Bug#1000627: apache2: missing dependency setting

2022-12-02 Thread Hendrik Jäger
Control: tags -1 upstream

Hi

On Fri, 3 Jun 2022 23:53:50 +0200 Michael Biebl  wrote:
> I'd like to refer to https://systemd.io/NETWORK_ONLINE/ as well.
> Especially to "Should network-online.target be used?" which suggest 
> better and more robust options then using network-online.target

AFAICT there is an upstream bugreport for implementing IP_FREEBIND:
https://bz.apache.org/bugzilla/show_bug.cgi?id=58725
This seems to have already been implemented, at least in 2.5/trunk:
https://httpd.apache.org/docs/trunk/mod/mpm_common.html#listen

Since this bug only occurs when the user specifies an IP address to listen on, 
our default config is not affected AFAIU.
So the easiest way to fix this bug is to wait and maybe add a comment before 
the default 'Listen' directives to add the freebind option when changing the 
'Listen' to a specific IP address.
This can only be done once we package a release containing that option, though.

In the meantime the only workaround seems to be to wait for the 
network-online.target but since this is not necessary for the stock config, I 
don’t really want to do that.



Bug#1004275: php upgrade apache2: After upgrade php install apache2 and i have intalled lighttpd

2022-12-02 Thread Hendrik Jäger
Control: tags -1 moreinfo
Control: reassign php

Hi

Thank you for your report.

On Mon, 24 Jan 2022 01:33:24 +0100  wrote:
> After apt update & upgrade a new php update appear but the upgrade also 
> installed apache2.

Can you provide a log of your commands and outputs?
Which php package(s) were updated from which version to which version?

> I am running lighttpd server and apache2 it's not neccesary on my system.

Makes sense. Which version of lighthttpd is installed?

I’m reassigning this package to php, exclusively, because I don’t think any 
change in the apache2 package(s) can fix the issue.

Cheers

henk



Bug#714083: default-ssl.conf should also be prefixed with 000- to be sure to be first ssl virtualhost

2022-12-02 Thread Hendrik Jäger
Control: retitle -1 default-ssl.conf should also be prefixed with 000- to be 
sure to be first ssl virtualhost
Control: severity -1 normal
Control: tags -1 help

Increased severity because this does easily cause problems, unexpected 
behaviour, confusion, and support requests when an ssl vhost is put in a config 
with a filename that is sorted before 'default-ssl.conf', e.g. 
'custom-vhost.conf' or 'a-vhost.conf'.

There is already a pull request [1] that was already merged but then reverted 
because changing this config file’s name is not trivial and I had not thought 
of how to do this migration on productive systems.
Concrete questions are:
* how to deal with this on all variations of systems
** unchanged, not activated (will dpkg/ucf/whatever-handles-these-config-files 
do the right thing? I guess the old file will be removed and the new file 
placed, but how to be certain?)
** changed, not activated (what do we do? move the existing file? remove it, 
install the new?)
** unchanged, activated (similar to first variant, but how to deal with the 
symlink in sites-enabled/?)
** changed, activated (do we even do anything in this case or just assume that 
it’s working as intended and leave the admin to it?)

Concrete suggestions, patches, references to relevant docs, merge requests, 
etc. welcome!

Cheers

henk



Bug#745605: please retest

2022-12-02 Thread Hendrik Jäger
Control: tags -1 -fixed-upstream

It seems this bugreport was tagged 'fixed-upstream' automatically after the 
upstream bug was closed automatically due to age or inactivity.

AFAICT the bug is not fixed, the change proposed in [1] / [2] does not seem to 
be applied, see [3].

Someone would need to retest this (as described in upstream’s bugtracker’s 
closing comment), report back, and depending on result either close this bug or 
reopen upstream’s bug; or alternatively provide a minimal example how to 
reproduce it for someone else to test.

Thanks!

[1]: https://bz.apache.org/bugzilla/show_bug.cgi?id=35049#c1
[2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=745605#55
[3]: 
https://svn.apache.org/viewvc/httpd/httpd/trunk/server/protocol.c?view=markup#l80