is the difference between a RESOLVED bug and a CLOSED one? Is it not possible to re-open/add comments to CLOSED

Re: Vote request: Accept mod_ftp podling for graduation

2007-01-18 Thread William A. Rowe, Jr.
I mostly concur with Justin Justin Erenkrantz wrote: On 1/18/07, Jim Jagielski [EMAIL PROTECTED] wrote: The mod_ftp PPMC has voted on graduation and it was approved[1]. We are now asking the httpd PMC to approve graduation. +1. +1 One topic for discussion is whether it should be a

httpd-trunk/2.2 SSL_TOOLKIT nightmare

2007-01-24 Thread William A. Rowe, Jr.
I'd like to propose one of a few solutions that the pkgconfig crap has caused when --with-ssl=/path/to/ssl specifies a nonstandard location. After evaluating that path, we proceed to pull up the irrelevant settings from some default pkgconfig/openssl.pc that has nothing to do with /path/to/ssl

Re: 2007 DST changes, and a non-issue statement...

2007-01-24 Thread William A. Rowe, Jr.
Victor J. Orlikowski wrote: Whereupon, I was told that upper management would prefer to have something rather more official than my word on it. Ok, you offer them one :) ASF projects make no warranties. If you want to dredge up the old Y2K comments from the site svn history it's probably

Re: 2007 DST changes, and a non-issue statement...

2007-01-25 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Jeff Trawick wrote: Is there anything to say other than (for httpd, for example): Apache httpd and bundled libraries do not maintain their own time zone information. Instead, information is retrieved from the operating system. Relevant operating system updates must be

Re: State of perchild MPM

2007-01-29 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: 2. If there is, do the developers need help with it? I can write C and I am willing to help out with this. If there is not, Would anyone from the Apache team be interested in working with me so I may write such functionality, maybe for a future version of

Re: State of perchild MPM

2007-01-29 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: [EMAIL PROTECTED] wrote: 2. If there is, do the developers need help with it? I can write C and I am willing to help out with this. If there is not, Would anyone from the Apache team be interested in working with me so I may write such functionality, maybe

Re: [PATCH] mod_autoindex character set

2007-02-01 Thread William A. Rowe, Jr.
Dr. Peter Poeml wrote: On Thu, Feb 01, 2007 at 10:59:46 +, Joe Orton wrote: On Wed, Jan 31, 2007 at 09:45:12PM +0100, Dr. Peter Poeml wrote: Users have a problem with directory listings generated by mod_autoindex: It is not possible to control the character setting which which the

Re: apxs -q [end of statement]

2007-02-01 Thread William A. Rowe, Jr.
I'm almost thinking that a --qq or -q -v sort of option could provide the pretty-print format. Once nice thing about the raw version is that it's more directly usable as input to other things. Thoughts? Sander Temme wrote: On Dec 8, 2006, at 1:56 PM, William A. Rowe, Jr. wrote: It always

Re: [PATCH] mod_autoindex character set

2007-02-01 Thread William A. Rowe, Jr.
Issac Goldstand wrote: Dr. Peter Poeml wrote: As a totally optional addition, it might be possible to let mod_autoindex figure out the actual encoding, and automatically set an appropriate character set. There are some more details in https://bugzilla.novell.com/show_bug.cgi?id=153557 .

Re: apxs -q [end of statement]

2007-02-01 Thread William A. Rowe, Jr.
Sander Temme wrote: On Feb 1, 2007, at 9:37 AM, William A. Rowe, Jr. wrote: I'm almost thinking that a --qq or -q -v sort of option could provide the pretty-print format. Once nice thing about the raw version is that it's more directly usable as input to other things. +1 Like below

Re: Bumping question

2007-02-05 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: Would the following change in mod_cache.h require a major bump or would a minor bump be enough? APR_DECLARE_OPTIONAL_FN(apr_status_t, ap_cache_generate_key, -(request_rec *r, apr_pool_t*p, char**key )); +

Re: Bumping question

2007-02-05 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: As 3rd parties might want to use the provider interface to provide their own storage providers it might be worth discussing if we *should* make this a public API and should install it via make install. Someone probably has ;-) That said, +1 for this in trunk/httpd

Re: protocol module ?

