Re: [vote] release httpd-2.2.14?

2009-10-01 Thread Graham Leggett
Guenter Knauf wrote: > still not sync'd, also my NetWare binaries not; there is something wrong ... Two emails to infrastructure@ have gone ignored, does anyone know what is going on? Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

Re: [vote] release httpd-2.2.14?

2009-09-30 Thread Guenter Knauf
Hi, Graham Leggett schrieb: > Still waiting for www.apache.org/dist/httpd to pick up the binaries, > have pinging infra to see if there is anything wrong. still not sync'd, also my NetWare binaries not; there is something wrong ... Gün.

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Graham Leggett
Graham Leggett wrote: > Will move the binaries across tonight for the mirrors to pick them up, > and will prepare the announcement to go out 24 hours after. Still waiting for www.apache.org/dist/httpd to pick up the binaries, have pinging infra to see if there is anything wrong. Regards, Graham

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Graham Leggett
Graham Leggett wrote: > +/-1 > [ ] Release httpd-2.2.14 as GA With 6 binding +1's, vote passes. Will move the binaries across tonight for the mirrors to pick them up, and will prepare the announcement to go out 24 hours after. Regards, Graham -- smime.p7s Description: S/MIME Cryptograph

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Rainer Jung
On 29.09.2009 13:25, Jeff Trawick wrote: > On Tue, Sep 29, 2009 at 7:00 AM, Guenter Knauf > wrote: > > Hi, > Jie Gao schrieb: > > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent > --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 >

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Jeff Trawick
On Tue, Sep 29, 2009 at 7:00 AM, Guenter Knauf wrote: > Hi, > Jie Gao schrieb: > > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile > /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS > -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG > -I/usr/local/src/

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Guenter Knauf
Hi, Jie Gao schrieb: > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile > /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS > -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG > -I/usr/local/src/httpd-2.2.14/srclib/pcre -I. > -I/usr/local/src/httpd-2.

Re: [vote] release httpd-2.2.14?

2009-09-29 Thread Gregg L. Smith
Hello, CHANGES states; *) mod_proxy_scgi: Backport from trunk. [André Malo] There are no Windows build files for this module. To hopefully soften the grief a little I may have a head start. I think I've covered all the bases, sorry I forgot to donate this over the weekend. Regards. Gregg

Re: [vote] release httpd-2.2.14?

2009-09-28 Thread William A. Rowe, Jr.
Graham Leggett wrote: > > +/-1 > [ ] Release httpd-2.2.14 as GA +1, win32-src.zip is in place in /dev/dist/, as are win32 binaries (yes, I did consider renaming these, and decided it's less disruptive to shift to the proper httpd-* naming convention when we release 2.3-beta or 2.4.0). Cer

Re: [vote] release httpd-2.2.14?

2009-09-28 Thread Jie Gao
* Guenter Knauf wrote: > Hi Jie, > Jie Gao schrieb: > > I have also found the following warnings: > > > > /bin/bash /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent > > --mode=compile /opt/SUNWspro/bin/cc -g -fast -DHAVE_CONFIG_H -DSOLARIS2=10 > > -D_POSIX_PTHREAD_SEMANTICS -D_REENTRAN

Re: [vote] release httpd-2.2.14?

2009-09-28 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: > I have also found the following warnings: > > /bin/bash /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent > --mode=compile /opt/SUNWspro/bin/cc -g -fast -DHAVE_CONFIG_H -DSOLARIS2=10 > -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -I./include

Re: [vote] release httpd-2.2.14?

