Re: [Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

2020-03-18 Thread Eric Covener
On Wed, Mar 18, 2020 at 8:00 PM Graham Leggett wrote: > > Hi all, > > With support for AJP becoming scarce, there has been a need to get > information from an Apache httpd to a backend server (Tomcat, etc) in a > secure way. > > The following patch introduces two new modules: > > -

[Patch] mod_auth_bearer / mod_autht_jwt: An alternative to AJP

2020-03-18 Thread Graham Leggett
Hi all, With support for AJP becoming scarce, there has been a need to get information from an Apache httpd to a backend server (Tomcat, etc) in a secure way. The following patch introduces two new modules: - mod_auth_bearer: This provides bearer authentication, as described in RFC6750. A

Re: [PATCH 63628] Support specifying the http status codes to be considered by ProxyErrorOverride

2020-03-18 Thread Martin Drößler
Friendly reminder. Am 26.02.20 um 10:13 schrieb Martin Drößler: Hi, any remarks regarding the new patch? Are the changes acceptable, or are there still some improvements required? Regards MGD Martin Drößler schrieb am 03.02.2020 18:33 (GMT +01:00): I attached a new/improved patch to the

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread Ruediger Pluem
On 3/18/20 2:44 PM, jean-frederic clere wrote: > On 18/03/2020 11:09, Ruediger Pluem wrote: >> >> >> On 3/18/20 9:36 AM, jfcl...@apache.org wrote: >>> Author: jfclere >>> Date: Wed Mar 18 08:36:46 2020 >>> New Revision: 1875349 >>> >>> URL: http://svn.apache.org/viewvc?rev=1875349=rev >>> Log:

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread Alex Hautequest
From OpenSSL download page (https://www.openssl.org/source/): Note: The latest stable version is the 1.1.1 series. This is also our Long Term Support (LTS) version, supported until 11th September 2023. All other versions (including 1.1.0, 1.0.2, 1.0.0 and 0.9.8) are now out of support and

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread jean-frederic clere
On 18/03/2020 11:09, Ruediger Pluem wrote: On 3/18/20 9:36 AM, jfcl...@apache.org wrote: Author: jfclere Date: Wed Mar 18 08:36:46 2020 New Revision: 1875349 URL: http://svn.apache.org/viewvc?rev=1875349=rev Log: Add sha512 Modified: httpd/site/trunk/tools/roll.sh Modified:

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread jean-frederic clere
On 18/03/2020 14:11, jean-frederic clere wrote: On 18/03/2020 11:09, Ruediger Pluem wrote: On 3/18/20 9:36 AM, jfcl...@apache.org wrote: Author: jfclere Date: Wed Mar 18 08:36:46 2020 New Revision: 1875349 URL: http://svn.apache.org/viewvc?rev=1875349=rev Log: Add sha512 Modified:

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread jean-frederic clere
On 18/03/2020 11:09, Ruediger Pluem wrote: On 3/18/20 9:36 AM, jfcl...@apache.org wrote: Author: jfclere Date: Wed Mar 18 08:36:46 2020 New Revision: 1875349 URL: http://svn.apache.org/viewvc?rev=1875349=rev Log: Add sha512 Modified: httpd/site/trunk/tools/roll.sh Modified:

Re: svn commit: r1875349 - /httpd/site/trunk/tools/roll.sh

2020-03-18 Thread Ruediger Pluem
On 3/18/20 9:36 AM, jfcl...@apache.org wrote: > Author: jfclere > Date: Wed Mar 18 08:36:46 2020 > New Revision: 1875349 > > URL: http://svn.apache.org/viewvc?rev=1875349=rev > Log: > Add sha512 > > Modified: > httpd/site/trunk/tools/roll.sh > > Modified: httpd/site/trunk/tools/roll.sh >

Re: sha512 in releases?

2020-03-18 Thread jean-frederic clere
On 18/03/2020 08:20, Giovanni Bechis wrote: On 3/17/20 1:39 PM, jean-frederic clere wrote: Hi, Are we planing to add sha512 in our release? vcpkg (https://github.com/microsoft/vcpkg) for example uses sha512 to check the files it downloads. I think we should go that way even if it's not

Re: sha512 in releases?

2020-03-18 Thread Giovanni Bechis
On 3/17/20 1:39 PM, jean-frederic clere wrote: > Hi, > > Are we planing to add sha512 in our release? > vcpkg (https://github.com/microsoft/vcpkg) for example uses sha512 to check > the files it downloads. I think we should go that way even if it's not mandatory: "For new releases, PMCs MUST