Re: SSL unexpected renegotiation for CGI with PATH_INFO

2009-12-07 Thread Torsten Foertsch
On Mon 07 Dec 2009, Masaoki Kobayashi wrote: I found suspicious behavior with CGI using PATH_INFO when it is on the client authenticated SSL. My situation is as follows. /foo   SSLVerifyClient none /bar   SSLVerifyClient require Assume here're some files under /foo.   a.html  -  plain

Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l

2009-11-16 Thread Torsten Foertsch
On Mon 16 Nov 2009, Jean-Marc Desperrier wrote: Here's the wireshark captured exchange between the client and server, note that Hello Request always *immediatly* follows the end of the renegotiation. This is with Apache 2.2.11/Openssl 0.9.8i (not a production server) : 217   19:30:50.745606 

Re: mod_reqtimeout: mitigating against slowloris-style attack (different approach)

2009-09-01 Thread Torsten Foertsch
On Tue 01 Sep 2009, Stefan Fritsch wrote: http://www.sfritsch.de/mod_reqtimeout/mod_reqtimeout.c Any comments are welcome. Just a few thoughts: - You use GLOBAL_ONLY in ap_check_cmd_context. That means the directive must not appear in vhost context. AFAIK, conn-base_server reflects the

Re: svn commit: r773881 - in /httpd/httpd/branches/2.2.x: CHANGES STATUS include/http_core.h modules/filters/mod_include.c server/config.c server/core.c

2009-05-22 Thread Torsten Foertsch
On Fri 22 May 2009, Jeff Trawick wrote: Hmmm, after trying to use what seems like a cool feature, I find that mod_perl was never taught to use the Apache 2's mod_include plug-in interface. AFAIK, that is provided by Geoff's CPAN module Apache::IncludeHook or so. Torsten -- Need

Re: State of Apache::Test?

2009-04-15 Thread Torsten Foertsch
On Wed 15 Apr 2009, Dan Poirier wrote: I'm wondering - what's the state of Apache::Test and httpd/test?  Are there active developers using them who understand how they work?  Or have they fallen into disuse? Background: I wanted to see if I could write some tests for the new SNI features, so

Re: 2.2.11 mod_include

2009-04-01 Thread Torsten Foertsch
On Wed 01 Apr 2009, Dan Poirier wrote: Lars Eilebrecht l...@eilebrecht.net writes: Torsten Foertsch wrote: [mod_include DATE_LOCAL bug] Is this a known bug? It's probably this one: https://issues.apache.org/bugzilla/show_bug.cgi?id=39369 I think that's right.  It's a test

Re: mod_include supporting POST subrequests

2009-04-01 Thread Torsten Foertsch
On Fri 20 Mar 2009, Graham Leggett wrote: Torsten Foertsch wrote: I need the include virtual directive to be able to issue POST requests. It should pass the request body to the subrequest. So I came up with the attached patch. It allows to write   !--#include method=post virtual

Re: mod_include supporting POST subrequests

2009-04-01 Thread Torsten Foertsch
On Wed 01 Apr 2009, Graham Leggett wrote: Is there a chance for the patch to make it into 2.3++? If yes I'll merge it with the KEPT_BODY stuff. Having two separate mechanisms to solve the same problem is not ideal. In addition, creating a solution that only works in one place

2.2.11 mod_include

2009-03-31 Thread Torsten Foertsch
Hi, my apache 2.2.11 does not pass the current httpd test framework: t/modules/include.t (Wstat: 0 Tests: 88 Failed: 1) Failed test: 67 t/modules/info.t (Wstat: 0 Tests: 1 Failed: 1) Failed test: 1 t/modules/rewrite.t (Wstat: 0 Tests: 29 Failed: 1) Failed test: 24

http_in filter question

2009-03-21 Thread Torsten Foertsch
Hi, the http_in filter (ap_http_filter) uses an eos_sent flag in its context. This flag is set each time an eos bucket is sent except for one case: /* If we have no more bytes remaining on a C-L request, * save the callter a roundtrip to discover EOS. */ if (ctx-state ==

mod_include supporting POST subrequests

2009-03-20 Thread Torsten Foertsch
Hi, I need the include virtual directive to be able to issue POST requests. It should pass the request body to the subrequest. So I came up with the attached patch. It allows to write !--#include method=post virtual=... -- or !--#include method=inherit virtual=... -- I think the patch is

Re: Open Projects

2009-03-06 Thread Torsten Foertsch
On Fri 06 Mar 2009, ntwrkd wrote: What portions of the httpd project need work/bug fixes? Is there a top priorities page I can view? Thx Don't know if there is a list. But mod_perl and libapreq (I think) could use a hand if you are interested. Torsten -- Need professional mod_perl