2009-09-28 Thread Jie Gao
* Guenter Knauf wrote: > Hi Jie, > Jie Gao schrieb: > > Building shared: mod_dbd.la > > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile > > /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS > > -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG > > -

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: > Building shared: mod_dbd.la > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile > /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS > -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG > -I/usr/local/src/httpd-2.2.14/srclib/pcr

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Ruediger Pluem
On 09/27/2009 07:43 PM, Jeff Trawick wrote: > On Sun, Sep 27, 2009 at 9:33 AM, Guenter Knauf wrote: . - I assume the below is the correct fix: >> >> Index: ssl_engine_io.c >> === >> --- ssl_engine_io.c (revision 819298) >> +++ s

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Jeff Trawick
On Sun, Sep 27, 2009 at 9:33 AM, Guenter Knauf wrote: > Hi Jie, > Jie Gao schrieb: > >> * Guenter Knauf wrote: >> That worked. However, I am getting this: >> > good. Patch is already applied to 2.2.x branch. > > /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile >> /opt/SUNW

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Jeff Trawick
On Sun, Sep 27, 2009 at 10:59 AM, Guenter Knauf wrote: > Hi, > Jie Gao schrieb: > >> Building shared: mod_dbd.la >> /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile >> /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS >> -D_REENTRANT -D_LARGEFILE64_SOU

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Guenter Knauf
Hi Jeff, Jeff Trawick schrieb: > (Perhaps non-suppressing Sun Studio users among the developers will > notice when a new one crops up and evaluate whether or not it is a real > problem; perhaps other compilers will warn in scenarios where it is more > likely?) /* test for "warning: statement not re

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Jeff Trawick
On Sun, Sep 27, 2009 at 11:15 AM, Guenter Knauf wrote: > Hi, > Jie Gao schrieb: > >> That error is now gone. But I've found more errors: >> >> /bin/bash /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent >> --mode=compile /opt/SUNWspro/bin/cc -g -fast -DHAVE_CONFIG_H -DSOLARIS2=10 >> -D_POS

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Guenter Knauf
Hi, Jie Gao schrieb: That error is now gone. But I've found more errors: /bin/bash /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DHAVE_CONFIG_H -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -I./include -I

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Guenter Knauf
Hi, Jie Gao schrieb: Building shared: mod_dbd.la /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG -I/usr/local/src/httpd-2.2.14/srclib/pcre -I. -I/us

Re: [vote] release httpd-2.2.14?

2009-09-27 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: * Guenter Knauf wrote: That worked. However, I am getting this: good. Patch is already applied to 2.2.x branch. /usr/local/src/httpd-2.2.14/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRA

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > > Hi Jie, > Jie Gao schrieb: > > Didn't really work: > > > > # patch -p 0 -i openssl-0.9.7g-compat-2.2.x.diff > > Looks like a unified context diff. > > The next patch looks like a unified context diff. > > The next patch looks like a unified context diff. > > I

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: > Didn't really work: > > # patch -p 0 -i openssl-0.9.7g-compat-2.2.x.diff > Looks like a unified context diff. > The next patch looks like a unified context diff. > The next patch looks like a unified context diff. > I can't seem to find a patch in there anywhere.

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > > Guenter Knauf schrieb: > > Hi Jie, > > Jie Gao schrieb: > >> * Guenter Knauf wrote: > >>> anyway, can you please try if the attached patch fixes the issue for > >>> you? I've not yet figured out from which version exactly openssl > >>> starts to use const, but that I d

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: > Patch applied (after removing "g" at the end of a few lines) and compiled > without errors. thanks very much for confirming. I guess the fix shows up with next release (after .14) if not other things pop up with .14 which require a re-roll; will probably tomorrow look in

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Guenter Knauf schrieb: > Hi Jie, > Jie Gao schrieb: >> * Guenter Knauf wrote: >>> anyway, can you please try if the attached patch fixes the issue for >>> you? I've not yet figured out from which version exactly openssl >>> starts to use const, but that I do if you report back that it works >> >>

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > > Hi Jie, > Jie Gao schrieb: > >* Guenter Knauf wrote: > >>anyway, can you please try if the attached patch fixes the issue for > >>you? I've not yet figured out from which version exactly openssl > >>starts to use const, but that I do if you report back that it works >

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > Hi Jie, > Jie Gao schrieb: > >Also: > > > >... > >/usr/local/src/apache/srclib/apr/libtool --silent --mode=compile > >/opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS > >-D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG > >-I/usr/local/src/apache/

