[RESULT][VOTE] Release httpd-2.4.39

2019-03-30 Thread Daniel Ruggeri
Hi, all;
   I am pleased to report that the vote has PASSED with the following
recorded votes:
+1: jorton, icing, jim, ylavic, covener, rjung, druggeri
+0: cjaillet (apparent test system issue)

Thanks to everyone who took the time to test and vote as well as the
work that went into the release itself!
I shall forthwith begin the distribution of the release tarball to the
mirrors.

-- 
Daniel Ruggeri

On 3/27/2019 10:09 AM, Daniel Ruggeri wrote:
> Hi, all;
>    Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.39:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
> sha256:
> 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30
> *httpd-2.4.39.tar.gz
>


Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Daniel Ruggeri


On 3/27/2019 10:09 AM, Daniel Ruggeri wrote:
> Hi, all;
>    Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.39:
> [X] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
> sha256:
> 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30
> *httpd-2.4.39.tar.gz
>

+1 from me with the following test system:


  kernel:
    name: Linux
    release: 4.9.0-8-amd64
    version: #1 SMP Debian 4.9.144-3 (2019-02-02)
    machine: x86_64

  libraries:
    openssl: "1.1.1a"
    openldap: "2.4.47"
    apr: "1.6.5"
    apr-util: "1.6.1"
    iconv: "1.2.2"
    brotli: "1.0.7"
    nghttp2: "1.35.1"
    zlib: "1.2.11"
    pcre: "8.42"
    libxml2: "2.9.9"
    php: "7.3.3"
    lua: "5.3.5"
    curl: "7.63.0"

-- 
Daniel Ruggeri



Re: [Bug 60757] mod_proxy_hcheck Doesn't perform checks

2019-03-30 Thread Rainer Jung

Hi Jean-Frederic,

Am 14.02.2019 um 09:15 schrieb root:

https://bz.apache.org/bugzilla/show_bug.cgi?id=60757

jfclere  changed:

What|Removed |Added

  Status|NEEDINFO|RESOLVED
  Resolution|--- |FIXED

--- Comment #20 from jfclere  ---
Fixed by r1853560 in trunk, will propose a back port later.


did you plan to propose that backport? r1853560 and the unrelated 
r1853992 (same file) have not been backported yet.


Regards,

Rainer



Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Rainer Jung

Am 27.03.2019 um 16:09 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.39:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
sha256: 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30 
*httpd-2.4.39.tar.gz


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)


- not tested but still expected to happen: problems with prefork plus 
mod_ext_filter plus LimitRequestBody  on Solaris (not a regression)


Detailed report:

- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
  except for expected deltas

Built on

- Solaris 10 Sparc as 32 Bit Binaries
- SLES 11+12 (64 Bits)
- RHEL 6+7 (64 Bits)

For all platforms built

- with default (shared) and static modules
- with module set reallyall
- using --enable-load-all-modules
- against external APR/APU 1.6.5/1.6.1

- using external libraries
  - expat 2.2.6
  - pcre 8.43
  - lua 5.3.5 (compiled with LUA_COMPAT_MODULE)
  - distcache 1.5.1
  - libxml2 2.9.9
  - libnghttp2 1.37.0
  - brotli 1.0.7
  - curl 7.64.1
  - jansson 2.12
and
  - openssl 0.9.8zh, 1.0.2, 1.0.2r plus patches (head), 1.0.1e, 1.0.1j 
plus patches (head), 1.1.1, 1.1.1b plus patches (head)


- Tool chain:
- platform gcc except on Solaris
  (gcc 8.2.0 Solaris 10)
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing
  - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE,
-D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__
and -D_XPG6

All of the 126 builds succeeded.

- compiler warnings: none

Tested for

- Solaris 10, SLES 11+12, RHEL 6+7
- MPMs prefork, worker, event
- default and static module builds
- log level trace8
- module set reallyall
  - for "reallyall" 129 modules plus MPMs
- Perl client bundle build against OpenSSL 1.1.1, 1.1.0i, 1.0.2p and 0.9.8zh
- OpenSSL once linked statically and once as a shared library

Every OpenSSL version in the client tested with every version in the 
server, not just the same version.


The total number of test suite runs was 1366 (plus some on Solaris still 
running, the whole suite hasn't finished yet, but enough to come up with 
a clear expectation).


