Re: TLSv1.3 supprt for 2.4.x?

2018-09-21 Thread Dennis Radford
With the recent release of openssl 1.1.1 back on Sept 11 that supports TLS 1.3 final RFC 8446, I believe demand for this backport will steadily increase. Thank you Stephan for proposing this backport branch. FreeBSD 11.2-RELEASE-p3 Apache/2.4.35-dev (Unix) OpenSSL/1.1.1 I've compiled and am runni

Re: TLSv1.3 supprt for 2.4.x?

2018-09-21 Thread Dennis Radford
With the recent release of openssl 1.1.1 back on Sept 11 that supports TLS 1.3 final RFC 8446, I believe demand for this backport will steadily increase. Thank you Stephan for proposing this backport branch.FreeBSD 11.2-RELEASE-p3Apache/2.4.35-dev (Unix)OpenSSL/1.1.1I've compiled and am running thi

Re: TLSv1.3 supprt for 2.4.x?

2018-09-21 Thread Dennis Radford
With the recent release of openssl 1.1.1 back on Sept 11 that supports TLS 1.3 final RFC 8446, I believe demand for this backport will steadily increase. Thank you Stephan for proposing this backport branch. FreeBSD 11.2-RELEASE-p3 Apache/2.4.35-dev (Unix) OpenSSL/1.1.1 I've compiled and am runn

Re: svn commit: r1841620 - /httpd/site/trunk/content/dev/verification.mdtext

2018-09-21 Thread Luca Toscano
Hi William, can you write in here the full command to use? Didn't find the -r flag that you mentioned :( Thanks! Luca Il giorno ven 21 set 2018 alle ore 14:30 William A Rowe Jr ha scritto: > > You might want to point out the -r flag to OpenSSL, which emits the same > output as bintools sha256.

Re: svn commit: r1841632 - in /httpd/test/framework/trunk/t: conf/extra.conf.in htdocs/modules/data/ htdocs/modules/data/SupportApache-small.png modules/data.t

2018-09-21 Thread Christophe JAILLET
Hi, When I wrote this tinny test, I first tried to use something with mod_include. Because doc says "Data URLs can be embedded inline within web pages using something like the |mod_include | module, to remove the need for clients to ma

Re: svn commit: r1841620 - /httpd/site/trunk/content/dev/verification.mdtext

2018-09-21 Thread William A Rowe Jr
You might want to point out the -r flag to OpenSSL, which emits the same output as bintools sha256. On Fri, Sep 21, 2018, 12:30 wrote: > Author: elukey > Date: Fri Sep 21 17:30:07 2018 > New Revision: 1841620 > > URL: http://svn.apache.org/viewvc?rev=1841620&view=rev > Log: > Remove MD5 traces

Re: NOTICE: Intent to T&R 2.4.35 in the next few hours

2018-09-21 Thread William A Rowe Jr
On Fri, Sep 21, 2018 at 12:31 PM Dennis Clarke wrote: > > Then this paragraph bugs me : > > This release requires the Apache Portable Runtime (APR), minimum > version 1.5.x, and APR-Util, minimum version 1.5.x. Some features > may require the 1.6.x version of both APR and APR-Util.

Re: svn commit: r29575 - /dev/httpd/ /release/httpd/

2018-09-21 Thread William A Rowe Jr
On Fri, Sep 21, 2018 at 12:09 PM Dennis Clarke wrote: > On 09/21/2018 12:27 PM, William A Rowe Jr wrote: > > You may want to use this opportunity to drop md5 and sha1 hashes, you > > will be yelled at by ops when you attempt to publish new instances of > > these obsoleted hashes. > > > > Even on

Re: NOTICE: Intent to T&R 2.4.35 in the next few hours

2018-09-21 Thread Dennis Clarke
On 09/21/2018 09:52 AM, Daniel Ruggeri wrote: I've updated the proposed, generated announcements here: https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.html https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.txt A quick proofread would be appreciated - this should be the ex

Re: svn commit: r29575 - /dev/httpd/ /release/httpd/

2018-09-21 Thread Dennis Clarke
On 09/21/2018 12:27 PM, William A Rowe Jr wrote: You may want to use this opportunity to drop md5 and sha1 hashes, you will be yelled at by ops when you attempt to publish new instances of these obsoleted hashes. In the apr release case, the announce was modded through anyways, but a subseque

Re: svn commit: r29575 - /dev/httpd/ /release/httpd/

2018-09-21 Thread Daniel Ruggeri
Ah, yes - good point. We even just talked about that topic at the board meeting this week. I'll nuke those and update the scripts to not generate them any more. -- Daniel Ruggeri On 9/21/2018 11:27 AM, William A Rowe Jr wrote: > You may want to use this opportunity to drop md5 and sha1 hashes,