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: * Guenter Knauf wrote: anyway, can you please try if the attached patch fixes the issue for you? I've not yet figured out from which version exactly openssl starts to use const, but that I do if you report back that it works That error is now gone. fine. Here's the

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi Jie, Jie Gao schrieb: Also: ... /usr/local/src/apache/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG-I/usr/local/src/apache/srclib/pcre -I. -I/usr/local/src/apache/os/unix

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > Hi, > Guenter Knauf schrieb: > > can you please lookup the prototype for SSL_CIPHER_get_bits() from your > > 0.9.7d ssl.h and post here? > > I would be suprised if the prototype would change within one branch > > (0.9.7) ... > ok, found some other versions in my code tomb

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Guenter Knauf wrote: > > Hi, > Jie Gao schrieb: > >I am getting errors using Sun's compiler: > well, not sure if it makes much sense to support such a stone-age > openssl version, even if in your case its patched with all security > fixes ... :) > anyway, can you please try if the attached patc

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi, Guenter Knauf schrieb: > can you please lookup the prototype for SSL_CIPHER_get_bits() from your > 0.9.7d ssl.h and post here? > I would be suprised if the prototype would change within one branch > (0.9.7) ... ok, found some other versions in my code tomb, and can say that indeed the change ha

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Ruediger Pluem
On 09/27/2009 12:54 AM, Jie Gao wrote: > * Jim Jagielski wrote: > >> On Sep 23, 2009, at 7:24 PM, Graham Leggett wrote: >> >>> Hi all, >>> >>> The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. >>> >> Good on Ubuntu 8.10, 9.0.4 >> OS X 10.6.1 >> Solaris 10 Sparc > > I am ge

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi, Jie Gao schrieb: Also: ... /usr/local/src/apache/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG-I/usr/local/src/apache/srclib/pcre -I. -I/usr/local/src/apache/os/unix -I/

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Ruediger Pluem
On 09/24/2009 01:24 AM, Graham Leggett wrote: > Hi all, > > The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. > > This release contains fixes for the following security issues: > > *) SECURITY: CVE-2009-2699 (cve.mitre.org) > Fixed in APR 1.3.9. Faulty error handlin

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Guenter Knauf
Hi, Jie Gao schrieb: I am getting errors using Sun's compiler: well, not sure if it makes much sense to support such a stone-age openssl version, even if in your case its patched with all security fixes ... :) anyway, can you please try if the attached patch fixes the issue for you? I've not y

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
Also: ... /usr/local/src/apache/srclib/apr/libtool --silent --mode=compile /opt/SUNWspro/bin/cc -g -fast -DSOLARIS2=10 -D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT -D_LARGEFILE64_SOURCE -DAP_DEBUG -I/usr/local/src/apache/srclib/pcre -I. -I/usr/local/src/apache/os/unix -I/usr/local/src/apache/s

Re: [vote] release httpd-2.2.14?

2009-09-26 Thread Jie Gao
* Jim Jagielski wrote: > On Sep 23, 2009, at 7:24 PM, Graham Leggett wrote: > > >Hi all, > > > >The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. > > > > Good on Ubuntu 8.10, 9.0.4 > OS X 10.6.1 > Solaris 10 Sparc I am getting errors using Sun's compiler: uname -a SunOS 5

Re: [vote] release httpd-2.2.14?

2009-09-25 Thread Jim Jagielski
On Sep 23, 2009, at 7:24 PM, Graham Leggett wrote: Hi all, The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. Good on Ubuntu 8.10, 9.0.4 OS X 10.6.1 Solaris 10 Sparc +1

Re: [vote] release httpd-2.2.14?

2009-09-25 Thread Graham Leggett
Jim Jagielski wrote: > I'll wait until we know that APR 1.3.9 is OK :) Ok in the sense of? The vote was concluded and APR v1.3.9 officially announced last night, so in that sense it's ok. Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

Re: [vote] release httpd-2.2.14?