2007-02-08 Thread William A. Rowe, Jr.
All hooks may see any connection (likewise, with other hooks). The trick is how to 'go away' and ignore/decline handling it. mod_ftp looks for a server's FTP On directive setting in the server host context to decide to pick up and handle the connection. Since vhosts can be configured for

Re: Vote Summary (Was: Re: Vote request: Accept mod_ftp podling for graduation)

2007-02-09 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Summary of mod_ftp graduation voting: +1 on graduation (acceptance of code to httpd): Don't forget Nick in the final tally :) I will allow for 24 hours for anyone to raise objections and then inform the Incubator and start the graduation process. Ping?

Re: Vote Summary (Was: Re: Vote request: Accept mod_ftp podling for graduation)

2007-02-09 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Jim Jagielski wrote: I will allow for 24 hours for anyone to raise objections and then inform the Incubator and start the graduation process. Ping? I mostly bring this up because the reports are due in about three days, and it would be worthwhile to post

Re: mod_log_access [was: Piped logger nightmares]

2007-02-10 Thread William A. Rowe, Jr.
George Cox wrote: I'm going to wade in here, and hopefully add something of value. If I don't, please flame as hard as you can etc. I've written a module which automatically rotates access logs. It's called mod_log_access, and the latest version is available at:

Re: build httpd/apr on vista with latest SDK

2007-02-13 Thread William A. Rowe, Jr.
Issac Goldstand wrote: Has anyone successfully built httpd on Vista with the SDK and bundled compiler? Bundled compiler? If Vista or the most recent SDK includes a C compiler, it would be news to me. Pointers?

Re: build httpd/apr on vista with latest SDK

2007-02-13 Thread William A. Rowe, Jr.
Issac Goldstand wrote: I think it's the compilers that come with vs 2005 express editions. Then the answer I suppose is ... yes. 2005 compiles are working fine. FWIW, if you are trying to build from the GUI - that's it's own can of worms, it mis-parses the RC flags from the .dsp upon

Redesigning Limit from the ground up.

2007-02-13 Thread William A. Rowe, Jr.
As originally conceived, Limit METH METH2 was designed to handle a very limited (once 30, now 62) different possible methods and assign them a specific Satisfy/Require/Allow/Deny/Order directive pattern that otherwise has no corresponding value for the un-Limit'ed method possibilities. The model

Re: Redesigning Limit from the ground up.

2007-02-13 Thread William A. Rowe, Jr.
Nick Kew wrote: On Tue, 13 Feb 2007 14:00:09 -0600 William A. Rowe, Jr. [EMAIL PROTECTED] wrote: The fundamental weakness of Limit is that it requires a module to cooperate proactively, and many modules don't. That gives it different semantics to other standard containers. Yes

Re: 3.0 - Proposed Goals

2007-02-14 Thread William A. Rowe, Jr.
Paul Querna wrote: So, I've been kicking around some ideas about where I personally would like trunk to go for a couple months now. My personal goals for 3.0: - Write some cool stuff, that is fun to hack on. - Create an environment that encourages others to contribute, A project this

Re: svn commit: r507526 - in /httpd/httpd/trunk/modules: http/http_filters.c proxy/mod_proxy.c

2007-02-14 Thread William A. Rowe, Jr.
NICE. I agree that this is more in-spec with 2616, so consider this my +1 for backport to 2.2, 2.0, 1.3 branches for whomever wants to apply this patch. [EMAIL PROTECTED] wrote: Author: niq Date: Wed Feb 14 05:34:38 2007 New Revision: 507526 URL:

Re: 3.0 - Proposed Requirements

2007-02-14 Thread William A. Rowe, Jr.
Paul Querna wrote: This proposed list of requirements for a 3.0 platform. this list enables a 'base' level of performance and design decisions to be made. If others can make designs work with 'lessor' requirements, all the better, but I'm not worried about it. Proposed Requirements: - C99

