Bug 57641

2015-06-11 Thread Nick Gearls
Hi all, Can anybody have a look at this trivial bug waiting for months? The bug is obvious and the fix is a one line change. Thanks a lot

Roll 2.2.30 in conjunction with 2.4.14

2015-06-11 Thread Steffen
Not so happy to roll 2.2.30 in conjunction with 2.4.14. It does not stimulate pp to upgrade to 2.4., it suggest that the httpd-project gives 2.2 (legacy) the same priority as 2.4. Better first 2.4 and after some time 2.2. I do not agree with the argument to simplify the announcement. From:

Re: httpd 2.4 and windows hangs and AcceptFilter solution

2015-06-11 Thread William A Rowe Jr
On Thu, Jun 11, 2015 at 8:48 AM, Andy Wang aw...@ptc.com wrote: Pleading windows ignorance here, but what kind of permissions problem? Both processes are elevated to administrator via UAC (or with UAC disabled) and literally as soon as you kill the parent java.exe process, it starts to work.

Re: SNI Host: header mismatch

2015-06-11 Thread Stefan Eissing
Two things: 1. the minimal thing to fix the situation is to return 421 instead of 400. H2 clients will then open a new TLS connection for the request host. I don't know if this breaks any HTTP/1 clients, however it should not. 2. Given that we answer not matching combinations with 421, the

Re: SNI Host: header mismatch

2015-06-11 Thread Yann Ylavic
On Thu, Jun 11, 2015 at 4:33 PM, Stefan Eissing stefan.eiss...@greenbytes.de wrote: Two things: 1. the minimal thing to fix the situation is to return 421 instead of 400. H2 clients will then open a new TLS connection for the request host. I don't know if this breaks any HTTP/1 clients,

Re: SNI Host: header mismatch

2015-06-11 Thread Stefan Eissing
Yes, it will work with the cert checks, not without. Sorry, if that was confusing. Am 11.06.2015 um 17:56 schrieb Yann Ylavic ylavic@gmail.com: On Thu, Jun 11, 2015 at 4:33 PM, Stefan Eissing stefan.eiss...@greenbytes.de wrote: Two things: 1. the minimal thing to fix the

Re: httpd 2.4 and windows hangs and AcceptFilter solution

2015-06-11 Thread Andy Wang
On 06/11/2015 09:02 AM, William A Rowe Jr wrote: Sounds telling. Can you get your installer to stall without invoking httpd.exe - and then attempt to start httpd outside of the installer on the same machine? Something going on within the installer may be interacting with the winsock stack.

Re: [VOTE] Release Apache httpd 2.4.14 as GA

2015-06-11 Thread Rainer Canavan
Hi, is the commit message incorrect or the CHANGES file concerning CVE-2015-3183? The commit message at https://github.com/apache/httpd/commit/cd2b7a26c776b0754fb98426a67804fd48118708 uses CVE-2015-3183 for the Replacement of ap_some_auth_required, while the CHANGES uses it for Remove

Re: httpd 2.4 and windows hangs and AcceptFilter solution

2015-06-11 Thread William A Rowe Jr
On Thu, Jun 11, 2015 at 11:09 AM, Andy Wang aw...@ptc.com wrote: On 06/11/2015 09:02 AM, William A Rowe Jr wrote: Sounds telling. Can you get your installer to stall without invoking httpd.exe - and then attempt to start httpd outside of the installer on the same machine? Something going

Re: [VOTE] Release Apache httpd 2.4.14 as GA

2015-06-11 Thread William A Rowe Jr
This is corrected in SVN, see http://svn.apache.org/viewvc/httpd/httpd/trunk/server/request.c?view=log Unsure why this edit didn't carry on to the github mirror. On Thu, Jun 11, 2015 at 11:50 AM, Rainer Canavan rainer.cana...@sevenval.com wrote: Hi, is the commit message incorrect or the

Re: httpd 2.4 and windows hangs and AcceptFilter solution

2015-06-11 Thread Andy Wang
On 06/11/2015 12:54 PM, William A Rowe Jr wrote: On Thu, Jun 11, 2015 at 11:09 AM, Andy Wang aw...@ptc.com mailto:aw...@ptc.com wrote: On 06/11/2015 09:02 AM, William A Rowe Jr wrote: Sounds telling. Can you get your installer to stall without invoking

Re: Notice: Intent to TR 2.4.14 June 11 (Thurs)

2015-06-11 Thread Jim Jagielski
Thx! On Jun 11, 2015, at 9:14 AM, Yann Ylavic ylavic@gmail.com wrote: Promoted in r1684879. On Thu, Jun 11, 2015 at 2:56 PM, Jim Jagielski j...@jagunet.com wrote: It would be great to include: http://svn.apache.org/r1667386 in this. On Jun 10, 2015, at 7:35 PM, Jim

Re: Notice: Intent to TR 2.4.14 June 11 (Thurs)

2015-06-11 Thread Jim Jagielski
It would be great to include: http://svn.apache.org/r1667386 in this. On Jun 10, 2015, at 7:35 PM, Jim Jagielski j...@jagunet.com wrote: Subj sez it all.

Re: Notice: Intent to TR 2.4.14 June 11 (Thurs)

2015-06-11 Thread Yann Ylavic
Promoted in r1684879. On Thu, Jun 11, 2015 at 2:56 PM, Jim Jagielski j...@jagunet.com wrote: It would be great to include: http://svn.apache.org/r1667386 in this. On Jun 10, 2015, at 7:35 PM, Jim Jagielski j...@jagunet.com wrote: Subj sez it all.

Re: Roll 2.2.30 in conjunction with 2.4.14

2015-06-11 Thread Eric Covener
On Thu, Jun 11, 2015 at 9:08 AM William A Rowe Jr wr...@rowe-clan.net wrote: But withholding a security fix for legacy server users? Sounds like a way to earn distrust of the user community, not reassure them that 2.4.14 is the best version available. +1

Re: Roll 2.2.30 in conjunction with 2.4.14

2015-06-11 Thread William A Rowe Jr
I believe the opposite, that the announcement 2.4 contains enhancements, bug fixes, and security fixes, and 2.2 legacy containing security fixes will set user expectations. A later 2.2 announce muddies the waters when users ponder if it is 'current' and sufficient. We have language in both files

Re: httpd 2.4 and windows hangs and AcceptFilter solution

2015-06-11 Thread Andy Wang
On 06/10/2015 09:46 PM, William A Rowe Jr wrote: On Wed, Jun 10, 2015 at 4:12 PM, Andy Wang aw...@ptc.com mailto:aw...@ptc.com wrote: I can reproduce the first case with the installer, pretty much ondemand using our installer stuff. I've tried reproducing it by ripping out the

Re: [VOTE] Release Apache httpd 2.4.14 as GA

2015-06-11 Thread Noel Butler
On 12/06/2015 00:08, Jim Jagielski wrote: I'm calling a VOTE on releasing these as Apache httpd 2.4.14 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will Robinson. And why. -1 The SSLCertificateChainFile directive () is deprecated, SSLCertificateFile should be used instead The