Re: processing HEAD request with Etag: set

2007-12-20 Thread Nick Kew
On Thu, 20 Dec 2007 14:31:37 -0800 Mark Harrison [EMAIL PROTECTED] wrote: Suppose I have a request with an Etag: that matches the current file. On a GET, then of course that should return a 304 Not Modified. On a HEAD, should it return a 304, or a 200 OK? If GET returns 304, then so does

Re: time for 1.3.40 and 2.2.7 ?

2007-12-20 Thread Guenter Knauf
Hi, any chance we can get this simple patch in to correct a type mismatch which bothers me all the time when compiling with OpenSSL 0.9.8 on NetWare? http://people.apache.org/~fuankg/diffs/ssl_scache_shmht.c.diff --- ssl_scache_shmht.c.orig Wed Jul 12 09:40:56 2006 +++ ssl_scache_shmht.c

Re: SSL client certificate extensions requirements backport

2007-12-20 Thread Victor Wagner
On 2007.12.19 at 11:40:32 -0600, William A. Rowe, Jr. wrote: Victor Wagner wrote: On 2007.12.19 at 10:10:54 +0100, Yann wrote: The changes regarding X509V3_EXT_print() seems more problematic since the extensions values are used in string comparison (strcmp and likes), hence the human

Re: SSL client certificate extensions requirements backport

2007-12-20 Thread Dr Stephen Henson
Victor Wagner wrote: On 2007.12.19 at 11:40:32 -0600, William A. Rowe, Jr. wrote: Victor Wagner wrote: On 2007.12.19 at 10:10:54 +0100, Yann wrote: The changes regarding X509V3_EXT_print() seems more problematic since the extensions values are used in string comparison (strcmp and

Re: SSL client certificate extensions requirements backport

2007-12-20 Thread Victor Wagner
On 2007.12.20 at 13:53:12 +, Dr Stephen Henson wrote: Yes I noticed mod_ssl uses the obsolete X509_NAME_oneline() function all over the place. Problem is that it was written long time ago, when no better way exist. Someone have to go over the code and change it to more modern API. And

Re: SSL client certificate extensions requirements backport

2007-12-20 Thread Dr Stephen Henson
Victor Wagner wrote: On 2007.12.20 at 13:53:12 +, Dr Stephen Henson wrote: Yes I noticed mod_ssl uses the obsolete X509_NAME_oneline() function all over the place. Problem is that it was written long time ago, when no better way exist. Someone have to go over the code and change it to

Re: svn commit: r605396 - /httpd/httpd/branches/2.2.x/support/httxt2dbm.c

2007-12-20 Thread Ruediger Pluem
On 12/19/2007 04:02 AM, [EMAIL PROTECTED] wrote: Author: wrowe Date: Tue Dec 18 19:02:57 2007 New Revision: 605396 URL: http://svn.apache.org/viewvc?rev=605396view=rev Log: Handle args appropriately for an apr app. Backports r605395 Modified:

Re: [VOTE] initial release of httpd-mod_ftp-0.9.0

2007-12-20 Thread Niklas Edmundsson
On Tue, 18 Dec 2007, William A. Rowe, Jr. wrote: On the positive side, the thing builds on both Linux and AIX (out of tree, for httpd 2.2.6). I'll await the 0.9.1 tag before doing more elaborate tests though. Trunk should also be stable now, if you want to take a crack at that before the

Re: Integrity of Apache source code

2007-12-20 Thread Ian Holsman
While open source is fantastic, and provides highly visible means. It can still be hacked. I can describe what has happened in this case: 1. joe hacker hacks one of the 'open source groups' machines. at this point he is assumed to have access to the source code repository. 2. assume he

Re: Integrity of Apache source code

2007-12-20 Thread Guy Ferraiolo
One point to consider is that if you are concerned about this you can audit any changes. Guy On Thu, 2007-12-20 at 16:49 -0500, Ian Holsman wrote: While open source is fantastic, and provides highly visible means. It can still be hacked. I can describe what has happened in this case: 1.

Re: svn commit: r606036 - /httpd/httpd/branches/2.2.x/STATUS

2007-12-20 Thread Nick Kew
On Thu, 20 Dec 2007 21:49:54 - [EMAIL PROTECTED] wrote: + * mod_disk_cache: Delete temporary files if they cannot be renamed to their + final name. + Trunk version of patch: + http://svn.apache.org/viewcvs.cgi?rev=409942view=rev + Backport version for 2.2.x of

Re: svn commit: r606036 - /httpd/httpd/branches/2.2.x/STATUS

2007-12-20 Thread Ruediger Pluem
On 12/20/2007 11:25 PM, Nick Kew wrote: On Thu, 20 Dec 2007 21:49:54 - [EMAIL PROTECTED] wrote: + * mod_disk_cache: Delete temporary files if they cannot be renamed to their + final name. + Trunk version of patch: +

Re: svn commit: r605396 - /httpd/httpd/branches/2.2.x/support/httxt2dbm.c

2007-12-20 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: On 12/19/2007 04:02 AM, [EMAIL PROTECTED] wrote: Author: wrowe Date: Tue Dec 18 19:02:57 2007 New Revision: 605396 URL: http://svn.apache.org/viewvc?rev=605396view=rev Sorry for nitpicking, but 1. Where is the vote on this backport? I'm happy to revert if that's

Re: [VOTE] initial release of httpd-mod_ftp-0.9.0

2007-12-20 Thread William A. Rowe, Jr.
Niklas Edmundsson wrote: On Tue, 18 Dec 2007, William A. Rowe, Jr. wrote: On the positive side, the thing builds on both Linux and AIX (out of tree, for httpd 2.2.6). I'll await the 0.9.1 tag before doing more elaborate tests though. Trunk should also be stable now, if you want to take a

Re: Integrity of Apache source code

2007-12-20 Thread Nikolas Coukouma
Ian Holsman wrote: While open source is fantastic, and provides highly visible means. It can still be hacked. I can describe what has happened in this case: 1. joe hacker hacks one of the 'open source groups' machines. at this point he is assumed to have access to the source code