Re: 3.0 - Proposed Goals

2007-02-14 Thread William A. Rowe, Jr.
Jim Jagielski wrote: On Feb 14, 2007, at 3:28 PM, William A. Rowe, Jr. wrote: It's always been small groups ;-) But we are loathe to drop the 'barrier to entry' of demonstrating that the new coder is 'cluefull'. This is a server platform, rife with the security issues that go along

Re: 3.0 - Introduction

2007-02-14 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: On Feb 13, 2007, at 11:32 PM, Paul Querna wrote: I believe the httpd project is ready for a push towards the next major version. But do we really want to start by calling it 3.0? How about if we work off of a few code names first? Say, for example, amsterdam. The

Re: 3.0 - Introduction

2007-02-14 Thread William A. Rowe, Jr.
Paul Querna wrote: +1 to moving goal and discussion to a SVN file and starting a sandbox (same level as tags/branches?) Nooo - it is another sort of branch/, so belongs there. We could have a separate place, but why? branches/n.n.x should always sort before branches/async-foo,

Re: 3.0 - Introduction

2007-02-14 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: I was planning on creating repos/asf/httpd/sandbox/amsterdam/ and then moving the GSoC stuff to other subdirectories of that sandbox. I prefer to think of branches as forks off of trunk, whereas the sandbox would not be. Ok... that's another way.

Re: svn commit: r507956 - /httpd/httpd/branches/2.2.x/STATUS

2007-02-15 Thread William A. Rowe, Jr.
Jeff Trawick wrote: On 2/15/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Author: jim Date: Thu Feb 15 07:14:25 2007 New Revision: 507956 URL: http://svn.apache.org/viewvc?view=revrev=507956 Log: Actually, I think this should be a show-stopper, since the current behavior is broke broke

Re: svn commit: r507955 - /httpd/httpd/branches/2.0.x/STATUS

2007-02-15 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: RELEASE SHOWSTOPPERS: +* mod_proxy: ProxyTimeout (and others) ignored due to not merging + the *_set params. + PR# 11540 + http://svn.apache.org/viewvc?view=revrevision=507516 + (Note: includes some not applicable to 2.0.x) + +1:

Re: [Result] was: [Vote] Graduate mod_ftp (to an httpd subproject)

2007-02-15 Thread William A. Rowe, Jr.
Houston - I believe we have liftoff! [EMAIL PROTECTED] podling Vote Thread Message-ID: [EMAIL PROTECTED] [EMAIL PROTECTED] podling Vote Summary Message-Id: [EMAIL PROTECTED] 4 binding +1 votes (and 1 nonbinding +1) by mod_ftp to exit the incubator as an httpd sub-project. [EMAIL PROTECTED]

mod_ftp, next steps.

2007-02-15 Thread William A. Rowe, Jr.
1. mod_ftp be a httpd sub-project (ala mod_box) http://svn.apache.org/repos/asf/incubator/mod_ftp/trunk/ needs a new home (there are no tags or remaining branches). Can I suggest; http://svn.apache.org/repos/asf/httpd/mod_ftp/trunk/ for the time being? 2. mod_ftp will use the httpd lists

[Fwd: Apache Multiple Injection Vulnerabilities]

2007-02-16 Thread William A. Rowe, Jr.
This is already publicly documented on bugtraq; forwarding here for the benefit of the developers who may not have seen these comments. ---BeginMessage--- There's a new advisory at: http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/apache/index.html Summarizing: 1.- HTTP 404 error

mod_ftp, FINAL steps; closing the lists.

2007-02-16 Thread William A. Rowe, Jr.
1. mod_ftp be a httpd sub-project (ala mod_box) http://svn.apache.org/repos/asf/incubator/mod_ftp/trunk/ It is now *CLOSED* (gone, in fact, if you look in /incubator)... and has a new home (thanks Roy) here: http://svn.apache.org/repos/asf/httpd/mod_ftp/trunk/ To move over your currently

Re: TSU NOTIFICATION - Encryption

2007-02-17 Thread William A. Rowe, Jr.
With the posting of these notifications, and record of the http://www.apache.org/licenses/exports/ - there are no further obstacles to posting http://www.apache.org/dist/httpd/binaries/win32/ apache_2.2.4-win32-x86-openssl-0.9.8d.msi and uncommenting/updating the ! commented out text in

Re: TSU NOTIFICATION - Encryption

2007-02-17 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: I note that Flood refers only to ASF code; if we want to ship a binary for folks to flood their test machines from win32 boxes (including https) we still need to ? ... have an item in our list for flood-0.4+openssl?