2009-09-25 Thread Jim Jagielski
I'll wait until we know that APR 1.3.9 is OK :) On Sep 23, 2009, at 7:24 PM, Graham Leggett wrote: Hi all, The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. This release contains fixes for the following security issues: *) SECURITY: CVE-2009-2699 (cve.mitre.org) Fixe

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Graham Leggett wrote: > +/-1 > [ ] Release httpd-2.2.14 as GA +1 on MacOSX v10.5.8, RHEL5 and FC8. Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Graham Leggett schrieb: > Hi all, > > The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. > > This release contains fixes for the following security issues: > > *) SECURITY: CVE-2009-2699 (cve.mitre.org) > Fixed in APR 1.3.9. Faulty error handling in the Solaris >

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Dan Poirier
Looks good on Mac OS 10.6.1, with a * - gpg signature checks on tar.bz2 download - builds with CC="gcc -arch i386"* - perl test framework passes * Without CC="gcc -arch i386" apr failed some tests (testfmt, one other), so I played it safe and built everything with -arch i386. -- Dan Poirier

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Roy T. Fielding
Oh, for crying out loud, get a grip folks. There is no "standard" md5 file format. It isn't even a good way to validate the build in the first place -- the signature file exists for that purpose. If you don't like the file format, write a friggin perl script to read whatever is there and feed i

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Hi, Graham Leggett schrieb: > Now that a release is being done on a platform other than Linux, > suddenly some people are complaining[1]. > > Not fixing the problem, not submitting patches, just complaining. I hope you dont target me here - I did quickly come up with a patch; might be my patch is

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Jeff Trawick
On Thu, Sep 24, 2009 at 12:12 PM, Graham Leggett wrote: > trawick wrote: > > > Expectations of n users trump some the behavior of a helper script used > > by a few people, for our rather huge values of n. > > Development on httpd is done in the open, and all our processes, > including our release

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Guenter Knauf wrote: > can you please post the commandline which automatically checks with help > of .md5 ? md5 httpd-2.2.14.tar.bz2 | cmp - httpd-2.2.14.tar.bz2.md5 Annoyingly, "openssl md5" and "md5" give the same output, but with whitespace inserted at a different place. In this case, usi

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
trawick wrote: > Expectations of n users trump some the behavior of a helper script used > by a few people, for our rather huge values of n. Development on httpd is done in the open, and all our processes, including our release processes, are transparent, and anybody is free to improve upon our p

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Hi, Graham Leggett schrieb: > As the roll.sh script is the current authoritative mechanism for how md5 > signatures are created, and roll.sh makes no guarantee as to the format > of the md5 file, all claims made to date that the signatures are in the > wrong format are therefore false. agreed, but

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread trawick
On Thu, Sep 24, 2009 at 11:09 AM, Graham Leggett wrote: > Guenter Knauf wrote: > > Can you point out where this is documented? > >>> I'll try to dig that up. > >> If you can, please. > > I think what I meant were the pointers on the download side: > > http://httpd.apache.org/download.cgi > >

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Graham Leggett schrieb: > openssl md5 offers a -verify option to verify the signature, and this > works on a wider set of platforms than md5sum does. can you please post the commandline which automatically checks with help of .md5 ? thanks, Gün.

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Guenter Knauf wrote: Can you point out where this is documented? >>> I'll try to dig that up. >> If you can, please. > I think what I meant were the pointers on the download side: > http://httpd.apache.org/download.cgi > see down last sentence - however its not explained how to check > automa

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Guenter Knauf schrieb: > Graham Leggett schrieb: With the downside that what you propose only works on Linux. >>> huh? nope - these tools are available on Win32 too; and where is a >>> downside at all? >> Ok, now what you propose only works on Linux and Windows. *BSD? MacOSX? >> Others? > http

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Graham Leggett schrieb: > Guenter Knauf wrote: > >>> Can you point out where this is documented? >> I'll try to dig that up. > > If you can, please. I think what I meant were the pointers on the download side: http://httpd.apache.org/download.cgi see down last sentence - however its not explained

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Guenter Knauf wrote: >> Can you point out where this is documented? > I'll try to dig that up. If you can, please. It would be better to use a common format if one does exist. >> With the downside that what you propose only works on Linux. > huh? nope - these tools are available on Win32 too; a

RE: [vote] release httpd-2.2.14?