Re: [RELEASE CANDIDATE] libapreq2 2.11

2009-01-28 Thread Torsten Foertsch
On Wed 28 Jan 2009, Issac Goldstand wrote: Vote results show only 2 +1s (issac,joes) and no -1s. We're still a +1 short of release. If it matters, I have successfully run all tests on my mod_perl installation (threading branch) with apache 2.2.11 both with worker and prefork on Suse linux

Scoreboard question

2008-12-15 Thread Torsten Foertsch
Hi, I am working on a monitoring tool that works independently from apache and analyzes the scoreboard stored in shared memory. One thing I am trying to monitor is the current req/sec and bytes/sec rate. On my test system I get about 3.5-4 Mbytes/sec (while testing with ab) which corresponds

scoreboard.h/process_score question

2008-12-12 Thread Torsten Foertsch
Hi, the struct process_score in scoreboard.h contains a sb_type member. Can anyone please explain what that item is for? I couldn't find any usage in the code. The global_score does contain a similar member. That one is used. Thanks, Torsten

Re: MPMs, COW vs Child Process Spawning

2008-10-30 Thread Torsten Foertsch
On Wed 29 Oct 2008, Paul Querna wrote: Is COW ability of fork important enough with modern memory and operating systems, to maintain two significantly different code paths for spawning children processes? Don't know if it matters but mod_perl heavily relies on COW. Why drop a really valuable

Bug in ap_internal_fast_redirect

2008-06-27 Thread Torsten Foertsch
Hi dev, on the modperl mailing list we had recently an interesting problem that has revealed a bug in ap_internal_fast_redirect, see https://issues.apache.org/bugzilla/show_bug.cgi?id=45297 Suppose this config: DirectoryIndex index.shtml Options Includes Indexes AddType text/html .shtml

Re: Bug in ap_internal_fast_redirect

2008-06-27 Thread Torsten Foertsch
On Fri 27 Jun 2008, William A. Rowe, Jr. wrote: It's legacy crap that should be evicted from httpd-trunk, I'll do so sometime in July depending on vacations and such.  You'll be able to review the patches to mod_dir and mod_negotiation and decide, should we actually push these into 2.2.

Re: Dynamic configuration for the hackathon?

2008-04-01 Thread Torsten Foertsch
On Tue 01 Apr 2008, Paul Querna wrote: William A. Rowe, Jr. wrote: -0.99 - agreed. Perl is perfectly happy having perl blocks as modular behaviors... I've noticed a trend in the last few years of building on the core (and folks rightfully accused me of growing mod_proxy core when new

Re: Dynamic configuration for the hackathon?

2008-04-01 Thread Torsten Foertsch
On Tue 01 Apr 2008, Jim Jagielski wrote: On Apr 1, 2008, at 5:21 AM, Torsten Foertsch wrote: You cannot add virtual servers on the fly Hmmm let's see now. If we have a default Vhost that all non-matched name-based hosts get directed to configured, then a mod_perl based handler can

Re: Dynamic configuration for the hackathon?

2008-04-01 Thread Torsten Foertsch
On Tue 01 Apr 2008, Akins, Brian wrote: In pseudo config, like niq is suggesting, you could have something like: If HTTP_HEADER{Host} =~ cnn\.com$ || TCPPort == 8080    #cnn specific stuff here...    DocumentRoot /htdocs/cnn    CutomLog |/usr/bin/logger cnn my_format    ErrorLog

Re: Dynamic configuration for the hackathon?

2008-03-27 Thread Torsten Foertsch
On Wed 26 Mar 2008, Akins, Brian wrote: There seems to be a demand for dynamic per-request configuration, as evidenced by the number of users hacking it with mod_rewrite, and the other very limited tools available.  Modern mod_rewrite usage commonly looks like programming, but it's not

Re: [PATCH #21563] support/list_hooks.pl does not parse declarations that span multiple lines

2008-03-14 Thread Torsten Foertsch
On Tue 19 Feb 2008, Torsten Foertsch wrote: support/list_hooks.pl does not parse declarations that span multiple lines. The attached version does. See also bug #44453. Please take this mail as a polite reminder since nobody has answered this patch for almost a month now. I understand support

[PATCH #21563] support/list_hooks.pl does not parse declarations that span multiple lines

2008-02-19 Thread Torsten Foertsch
Hi, support/list_hooks.pl does not parse declarations that span multiple lines. The attached version does. See also bug #44453. Torsten list_hooks.pl Description: Perl program

Re: High security

2008-01-25 Thread Torsten Foertsch
On Fri 25 Jan 2008, Nick Kew wrote:  A compromise might be to create a chroot hook and allow module developers to use it. This would shift the support burden somewhat from the core Apache team to those willing to engage the users providing support. Isn't that basically the status quo

how to get the request_rec if I have only the request pool?