Re: svn commit: r508962 - /httpd/mod_ftp/trunk/docs/manual/mod/mod_ftp.xml

2007-02-18 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: Modified: httpd/mod_ftp/trunk/docs/manual/mod/mod_ftp.xml URL: http://svn.apache.org/viewvc/httpd/mod_ftp/trunk/docs/manual/mod/mod_ftp.xml?view=diffrev=508962r1=508961r2=508962 == Binary

Re: Board Report is due on Monday....

2007-02-18 Thread William A. Rowe, Jr.
Paul Querna wrote: Events since November: - next generation aka 'amsterdamn' discussions started W.r.t. Per November report; new sandbox tree created for active experimentation with Apache 3.0 potential directions and proofs-of-concepts, reviewing branches/(existing experiments) to prune or to

Re: svn commit: r509075 - /httpd/httpd/branches/proxy-reqbody-2.0.x/

2007-02-18 Thread William A. Rowe, Jr.
Would the respective committers of these experimental branches please determine if yours 1. are dead (and svn rm them) or 2. are still useful (and svn mv them into /asf/repos/httpd/sandbox/) http://svn.apache.org/viewvc/httpd/httpd/branches/ Branch Revsion Last-Change Committer

ReCap: 2.2.4 windows binary w/ssl?

2007-02-18 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: I'd like to propose we ship apache_2.2.4-win32-x86-openssl-0.9.8d.msi with this release. As such... I'm requesting review and feedback of the first installer package candidate to include ssl... http://httpd.apache.org/dev/dist/apache_2.2.4-win32-x86-openssl

Re: TSU NOTIFICATION - Encryption

2007-02-22 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: NOTIFICATION: http://www.apache.org/licenses/exports/ Something I notice about this page; does it make sense to explode the visible hyperlink under Controlled Source to include the text of the URI, e.g. ASF becomes ASF

Re: TSU NOTIFICATION - Encryption

2007-02-22 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: On Feb 17, 2007, at 4:06 PM, William A. Rowe, Jr. wrote: All US legal obligations are satisfied. Correct? Correct. Thanks for confirmation. Rather than 'push this out' - I've started a dialog (at least, I hope it becomes more than typing into the bitbucket) about

Re: module crashing after upgrade to 2.6 kernel and glibc 2.3.4

2007-02-23 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: Hi, I hv recently upgraded kernel of my box to linux 2.6 and also glibc to 2.3.4. One of my custom apache 2.2 modules which was working earlier fine is crashing now. Anybody faced similar problem? Present a backtrace? Try turning EnableMMAP/EnableSendfile

Re: Regarding NTLM for mod_proxy

2007-02-23 Thread William A. Rowe, Jr.
Devi Krishna wrote: I am trying to get mod_proxy_http to work in pass through mode for NTLM authentication. I see that in apache proxy we dont keep the backend connection persistant. This causes NTLM to fail because on receiving type2 message from client, the proxy forwards this to the

Re: Status of Bug # 39243

2007-03-03 Thread William A. Rowe, Jr.
I'm contemplating an HTTP/1.1-only solution, available only if the client is willing to present expect-header 100-continue, which would involve no buffering. Bill Ruediger Pluem wrote: On 03/03/2007 09:50 PM, Kevin wrote: Hi List- This isn't a support question, so please don't ignore it.