2009-09-24 Thread Plüm, Rüdiger, VF-Group
> -Original Message- > From: Guenter Knauf > Sent: Donnerstag, 24. September 2009 15:48 > To: dev@httpd.apache.org > Subject: Re: [vote] release httpd-2.2.14? > > Graham Leggett schrieb: > > The checksums are generated by the release.sh script, and >

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Rainer Jung
On 24.09.2009 15:35, Niklas Edmundsson wrote: > On Thu, 24 Sep 2009, Graham Leggett wrote: > >>> The huge benefit of this format is that the binaries can then be checked >>> with same tools (option -c). >> >> With the downside that what you propose only works on Linux. > > Rather, it only works o

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Hi, Graham Leggett schrieb: > Can you point out where this is documented? I'll try to dig that up. >> The huge benefit of this format is that the binaries can then be checked >> with same tools (option -c). > > With the downside that what you propose only works on Linux. huh? nope - these tools a

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Guenter Knauf
Graham Leggett schrieb: > The checksums are generated by the release.sh script, and if they are in > the wrong format, then the release.sh script must be updated to reflect > this. sorry, didnt know; have now checked dist/roll.sh, and see the problem: the md5 checksum file is generated with either

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Rainer Jung
On 24.09.2009 14:38, Graham Leggett wrote: > Guenter Knauf wrote: > >> the checksums are in wrong format. We need to commonly agree how to >> generate checksum files. The documented format what the user expects is: >> >> # cat httpd-2.2.14.tar.bz2.md5 >> a5226203aaf97e5b941c41a71c112704 *httpd-2.2

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Niklas Edmundsson
On Thu, 24 Sep 2009, Graham Leggett wrote: The huge benefit of this format is that the binaries can then be checked with same tools (option -c). With the downside that what you propose only works on Linux. Rather, it only works on platforms where md5sum/sha1sum is installed. Don't confuse t

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Guenter Knauf wrote: > the checksums are in wrong format. We need to commonly agree how to > generate checksum files. The documented format what the user expects is: > > # cat httpd-2.2.14.tar.bz2.md5 > a5226203aaf97e5b941c41a71c112704 *httpd-2.2.14.tar.bz2 > # cat httpd-2.2.14.tar.bz2.sha1 > eac

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Gregg L. Smith
Hello, *) mod_proxy_scgi: Backport from trunk. [André Malo] just in case you didn't know, there is no mod_proxy_scgi makefile/project additions for Windows in SVN branch/tarballs [0] Release httpd-2.2.14 as GA Peace, Gregg

Re: [vote] release httpd-2.2.14?

2009-09-24 Thread Graham Leggett
Guenter Knauf wrote: > the checksums are in wrong format. We need to commonly agree how to > generate checksum files. The documented format what the user expects is: The checksums are generated by the release.sh script, and if they are in the wrong format, then the release.sh script must be updat

Re: [vote] release httpd-2.2.14?

2009-09-23 Thread Guenter Knauf
resend without attachments cause stupid mail server marked as virus ... Hi Graham, Graham Leggett schrieb: > The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. > > This release contains fixes for the following security issues: > > *) SECURITY: CVE-2009-2699 (cve.mitre.org) >

Re: [vote] release httpd-2.2.14?

2009-09-23 Thread Graham Leggett
Graham Leggett wrote: > The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. Tarballs rolled with apr v1.3.9: SHA1(httpd-2.2.14.tar.bz2)= eacd04c87b489231ae708c84a77dc8e9ee176fd2 SHA1(httpd-2.2.14.tar.gz)= e6e20b3fc58a57a5116e036e31bf97d409db7cfa Regards, Graham -- smime.p7s

[vote] release httpd-2.2.14?

2009-09-23 Thread Graham Leggett
Hi all, The tarballs are (will soon be) at http://httpd.apache.org/dev/dist/. This release contains fixes for the following security issues: *) SECURITY: CVE-2009-2699 (cve.mitre.org) Fixed in APR 1.3.9. Faulty error handling in the Solaris pollset support (Event Port backend) which