Re: Streamlining/improving ephemeral key handling in mod_ssl?

2013-09-15 Thread Kaspar Brand
On 15.09.2013 15:16, Erwann Abalea wrote: > Ideally, the second patch should integrate the 2048bits parameters inside > the "generated section", and adapt the Perl code accordingly. > That way, a paranoid sysadmin can run this file in his perl interpreter, > and have his own 512/1024/2048 parameter

Re: Streamlining/improving ephemeral key handling in mod_ssl?

2013-09-15 Thread Kaspar Brand
On 15.09.2013 13:17, Dr Stephen Henson wrote: > > A couple of comments. > > For DH you can get improved server performance by using the length or subprime > q. This isn't well supported in currently released versions of OpenSSL > unfortunately. > > For OpenSSL 1.0 and earlier the dh->length para

Re: Using AcceptEx on Windows

2013-09-15 Thread Steffen
Current behavior with windows httpd 2.46 is that with AcceptFilter that the sever always starts with good traffic. Most of us dealing then with periodic traffic hangs, slow traffic and/or log entries like Asynchronous AcceptEx failed. We advise in the info to set with issues to AcceptFilter

Re: Using AcceptEx on Windows

2013-09-15 Thread Ivan Zhakov
On Sun, Sep 15, 2013 at 8:04 PM, Jeff Trawick wrote: > On Sat, Sep 14, 2013 at 3:48 PM, Ivan Zhakov wrote: >> >> On Sat, Sep 14, 2013 at 11:34 PM, Jeff Trawick wrote: >> > On Sat, Sep 14, 2013 at 3:19 PM, Ivan Zhakov wrote: >> >> >> >> On Sat, Sep 14, 2013 at 10:26 PM, Kyle Hamilton >> >> wrot

Re: event MPM (Was: Re: Planning for 2.4.7 in Oct)

2013-09-15 Thread Rainer Jung
On 15.09.2013 20:23, Marion & Christophe JAILLET wrote: > > Le 15/09/2013 16:30, Rainer Jung a écrit : >> I'm pretty sure from those pictures you would not be able to find the >> point in time where I switched 2.4.6 and 2.4.7-dev between the servers. > > In other words, does it mean that no speci

Re: event MPM (Was: Re: Planning for 2.4.7 in Oct)

2013-09-15 Thread Marion & Christophe JAILLET
Le 15/09/2013 16:30, Rainer Jung a écrit : I'm pretty sure from those pictures you would not be able to find the point in time where I switched 2.4.6 and 2.4.7-dev between the servers. In other words, does it mean that no special performance improvement is to be expected ? I remember to hav

Re: Using AcceptEx on Windows

2013-09-15 Thread Jeff Trawick
On Sat, Sep 14, 2013 at 3:48 PM, Ivan Zhakov wrote: > On Sat, Sep 14, 2013 at 11:34 PM, Jeff Trawick wrote: > > On Sat, Sep 14, 2013 at 3:19 PM, Ivan Zhakov wrote: > >> > >> On Sat, Sep 14, 2013 at 10:26 PM, Kyle Hamilton > wrote: > >> >>> Hi, > >> >>> > >> >>> The mpm_winnt uses AcceptEx API

Re: event MPM (Was: Re: Planning for 2.4.7 in Oct)

2013-09-15 Thread Rainer Jung
On 15.09.2013 05:31, Rainer Jung wrote: > On 10.09.2013 16:13, Jim Jagielski wrote: >> For completeness, a full, combined patch is: >> >> http://people.apache.org/~jim/patches/httpd-2.4-event-test.patch >> >> It requires a patch that knows about creating new files >> when encountering /dev/null

Re: Streamlining/improving ephemeral key handling in mod_ssl?

2013-09-15 Thread Erwann Abalea
Ideally, the second patch should integrate the 2048bits parameters inside the "generated section", and adapt the Perl code accordingly. That way, a paranoid sysadmin can run this file in his perl interpreter, and have his own 512/1024/2048 parameters generated by OpenSSL. You could also decide to r

Re: Streamlining/improving ephemeral key handling in mod_ssl?

2013-09-15 Thread Dr Stephen Henson
On 15/09/2013 11:41, Kaspar Brand wrote: > This grew out of working on a proof of concept for > https://issues.apache.org/bugzilla/show_bug.cgi?id=49559 ("Patch to add > user-specified Diffie-Hellman parameters"). I would appreciate to get > more feedback on the changes proposed with the two attach

Streamlining/improving ephemeral key handling in mod_ssl?

2013-09-15 Thread Kaspar Brand
This grew out of working on a proof of concept for https://issues.apache.org/bugzilla/show_bug.cgi?id=49559 ("Patch to add user-specified Diffie-Hellman parameters"). I would appreciate to get more feedback on the changes proposed with the two attached patches... which is the reason I'm taking the

Re: contrast cache_remove_url() and cache_remove_entity()?

2013-09-15 Thread Graham Leggett
On 13 Sep 2013, at 3:00 AM, Eric Covener wrote: > Can anyone contrast these two and/or comment the callback structure in > mod_cache.h? > > In 2.4, It looks like mod_disk_cache's remove_url() callback does not > close open file descriptors. I think those are normally closed by > some indirect a