Re: Status of Bug # 39243

2007-03-03 Thread William A. Rowe, Jr.
Nick Kew wrote: On Sat, 03 Mar 2007 17:16:52 -0600 William A. Rowe, Jr. [EMAIL PROTECTED] wrote: I'm contemplating an HTTP/1.1-only solution, available only if the client is willing to present expect-header 100-continue, which would involve no buffering. In principle: +1 if it doesn't

Re: Status of Bug # 39243

2007-03-03 Thread William A. Rowe, Jr.
Kevin wrote: Additionally, I've added the following to the bug report: Sorry. I should have added above that there are no client certificates involved in these uploads. I'm not savvy enough about the internals of either apache or plone to know, but I suppose that means it's possible

Re: Status of Bug # 39243

2007-03-03 Thread William A. Rowe, Jr.
Kevin wrote: Is it your take then, that this problem only manifests itself in a poorly designed web application? If so, I'll pass that along to the plone developers and maybe they need to modify some of their code. That's not what that article, or a host of others, has to say about the

Re: Status of Bug # 39243

2007-03-03 Thread William A. Rowe, Jr.
Kevin wrote: Do I understand correctly from this comment that if a user connects to the site using a client certificate, and if the SSLClientVerify step happens before the attempted post operation, that the problem won't occur? If so, then I should be home free, because with plone, one must

Re: OpenSSL FIPS status

2007-03-05 Thread William A. Rowe, Jr.
Jason Jones wrote: Can I ask what the status is on utilizing OpenSSL's FIPS mode with mod_ssl? No news from me yet - I've just finished helping migrate mod_ftp out of incubation into httpd project, and have one more critical patch to bring it into the 21.1'nd century (EPSV/EPRT

Re: mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread William A. Rowe, Jr.
Trent Nelson wrote: William A. Rowe, Jr. [mailto:[EMAIL PROTECTED]: And I had also just finished the non-ASF release of current mod_aspdotnet code, removing the final nail from that coffin. H, has this been publicized anywhere? Can you point me to its new non-ASF home? Was crossposted

httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
I'm planning to rename http://svn.apache.org/repos/asf/httpd/sandbox/fips-dev/ to http://svn.apache.org/repos/asf/httpd/sandbox/Gaithersburg/ just to prevent anyone from mis-understanding the current state of that sandbox, and follow our newborn place-naming convention. I'm aware of

Re: internal dummy connection again

2007-03-05 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud. Can we avoid this if we replace GET /

Re: internal dummy connection again

2007-03-05 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Ruediger Pluem wrote: On 03/03/2007 05:47 AM, Karl Chen wrote: present. Also other issues like noise in the log file. I've also seen people complaining that GET / might incur the cost of dynamic content generation for /. Hm. Just thinking loud. Can we avoid

Re: httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
Joe Orton wrote: Can you get rid of the branches of apr/apr-util? They have no place in the httpd SVN tree. As 'solving' a build of apache httpd to follow the fips security policy of openssl requires a similarly fips-ified apr/apr-util, I'll leave those in place. When you've svn'ed all the

Re: httpd-fips is not FIPS

2007-03-05 Thread William A. Rowe, Jr.
Sander Temme wrote: +1. No sense confusing anyone with regards to crypto. Why Gaithersburg? http://csrc.nist.gov/ :) A play on the new city name convention, yes.

Re: mod_aspdotnet status? (was RE: OpenSSL FIPS status)

2007-03-05 Thread William A. Rowe, Jr.
James Park (pencil_ethics) wrote: mod_aspdotnet lives! Does this mean I should update my (presently rather dated) patch that provides .NET 2.0 support against the new code? As an aside, I managed to rid the code of that ugly _gcA_gcA_gcString.cs file :) OT :) Yes' would entirely greet anyone

Re: ReCap: 2.2.4 windows binary w/ssl?

2007-03-06 Thread William A. Rowe, Jr.
set OPENSSL_CONF=C:\Program Files\Apache Software Foundation\Apache2.2\conf\openssl.cnf, I get the error message Unable to load config info from C:\Program Files\Apache Software Foundation\Apache2.2\conf\openssl.cnf When I do the set without the double quotes, it works. Ugh. Wrapper time?

