Run Subrequest

2009-10-15 Thread Jens Frey
Hi all, i am trying to run a subrequest to a URI which get's proxied to check the return code of the machine the proxy points to (e.g. 200, 500). The problem now is that the proxy module answers the request, but the content i want to send is omitted, so the question is, how can i avoid that

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Michael Felt
Michael Felt wrote: OK. It is probably something really really simple - but as I am trying to be guided by what is already there I am trying to do a build using paramters similar to the build/binbuild.sh. /configure --enable-layout=Apache --enable-mods-shared=most --enable-modules=most

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Graham Leggett
Michael Felt wrote: mich...@x054:[/data/prj/httpd-2.2.14]./httpd -t [Thu Oct 15 09:58:08 2009] [warn] module headers_module is already loaded, skipping Syntax error on line 69 of /usr/local/apache2/conf/httpd.conf: Invalid command 'AddHandler', perhaps misspelled or defined by a module not

Re: svn commit: r825379 - in /httpd/site/trunk: docs/download.html docs/mod_fcgid/index.en.html xdocs/download.xml xdocs/mod_fcgid/index.en.xml

2009-10-15 Thread Jeff Trawick
On Wed, Oct 14, 2009 at 11:00 PM, wr...@apache.org wrote: Author: wrowe Date: Thu Oct 15 03:00:49 2009 New Revision: 825379 URL: http://svn.apache.org/viewvc?rev=825379view=rev Log: From 2.3.1-beta to 2.3.4 GA in 30 days - nicely donesvn status033]0 woohoo^...@i8akldsf

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Michael Felt
OK. I'll see if that starts answering more questions than I am getting from my face-value (or naive) approach to the infromation/hints coming from binbuild.sh and configure --help. The mod with AddHandler is mod_mime - did a better search in the documentation to find that. Just seems strange

Re: mod_fcgid: settings needed in every vhost?

2009-10-15 Thread Paul Howarth
On Mon, 5 Oct 2009 06:31:31 +0700 Walter Heck walterh...@gmail.com wrote: (If you want help here you need to use the ASF-distributed mod_fcgid, not the now-ancient mod_fcgid 2.2.) Not a big fan of self-compiled stuff on production systems. I presume there is no RHEL5 rpm yet? Is anybody on

Re: SSLRequire: requiring a particular OID in extKeyUsage

2009-10-15 Thread Joe Orton
On Fri, Oct 09, 2009 at 07:56:42PM +0200, Graham Leggett wrote: I am trying to solve the problem of limiting access to those who present a client cert containing a specific extKeyUsage OID. So far, the config that I have for httpd-trunk is this: SSLRequire 1.3.6.1.5.5.7.3.4 in

Re: mod_fcgid: settings needed in every vhost?

2009-10-15 Thread Walter Heck
That is great! Thanks Paul! On Thu, Oct 15, 2009 at 19:00, Paul Howarth p...@city-fan.org wrote: On Mon, 5 Oct 2009 06:31:31 +0700 Walter Heck walterh...@gmail.com wrote: (If you want help here you need to use the ASF-distributed mod_fcgid, not the now-ancient mod_fcgid 2.2.) Not a big fan

Re: SSLRequire: requiring a particular OID in extKeyUsage

2009-10-15 Thread Graham Leggett
Joe Orton wrote: Are you trying to match against the contents of the (single) extKeyUsage extension? That isn't how PeerExtList works, or at least, was written and documented to work, AFAICT: PeerExtList will return a list of the value of each extension in the cert with the given OID.

Re: Dav Locks corrupting; need some troubleshooting tools

2009-10-15 Thread Dick Davies
[sorry for the crosspost, but not sure where this should go]. To answer my own question: got to the bottom of it; looks to me like the lock DB is a hash of inode - locktoken Steps to reproduce: * PUT file * LOCK file * PROPGET file (note down the locktoken) use something other than DAV to

Re: SSLRequire: requiring a particular OID in extKeyUsage

2009-10-15 Thread Joe Orton
On Thu, Oct 15, 2009 at 03:43:36PM +0200, Graham Leggett wrote: Joe Orton wrote: Are you trying to match against the contents of the (single) extKeyUsage extension? That isn't how PeerExtList works, or at least, was written and documented to work, AFAICT: PeerExtList will return a list

Re: Dav Locks corrupting; need some troubleshooting tools

2009-10-15 Thread Joe Orton
On Thu, Oct 15, 2009 at 03:27:29PM +0100, Dick Davies wrote: [sorry for the crosspost, but not sure where this should go]. To answer my own question: got to the bottom of it; looks to me like the lock DB is a hash of inode - locktoken Steps to reproduce: * PUT file * LOCK file *

Re: svn commit: r823703 - in /httpd/httpd/trunk: CHANGES modules/dav/fs/repos.c modules/dav/main/mod_dav.h