The following test failures were seen:

a Crashes only on Solaris and only with event MPM and static builds.
  The crash seems to happen only at the end of a process, likely due
  to double cleanup of the various OpenSSL instances that are
  contained in the process.

b Tests 4, 8 and 12 of t/modules/buffer.t
  Not a regression
  Relatively frequent (725) failures on all platforms for all OpenSSL
  client and server versions.
  See earlier list discussions about buffer.t.

c Various tests in t/apache/expr_string.t
  Not a regression.
  Test numbers : 6, 11, 14, 17, 20, 23, 26, 29
  Happens for 61 out of about 1350 runs
  (4 times on SLES 11, 2 times on Solaris 10,
   otherwise always on RHEL6).
  The failure is always on line 87, where the error_log contents
  are checked. Could be due to logs written to NFS.

d Test 5 in t/modules/dav.t:
  Not a regression.
  once RHEL 6 and once SLES 11
  Creation, modified and now times not in the correct order.
  This seems to be a system issue, all tests done on NFS,
  many tested on virtualized guests.

e Test 54 in t/modules/cgi.t line 232:
  Not a regression
  8 times once Solaris
  Test checks log contents. Could be false positive due to
  logs written to NFS.

Regards,

Rainer


Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Christophe JAILLET

Le 29/03/2019 à 23:57, Yann Ylavic a écrit :

On Fri, Mar 29, 2019 at 10:53 PM Marion & Christophe JAILLET
 wrote:

Could others confirm that they have tested with 'prefork' and that they
don't have any issue?

No issue here with the somewhat similar Debian 10 / gcc-8.3 /
libssl-1.1.1b. I don't have my older Debian(s) at hand as of now to
test multiple times like a just did with Debian 10, but I tested
prefork on them at least once yesterday with no issue either...

What the core files say?

For some unknown (and forgotten) reason, I was using -DNO_USE_SIGACTION 
when calling ./configure.

I've removed it, re-confed, re-builf, re-tested:

t/modules/ratelimit.t ... 1/3 [  error] oh jeez, server 
dumped core
[  error] for stacktrace, run: gdb /home/tititou36/httpd-2.4/bin/httpd 
-core /home/tititou36/svn_test_framework/t/core



Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50    ../sysdeps/unix/sysv/linux/raise.c: Aucun fichier ou dossier de ce 
type.





t/TEST t/ssl/

t/ssl/varlookup.t .. 81/83 [  error] oh nuts, server dumped core
[  error] for stacktrace, run: gdb /home/tititou36/httpd-2.4/bin/httpd 
-core /home/tititou36/svn_test_framework/t/core


with same kind of code dump.



I won't investigate further for now.

CJ



Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Christophe JAILLET

Le 29/03/2019 à 23:57, Yann Ylavic a écrit :

On Fri, Mar 29, 2019 at 10:53 PM Marion & Christophe JAILLET
 wrote:

Could others confirm that they have tested with 'prefork' and that they
don't have any issue?

No issue here with the somewhat similar Debian 10 / gcc-8.3 /
libssl-1.1.1b. I don't have my older Debian(s) at hand as of now to
test multiple times like a just did with Debian 10, but I tested
prefork on them at least once yesterday with no issue either...

What the core files say?


I'm using OpenSSL 1.1.1  11 Sep 2018


First core:
==
t/ssl/varlookup.t .. 62/83 [  error] oh dangit, server dumped core

Reading symbols from /home/tititou36/httpd-2.4/bin/httpd...done.
[New LWP 8889]
[New LWP ]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/tititou36/httpd-2.4/bin/httpd -d 
/home/tititou36/svn_test_framework/t -f'.

Program terminated with signal SIGABRT, Aborted.
#0  0x7fa096abbf97 in __GI___select (nfds=0, readfds=0x0, 
writefds=0x0, exceptfds=0x0, timeout=0x7fa08fe8bdf0)

    at ../sysdeps/unix/sysv/linux/select.c:41
41    ../sysdeps/unix/sysv/linux/select.c: Aucun fichier ou dossier de 
ce type.

[Current thread is 1 (Thread 0x7fa08fe8c700 (LWP 8889))]


2nd core:
=
t/ssl/varlookup.t .. 73/83 [  error] oh dangnabit, server dumped core

Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50    ../sysdeps/unix/sysv/linux/raise.c: Aucun fichier ou dossier de ce 
type.

[Current thread is 1 (Thread 0x7f97e7893780 (LWP 12554))]


3rd try:
===
t/ssl/varlookup.t .. 57/83 [  error] oh golly, server dumped core

Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50    ../sysdeps/unix/sysv/linux/raise.c: Aucun fichier ou dossier de ce 
type.

[Current thread is 1 (Thread 0x7fb951610780 (LWP 13210))]


4th try:
===
t/TEST --clean
t/TEST

t/modules/ratelimit.t ... 1/3 [  error] oh darn, server 
dumped core
[  error] for stacktrace, run: gdb /home/tititou36/httpd-2.4/bin/httpd 
-core /home/tititou36/svn_test_framework/t/core


Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50    ../sysdeps/unix/sysv/linux/raise.c: Aucun fichier ou dossier de ce 
type.

[Current thread is 1 (Thread 0x7f5d15630780 (LWP 16109))]


I won't have time this WE to dig on it and I'm on travel next week, so 
if no one sees an issue with 'prefork', consider that it is likely 
related to my test environment.


CJ