Re: httpd-fips is not FIPS

2007-03-08 Thread William A. Rowe, Jr.
Renamed to http://svn.apache.org/repos/asf/httpd/sandbox/gaithersburg/ Someone on irc reminded me that amsterdam was named in lower-case. Bill

Re: cleaned up dist/httpd/binaries

2007-03-09 Thread William A. Rowe, Jr.
Joshua Slive wrote: I just deleted all our binary releases from before 2005 that were sitting in our recommended releases directory. They are, of course, all still available from archive.apache.org. +1 - I offered up that we aught to purge all majorly insecure versions a while back - thank

Re: sed filter module

2007-03-13 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Anyone mind if I fold it into trunk and maybe have us consider making it part of 2.2 (even under experimental)? +1 to trunk! No opinion yet on 2.2 (I'm not a big fan of growing the stable branch since it entirely defeats the drive to release 2.next, ever.) No docs yet

Re: sed filter module

2007-03-13 Thread William A. Rowe, Jr.
Nick Kew wrote: I'm even more confused now, because I thought you were with Covalent, and I understood from Will that mod_line_edit was widely used by clients of Covalent. Please tell me what I'm missing? Just to ensure I'm not misquoted, I know I've suggested mod_line_edit to a few

Re: sed filter module

2007-03-13 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Bill told me about mod_line_edit maybe 3-4 days ago. I had known about mod_proxy_html, which is also something we've pointed clients to, so maybe that's where the confusion comes from. Good point - in my experience mod_proxy_html is much more broadly adopted both by our

Re: sed filter module

2007-03-13 Thread William A. Rowe, Jr.
Jim Jagielski wrote: On Mar 13, 2007, at 1:10 PM, William A. Rowe, Jr. wrote: Is this sed or pcre syntax? I'm a bit confused :) It's a mutant ;) But, of course, we maintain that confusion internally with regex's being pcre... Of course :) But it appears to be a tiny fraction

Re: Compiling module against Apache 2.2.4 on Visual C++ .NET

2007-03-13 Thread William A. Rowe, Jr.
Chris Kukuchka wrote: Hello, I am trying to compile a module against the Apache 2.2.4 codebase using Visual C++ .NET. The compile stops with an error fatal error RC1107: invalid usage. From what I can tell, I am having trouble with the resource compiler not liking some extra quotes. Is

Re: sed and offline

2007-03-15 Thread William A. Rowe, Jr.
Jim Jagielski wrote: I'll be offline most of tomorrow and pretty much the whole weekend. Unless I hear vetos, I'll commit the latest mod_sed_filter.c to trunk. If we change the name, which is fine with me, well... that's the joy of svn move :) I was going to throw in one last beg/ for

Win32 inconsistencies

2007-03-16 Thread William A. Rowe, Jr.
I'd like to propose we make two changes on Win32. 1st; deprecate the Win32DisableAcceptEx directive (axe it entirely from trunk), and change the default to.. AcceptFilter none with options of AcceptFilter ex AcceptFilter data Either form will trigger the AcceptEx code path, the later

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-16 Thread William A. Rowe, Jr.
Nope - it won't. Where does z/OS define the crypt() prototype? The correct patch is to ask APR_HAS_CRYPT (which we need to provide by patching apr, if we don't already.) If APR didn't detect crypt, adding crypt() style p/w's to htdbm, htpasswd etc will still be a noop. Bill David Jones wrote:

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-16 Thread William A. Rowe, Jr.
Jeff Trawick wrote: APR doesn't pretend to figure out for APR apps exactly what the system provides, though there is currently a spotty set of APR_HAS_foo. Meanwhile, httpd goes and searches on its own for things APR doesn't tell anyone about. I'm curious about other opinions on whether

Re: 2.2.4 windows binary w/ssl?

2007-03-16 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: William A. Rowe, Jr. wrote: I'd like to propose we ship apache_2.2.4-win32-x86-openssl-0.9.8d.msi with this release. Couple of notes... Did anyone else have feedback on the comments/notes? I know Roy's made some additional progress with the notification

Re: ReCap: 2.2.4 windows binary w/ssl - server certificates

2007-03-16 Thread William A. Rowe, Jr.
Marc Stern wrote: For info, I developed for the Belgian government, a reverse proxy installation script (Unix/Windows) that encompasses a certificate creation, and its registration in the config file. This uses gawk. It is available on

Re: ReCap: 2.2.4 windows binary w/ssl?