2009-10-15 Thread Joe Orton
On Mon, Oct 12, 2009 at 05:14:33PM -0400, Brian J. France wrote: mod_dav_acl would use the filename to validate the acls. Like I said, I don't know if get_pathname is needed or we should just use r-filename and make sure a mod_dav_fs_db module updated it. Why does mod_dav_acl care about

Re: Dav Locks corrupting; need some troubleshooting tools

2009-10-15 Thread Dick Davies
Is that documented anywhere at all? In any event, does it made sense to use something other than the inode as the key into the lockDB - the URI for example? On Thu, Oct 15, 2009 at 3:33 PM, Joe Orton jor...@redhat.com wrote: Steps to reproduce: * PUT file * LOCK file * PROPGET file (note

Re: Run Subrequest

2009-10-15 Thread Joe Lewis
Jens Frey wrote: Hi all, i am trying to run a subrequest to a URI which get's proxied to check the return code of the machine the proxy points to (e.g. 200, 500). The problem now is that the proxy module answers the request, but the content i want to send is omitted, so the question is, how

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Michael Felt
Well, it seems it is all relatively simple - as most solutions tend to be. re: AddHandler message: the statement needed to be moved to within IfModule mime_module /IfModule Probably, my builds were working fine. I am running into other warnings, and I am wondering if there is a specific,

Re: Fix for CVE-2008-2364 for httpd 2.0.64-dev

2009-10-15 Thread Ruediger Pluem
On 10/15/2009 12:05 AM, Ryan Watkins wrote: Is there any chance the fix for security vulnerability CVE-2008-2364 ( http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364) will be back ported to Apache 2.0.x? The reason I ask is because this particular security vulnerability is

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Eric Covener
On Thu, Oct 15, 2009 at 3:01 PM, Michael Felt mamf...@gmail.com wrote: Well, it seems it is all relatively simple - as most solutions tend to be. re: AddHandler message: the statement needed to be moved to within IfModule mime_module /IfModule Probably, my builds were working fine. I

2.3.3-alpha

2009-10-15 Thread Jim Jagielski
Planning on pushing this out to coincide w/ ACUS09... Let's assume head of apr 1.4...

Re: Making a binary distribution package... for AIX

2009-10-15 Thread Michael Felt
Eric Covener wrote: On Thu, Oct 15, 2009 at 3:01 PM, Michael Felt mamf...@gmail.com wrote: Well, it seems it is all relatively simple - as most solutions tend to be. re: AddHandler message: the statement needed to be moved to within IfModule mime_module /IfModule Probably, my builds

Crazy slowloris mitigation patch

2009-10-15 Thread Bojan Smojver
While playing with slowloris against prefork, I wrote the attached craziness. I had httpd under slowloris attack (which would normally completely DOS the server) and it seems that the attached patch made it handle the requests. Sure, there was a lot of carnage in the process (child processes

Re: 2.3.3-alpha

2009-10-15 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Planning on pushing this out to coincide w/ ACUS09... Let's assume head of apr 1.4... -1 veto; that is not released code, and I'm not fond of the idea of a fork of apr managed at httpd. But if you meant, you will be moving forwards in apr to have that group accept an apr

Re: 2.3.3-alpha

2009-10-15 Thread William A. Rowe, Jr.
Jim Jagielski wrote: Planning on pushing this out to coincide w/ ACUS09... Let's assume head of apr 1.4... You've made 'reservations' a number times in the past several years in STATUS, and on list, that weren't realized for 1+ month afterwards. Any time you would like to tag an alpha, please

Re: Crazy slowloris mitigation patch

2009-10-15 Thread Bojan Smojver
On Fri, 2009-10-16 at 08:00 +1100, Bojan Smojver wrote: +ap_mpm_safe_kill(reader, SIGKILL); Actually, this can be SIGTERM too. Still does the job. -- Bojan

Re: Crazy slowloris mitigation patch

2009-10-15 Thread Bojan Smojver
On Fri, 2009-10-16 at 08:00 +1100, Bojan Smojver wrote: I wrote the attached craziness. Slightly more sophisticated craziness attached. -- Bojan --- httpd-2.2.14/server/mpm/prefork/prefork.c 2009-02-01 07:54:55.0 +1100 +++ httpd-2.2.14-p/server/mpm/prefork/prefork.c 2009-10-16

Re: Crazy slowloris mitigation patch

2009-10-15 Thread Bojan Smojver
On Fri, 2009-10-16 at 12:31 +1100, Bojan Smojver wrote: Slightly more sophisticated craziness attached. OK, just a little bit cleaner this time. -- Bojan --- httpd-2.2.14/server/mpm/prefork/prefork.c 2009-02-01 07:54:55.0 +1100 +++ httpd-2.2.14-p/server/mpm/prefork/prefork.c 2009-10-16