2007-09-22 Thread Torsten Foertsch
Hi, if I have a pointer to a request pool is there then a simple way to fetch the corresponding request_rec? My current way is to put it there as pool userdata in a create request hook function. But I thought there might be a more sensible way. Thanks, Torsten pgpV3zBSSkkPb.pgp Description:

Re: The right way to report problems (was: uninitialized variable in ap_directory_walk)

2007-03-26 Thread Torsten Foertsch
On Saturday 24 March 2007 13:53, Nick Kew wrote: Thanks for persisting! Thanks for applying the patch. I have marked the bug as fixed. Torsten pgpwL6wlBKRQa.pgp Description: PGP signature

Re: The right way to report problems (was: uninitialized variable in ap_directory_walk)

2007-03-24 Thread Torsten Foertsch
On Thursday 15 March 2007 20:25, Joshua Slive wrote: The bug is simple, the patch is simple. Why haven't I got a single reply to my mail? The bug is also still marked as new. What is the right way to report problems? You're doing fine.  See:

The right way to report problems (was: uninitialized variable in ap_directory_walk)

2007-03-15 Thread Torsten Foertsch
. The members of this structure are initialized from the requests per_dir_config. But somehow the new override_opts had been forgotten. By cause the override_opts member was in my installation always 0 thus preventing to set any other Options via .htaccess. Torsten On Sunday 11 March 2007 18:01, Torsten

uninitialized variable in ap_directory_walk

2007-03-11 Thread Torsten Foertsch
Hi, this bug is alive since 2.2.0. The patch is against trunk. Torsten --- server/request.c~ 2007-03-11 17:20:25.0 +0100 +++ server/request.c2007-03-11 17:50:01.0 +0100 @@ -631,6 +631,7 @@ opts.add = this_dir-opts_add; opts.remove = this_dir-opts_remove;

Re: [EMAIL PROTECTED] Re: how to modify Document Root from module...

2006-11-26 Thread Torsten Foertsch
On Monday 27 November 2006 00:57, Mathieu CARBONNEAUX wrote: the idea is to fake document root after chrooting apache. after reading configuration and setting document root, in child init i make chroot to the actual document root, and after i whant to correct document root to reflect the new

Re: child_init hook...

2006-10-21 Thread Torsten Foertsch
On Friday 20 October 2006 22:40, Mathieu CARBONNEAUX wrote: i'm searching about to ameliorate chroot funciton of mod_chroot and mod_security module to be working normaly with apache reload. the probleme is that the chroot occure in apache main processes who control child forking... and not in

Very simple patch

2006-01-18 Thread Torsten Foertsch
--- glue/perl/t/conf/extra.conf.in~ 2005-04-16 04:19:35.0 +0200 +++ glue/perl/t/conf/extra.conf.in 2006-01-18 21:20:34.020443622 +0100 @@ -1,3 +1,4 @@ +PassEnv PERL5LIB ScriptAlias /cgi-bin/ @ServerRoot@/cgi-bin/ IfModule !mpm_winnt.c LockFile @ServerRoot@/logs/accept.lock

APR: decision which shared mem implementation is used

2005-12-13 Thread Torsten Foertsch
Hi, yesterday after a few experiments I found my apache won't start anymore. In the error_log it said: [Tue Dec 13 12:09:46 2005] [crit] (17)File exists: unable to create scoreboard /var/opt/apache/logs/apache_scoreboard (name-based shared memory failure) Deleting

Re: Proposed connection state diagram

2005-09-06 Thread Torsten Foertsch
On Tuesday 06 September 2005 06:10, Brian Pane wrote: http://www.brianp.net/work/opensource/apache/async.html Shouldn't there be a transition from HANDLER to CHECK_REQUEST_LINE_READABLE in case the full response is sent and keep-alive is on? Torsten pgpGwArqwD7oI.pgp Description: PGP

Re: [PATCH] add TCP_DEFER_ACCEPT to 2.0.54

2005-05-06 Thread Torsten Foertsch
On Wednesday 04 May 2005 22:09, Brian Akins wrote: Compiles and works in initial testing on Linux 2.6 (debian sarge). I have tried that out and found that everything is working except testing mod_perl. The reason is simple and to be expected. One test (t/protocol/pseudo_http) implements a

mod_ssl exported functions?

2004-12-15 Thread Torsten Foertsch
Hi, I am writing a mod_perl module that makes mod_ssl optional functions accessible via perl. I have currently implemented ssl_is_https() and ssl_var_lookup() which is enough for my needs. For the sake of completeness I am wondering if ssl_engine_disable() and ssl_proxy_enable() need to be