2007-03-16 Thread William A. Rowe, Jr.
Sander Temme wrote: On Mar 6, 2007, at 3:56 PM, William A. Rowe, Jr. wrote: Don't know about the shm session cache. Otherwise, the quotation issues are fairly minor. I see that in trunk on unix we quote paths, and in extra/httpd-ssl.conf we don't. Time to rigorously quote every path

Re: 2.2.4 windows binary w/ssl?

2007-03-16 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: On Mar 16, 2007, at 2:48 PM, William A. Rowe, Jr. wrote: William A. Rowe, Jr. wrote: William A. Rowe, Jr. wrote: I'd like to propose we ship apache_2.2.4-win32-x86-openssl-0.9.8d.msi with this release. Couple of notes... Did anyone else have feedback

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-20 Thread William A. Rowe, Jr.
/ resolution? David Jones -- [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] On 3/16/07, *Jeff Trawick* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: On 3/16/07, William A. Rowe, Jr. [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Jeff Trawick wrote: APR doesn't

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-20 Thread William A. Rowe, Jr.
Jeff Trawick wrote: On 3/20/07, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: httpd does not ;-) httpd the project (vs. apr, apr-util), not httpd the program (vs. htdbm, htpasswd) as in In httpd, we don't call crypt(), we call APR... So... what I suggest is; 1. use the same test from

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-20 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Jeff Trawick wrote: On 3/20/07, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: httpd does not ;-) httpd the project (vs. apr, apr-util), not httpd the program (vs. htdbm, htpasswd) as in In httpd, we don't call crypt(), we call APR... So... what I suggest

More descriptive mod_ssl/OpenSSL version logging

2007-03-20 Thread William A. Rowe, Jr.
httpd was patched for httpd -v some time ago to report both the compiled and loaded versions of apr[-util]. I'd like to get this into trunk/2.2/2.0 similarly for openssl. It's very common for users to hotfix openssl for security vulnerabilities, but the apache error log remains 'scary' to

[PATCH]es More descriptive mod_ssl/OpenSSL version logging

2007-03-20 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: httpd was patched for httpd -v some time ago to report both the compiled and loaded versions of apr[-util]. I'd like to get this into trunk/2.2/2.0 similarly for openssl. It's very common for users to hotfix openssl for security vulnerabilities, but the apache

Re: [PATCH]es More descriptive mod_ssl/OpenSSL version logging

2007-03-20 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: William A. Rowe, Jr. wrote: httpd was patched for httpd -v some time ago to report both the compiled and loaded versions of apr[-util]. I'd like to get this into trunk/2.2/2.0 similarly for openssl. It's very common for users to hotfix openssl for security

Re: 2.2.4 windows binary w/ssl?

2007-03-22 Thread William A. Rowe, Jr.
Guenter Knauf wrote: I've heard from a couple of users that they prefer *.zip archives rather than the *.msi files; and hacked a WSH script to fix the config files when using a zip distribution. Should we add a cert-creation .sh and .vbs script to support/ for this purpose (on any platform)?

Re: [PROPOSAL] use of SVN $id keyword

2007-03-22 Thread William A. Rowe, Jr.
Roy T. Fielding wrote: On Mar 22, 2007, at 9:19 AM, Guenter Knauf wrote: I would find it useful to have the SVN revision info in the head of the sources; No, that is not going to happen. Id tags make it extremely hard to manage collaborative development across multiple subversion trees,

Re: 2.2.4 windows binary w/ssl?

2007-03-22 Thread William A. Rowe, Jr.
Sander Temme wrote: On Mar 22, 2007, at 12:22 PM, William A. Rowe, Jr. wrote: Guenter Knauf wrote: I've heard from a couple of users that they prefer *.zip archives rather than the *.msi files; and hacked a WSH script to fix the config files when using a zip distribution. Should we add

Re: mod_ftp, status and progress?

