Re: SSL client certificate extensions requirements backport

2007-12-19 Thread Yann
Dr Stephen Henson wrote: Yann wrote: Hi, The joined patch allows the use of client certificate extensions values (by long/short name or OID) in the mod_ssl/SSLRequire directive. This functionnality is available in the 2.2.x and trunk branches but hasn't been backported in the 2.0.61, while

Re: [RFC] Apache Privilege Separation for WebDAV (now against 2.2.6)

2007-12-19 Thread Paul Querna
Michael Clark wrote: Hi Folks, I posted a note about my privilege separation patches the other day and received some good private help/feedback, and have now made the patches a considerable amount more portable and they are using apr much more extensively. The patch is now fully modular and

Re: SSL client certificate extensions requirements backport

2007-12-19 Thread Dr Stephen Henson
Yann wrote: The changes regarding X509V3_EXT_print() seems more problematic since the extensions values are used in string comparison (strcmp and likes), hence the human readable version, and the code is actually shared with the other expressions of the SSLRequire directive. Well the

Re: [VOTE] initial release of httpd-mod_ftp-0.9.0

2007-12-19 Thread Takashi Sato
I'm not good at English. If you can't catch what I say, please see the attached patch. This doesn't have to meet 0.9.1, but may affect performance. modules/ftp/ftp_message.c line 53: strncpy(outptr, time_str, outlen); if (outlen APR_CTIME_LEN - 1) {

Re: randomized request for apache benchmark

2007-12-19 Thread Guy Ferraiolo
That's what I've got diff -urN, plain text. I'll be sending this on in a few hours. Guy On Tue, 2007-12-18 at 21:06 -0600, William A. Rowe, Jr. wrote: Guy Ferraiolo wrote: I'm ready to do this tomorrow and I have asked this question before but so long ago I dont' recall. I have a patch

Re: SSL client certificate extensions requirements backport

2007-12-19 Thread Victor Wagner
On 2007.12.19 at 10:10:54 +0100, Yann wrote: The changes regarding X509V3_EXT_print() seems more problematic since the extensions values are used in string comparison (strcmp and likes), hence the human readable version, and the I hope that saying human readable you mean utf-8? I'd say that

Re: SSL client certificate extensions requirements backport

2007-12-19 Thread William A. Rowe, Jr.
Victor Wagner wrote: On 2007.12.19 at 10:10:54 +0100, Yann wrote: The changes regarding X509V3_EXT_print() seems more problematic since the extensions values are used in string comparison (strcmp and likes), hence the human readable version, and the I hope that saying human readable you

flood random substitution patch

2007-12-19 Thread Guy Ferraiolo
Folks Attached is a patch that implements a random substitution feature for flood. You need a requesttemplate, one or more substitution variables of the form ${varname) in the requesttemplate and a substitution file formatted with one value per newline delimited line. There may be more than one

Re: time for 1.3.40 and 2.2.7 ?

2007-12-19 Thread Guenter Knauf
Hi, On Dec 14, 2007, at 12:52 PM, William A. Rowe, Jr. wrote: Jim Jagielski wrote: Anyone opposed to us shooting for a TR early next week? If we can get a couple of security-related-but-not-really patches committed to 2.0 I'd like to see that as well. I'm offering, Sure... that would be

Re: time for 1.3.40 and 2.2.7 ?

2007-12-19 Thread William A. Rowe, Jr.
Guenter Knauf wrote: Hi, On Dec 14, 2007, at 12:52 PM, William A. Rowe, Jr. wrote: Jim Jagielski wrote: Anyone opposed to us shooting for a TR early next week? If we can get a couple of security-related-but-not-really patches committed to 2.0 I'd like to see that as well. I'm offering,

Re: [VOTE] initial release of httpd-mod_ftp-0.9.0

2007-12-19 Thread William A. Rowe, Jr.
Takashi Sato wrote: apr_cpystrn is better. Agreed. FYI - it's easier to follow if you change the subject and prefix that subject with [PATCH] when you offer these up :) Committed and thanks! Bill

Re: [RFC] Apache Privilege Separation for WebDAV (now against 2.2.6)

2007-12-19 Thread Michael Clark
Paul Querna wrote: Michael Clark wrote: Hi Folks, I posted a note about my privilege separation patches the other day and received some good private help/feedback, and have now made the patches a considerable amount more portable and they are using apr much more extensively. The patch is now

[STATUS] (httpd-2.0) Wed Dec 19 23:46:27 2007

2007-12-19 Thread Rodent of Unusual Size
APACHE 2.0 STATUS: -*-text-*- Last modified at [$Date: 2007-12-18 22:52:08 -0500 (Tue, 18 Dec 2007) $] The current version of this file can be found at: * http://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x/STATUS Documentation status is

[STATUS] (httpd-trunk) Wed Dec 19 23:50:38 2007

2007-12-19 Thread Rodent of Unusual Size
APACHE 2.3 STATUS: -*-text-*- Last modified at [$Date: 2007-12-03 15:06:37 -0500 (Mon, 03 Dec 2007) $] The current version of this file can be found at: * http://svn.apache.org/repos/asf/httpd/httpd/trunk/STATUS Documentation status is maintained