Re: svn commit: r29575 - /dev/httpd/ /release/httpd/

2018-09-21 Thread William A Rowe Jr
You may want to use this opportunity to drop md5 and sha1 hashes, you will be yelled at by ops when you attempt to publish new instances of these obsoleted hashes. In the apr release case, the announce was modded through anyways, but a subsequent thread on dev@apr determined that only sha256 is bo

Re: RESULT: Passed - [VOTE] Release httpd-2.4.35

2018-09-21 Thread Marion & Christophe JAILLET
FYI, 2.4.35 version has been added to bz. CJ Le 21/09/2018 à 14:31, Daniel Ruggeri a écrit : Hi, all;    I am delighted to share that the vote to release Apache httpd-2.4.35 has PASSED. The following votes were recorded: Binding +1: minfrin, icing, jorton, gsmith, steffenal, covener, jaille

Re: NOTICE: Intent to T&R 2.4.35 in the next few hours

2018-09-21 Thread Joe Orton
On Fri, Sep 21, 2018 at 08:52:32AM -0500, Daniel Ruggeri wrote: > I've updated the proposed, generated announcements here: > https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.html > https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.txt > > A quick proofread would be appreciat

Re: svn commit: r1841573 - in /httpd/httpd/branches/2.4.x: ./ CHANGES STATUS docs/manual/mod/mod_ssl.xml modules/ssl/mod_ssl.c modules/ssl/ssl_engine_config.c modules/ssl/ssl_engine_init.c modules/ssl

2018-09-21 Thread Stefan Eissing
Champagne! :-D > Am 21.09.2018 um 14:15 schrieb Jim Jagielski : > > *cheers*!! > >> On Sep 21, 2018, at 8:14 AM, minf...@apache.org wrote: >> >> Author: minfrin >> Date: Fri Sep 21 12:14:05 2018 >> New Revision: 1841573 >> >> URL: http://svn.apache.org/viewvc?rev=1841573&view=rev >> Log: >> Ad

Re: NOTICE: Intent to T&R 2.4.35 in the next few hours

2018-09-21 Thread Daniel Ruggeri
I've updated the proposed, generated announcements here: https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.html https://dist.apache.org/repos/dist/dev/httpd/Announcement2.4.txt A quick proofread would be appreciated - this should be the exact messages that will be sent/published. -- D

RESULT: Passed - [VOTE] Release httpd-2.4.35

2018-09-21 Thread Daniel Ruggeri
Hi, all;    I am delighted to share that the vote to release Apache httpd-2.4.35 has PASSED. The following votes were recorded: Binding +1: minfrin, icing, jorton, gsmith, steffenal, covener, jailletc36, ylavic, rjung, druggeri, wroewe Community +1: Noel Butler I'd like to add that, as an RM,

Re: [VOTE] Release httpd-2.4.35

2018-09-21 Thread Daniel Ruggeri
Hi, Steffen;    Good catch. That particular change didn't have a CHANGES entry, so it explains why it's missing. Luckily, there are no user-visible changes (other than the error message being correct), so I think we're good to move forward. Would love to see a test case added around this if you're

Re: svn commit: r1841573 - in /httpd/httpd/branches/2.4.x: ./ CHANGES STATUS docs/manual/mod/mod_ssl.xml modules/ssl/mod_ssl.c modules/ssl/ssl_engine_config.c modules/ssl/ssl_engine_init.c modules/ssl

2018-09-21 Thread Jim Jagielski
*cheers*!! > On Sep 21, 2018, at 8:14 AM, minf...@apache.org wrote: > > Author: minfrin > Date: Fri Sep 21 12:14:05 2018 > New Revision: 1841573 > > URL: http://svn.apache.org/viewvc?rev=1841573&view=rev > Log: > Add TLSv1.3 support to mod_ssl: > trunk: http://svn.apache.org/r1839946 > htt

Re: [VOTE] Release httpd-2.4.35

2018-09-21 Thread Steffen
Maybe I overlook it: I miss in the change log: http://svn.apache.org/viewvc?view=revision&sortby=date&revision=1840546 Looks it needs special windows test attention. Description: Merge r1801144, r1801148, r1801456 from trunk: mpm_winnt: Factor out a helper function to parse the type of an ac

Re: [VOTE] Release httpd-2.4.35

2018-09-21 Thread Rainer Jung
Am 21.09.2018 um 04:18 schrieb Dennis Clarke: +1 for release and thanks for RM. Not enough time right now for the usual detailed report, but so far looks good on Solaris 10 Sparc, SLES 11+12, RHEL 6+7. Thank you for getting to it before I did. I can ignore it now ;-) Not necessarily, y