2007-03-23 Thread William A. Rowe, Jr.
Niklas Edmundsson wrote: * Play well with mod_cache, if a file has been requested with HTTP a FTP request should reuse the cached copy. Last time I checked mod_ftp only did subrequests which mod_cache didn't act on. In terms of using 'top level' requests in lieu of subrequests, it's not

Re: PATCH: support utilities should enable crypt() , current htdbm checks broken

2007-03-23 Thread William A. Rowe, Jr.
David Jones wrote: ok here's the simple patch at the 2.0.x level that just checks platforms for htdbm.c Also appended is the semi-related patch for htpasswd.c that adds TPF to the platforms checked in 2 cases where its missed, which seems like an oversight. +1

s/mod_sed_filter/mod_rewrite_body/ ?

2007-03-26 Thread William A. Rowe, Jr.
Rational 1. sed is a Turing complete language, this module does not attempt to be. http://sed.sourceforge.net/grabbag/scripts/turing.txt 2. filter has become implicit; any module handling the request body contents in cooperation with other modules is a filter. 3. 's'tream'ed'itor filter

Re: i18n support

2007-03-26 Thread William A. Rowe, Jr.
I know of no restrictions on a unix-like system that would interfere with choosing any arbitrary charset. Your post doesn't actually describe what problem you observed after setting LANG=de_DE.ISO-8859-1. Michael B Allen wrote: No one has an answer for this? On Sun, 25 Mar 2007 15:09:42

Re: mod_ftp, status and progress?

2007-03-27 Thread William A. Rowe, Jr.
Guenter Knauf wrote: Hi, is it possible that with your last commit changes you forgot to update mod_ftp.h too? Feh - yup. My bad - thanks! also want to ask if it is ok when I add NetWare makefiles? Be our guest :) Keep it mind it's ment to be built against installed httpd, or built in

Meaning of man/man8/?

2007-03-28 Thread William A. Rowe, Jr.
The man8/ directory doesn't seem appropriate for the current contents we install. Notably, ab and logresolve are certainly not dedicated to the role of httpd, but are independently useful binaries. Beyond that, apxs doesn't seem to quite fit that role. ab.8apxs.8 httpd.8

[Fwd: iDefense Final Notice [IDEF1445]]

2007-03-28 Thread William A. Rowe, Jr.
Not acked. ---BeginMessage--- To whom it may concern, The attached advisory and email was originally submitted on Feb 08, 2006, but a response has not yet been received. In accordance with our vendor disclosure policy (http://labs.idefense.com/legal.php#disclosure) we will proceed with

Re: [Fwd: iDefense Final Notice [IDEF1445]]

2007-03-28 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Not acked. Acked now. Bloody Hell

Re: [Fwd: iDefense Final Notice [IDEF1445]]

2007-03-28 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Not acked. Well, I've notified Joshua of our inadvertent disclosure, and welcome dev@ feedback and analysis of the specifics in the report (w.r.t. 1.3, 2.0, and/or 2.2). We've committed to provide him some update by tomorrow afternoon, as they would love to publish 1

Re: [Fwd: iDefense Final Notice [IDEF1445]]

2007-03-28 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: dev@ feedback and analysis of the specifics in the report (w.r.t. 1.3, 2.0, and/or 2.2). quote At line #500 of the suexec utility, a strncmp() is used to check whether the current directory is a subdirectory of the document root directory. This check will succeed

Re: Meaning of man/man8/?

2007-03-29 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: On 03/29/2007 12:57 PM, Martin Kraemer wrote: Together with the decision for .8 vs. .1, I suggest to adapt the sbin/ vs. bin/ installation directories. Traditionally, these user programs were installed in sbin/ too; but IMO binaries for general interest should go to

Re: Meaning of man/man8/?

2007-03-29 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: Ok, I think you are right and they have mixed usage. Compiling a module would be done by a user whereas installing it might be a task reserved to root. Would it make sense to move ap[ru]-1-config and apxs to build/? AFA apxs is concerned; IMHO, no. The user wants to

<    1   2   3   4   5   6   7   8   9   10   >