Re: Apache 2.2 coredumping on Solaris with Subversion 1.6

2009-11-10 Thread Jens Frey
Per my knowledge this is the apr source tar ball that was used. How do I find the 'installed' apr and use that instead? Posted here because I didn't get any response on the users list and this seemed to be a modules issue. Do let me know and Ill continue the posting there. thanks Maybe you

post-config phase question

2009-11-10 Thread Michael Durket
Based on the few books that describe Apache module writing and a presentation that I've found on the web from an Apache conference, the advice to module writers is to remember that Apache calls the post-config phase twice - once while it's checking its configuration files, and then when it's

Re: post-config phase question

2009-11-10 Thread Sorin Manolache
On Tue, Nov 10, 2009 at 23:40, Michael Durket dur...@highwire.stanford.edu wrote: Based on the few books that describe Apache module writing and a presentation that I've found on the web from an Apache conference, the advice to module writers is to remember that Apache calls the post-config

Re: Httpd 3.0 or something else

2009-11-10 Thread Niklas Edmundsson
On Mon, 9 Nov 2009, Graham Leggett wrote: Akins, Brian wrote: FWIW, nginx buffers backend stuff to a file, then sendfiles it out - I think this is what perlbal does as well. Same can be done outside apache using X-sendfile like methods. Seems like we could move this inside apache fairly

Crash in Apache Core

2009-11-10 Thread ef-lists
Hi folks, I think I found a bug in either the Apache core or mod_proxy_fcgi otherwise. First, let me describe my scenario: I run Apache 2.2.14 on a Debian (2.6.28-2-amd64) box. As I have a urgent need for mod_proxy_fcgi, I tried a backport by copying mod_proxy_fcgi.c and fcgi_protocol.h to

Re: [PATCH] mod_ssl: improving session caching for SNI configurations

2009-11-10 Thread Joe Orton
On Mon, Nov 09, 2009 at 07:06:16PM +0100, Kaspar Brand wrote: Dr Stephen Henson wrote: Yes that looks better. There is an alternative technique if it is easier to find a base SSL_CTX, you can retrieve the auto generated keys using SSL_CTX_get_tlsext_ticket_keys() and then copy to the new

Re: intend to roll 2.3 alpha on Wednesday

2009-11-10 Thread Niklas Edmundsson
On Mon, 9 Nov 2009, Nick Kew wrote: Graham Leggett wrote: Is there a need to bundle APR at all? Yep, let's draw a line under that. APR is a dependency, not a component. I assume that there still is a mechanism corresponding to --with-included-apr? On a distro with bundled APR version X

Re: mod_fcgid: different instances of the same program

2009-11-10 Thread Jeff Trawick
On Mon, Nov 9, 2009 at 8:28 PM, pqf p...@mailtech.cn wrote: Hi,    Yes, mod_fcgid search process node base on file's inode and deviceid(plus share_group_id, virtual host name). The goal is to create as less process as possible. Some administrators like the idea that all virtual hosts share one

Re: TLS renegotiation attack, mod_ssl and OpenSSL

2009-11-10 Thread Jean-Marc Desperrier
Joe Orton wrote: On Fri, Nov 06, 2009 at 12:00:06AM +, Joe Orton wrote: On Thu, Nov 05, 2009 at 09:31:00PM +, Joe Orton wrote: * we can detect in mod_ssl when the client is renegotiating by using the callback installed using SSL_CTX_set_info_callback(), in conjunction

Re: TLS renegotiation attack, mod_ssl and OpenSSL

2009-11-10 Thread Joe Orton
On Tue, Nov 10, 2009 at 03:19:39PM +0100, Jean-Marc Desperrier wrote: Joe Orton wrote: On Fri, Nov 06, 2009 at 12:00:06AM +, Joe Orton wrote: On Thu, Nov 05, 2009 at 09:31:00PM +, Joe Orton wrote: * we can detect in mod_ssl when the client is renegotiating by using the

TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l

2009-11-10 Thread Jean-Marc Desperrier
Hi, So when Apache is compiled with openssl 0.9.8l, TLS renegotiation will be fully disabled. But the problem with that if that some comments of the discussion inside https://issues.apache.org/bugzilla/show_bug.cgi?id=39243 are true, this change will unexpectedly break very badly a *lot* of

Re: svn commit: r834013 - /httpd/httpd/trunk/modules/loggers/mod_log_config.c

2009-11-10 Thread Stefan Fritsch
On Monday 09 November 2009, Jeff Trawick wrote: leading WS */ +last = value + strlen(value); doesn't this expression set last to point to the trailing '\0' instead of the last character +while (last = value apr_isspace(*last)) { such that this loop is

Re: svn commit: r834049 - in /httpd/httpd/trunk: CHANGES modules/dav/fs/lock.c modules/dav/fs/repos.c

2009-11-10 Thread Stefan Fritsch
On Monday 09 November 2009, Greg Stein wrote: On Mon, Nov 9, 2009 at 14:46, Stefan Fritsch s...@sfritsch.de wrote: On Monday 09 November 2009, Greg Stein wrote: Why did you go with a format change of the DAVLockDB? It is quite possible that people will miss that step during an upgrade.

Re: Httpd 3.0 or something else

2009-11-10 Thread Akins, Brian
On 11/9/09 3:08 PM, Greg Stein gst...@gmail.com wrote: 2) If you have 10,000 client connections, and some number of sockets in the system ready for read/write... how do you quickly determine *which* buckets to poll to get those sockets processed? You don't want to poll idle

Re: svn commit: r834378 - in /httpd/httpd/trunk: CHANGES docs/conf/extra/httpd-ssl.conf.in modules/ssl/mod_ssl.c modules/ssl/ssl_engine_init.c modules/ssl/ssl_engine_kernel.c modules/ssl/ssl_private.h

2009-11-10 Thread Stefan Fritsch
On Tue, 10 Nov 2009, scte...@apache.org wrote: Author: sctemme Date: Tue Nov 10 07:55:13 2009 New Revision: 834378 URL: http://svn.apache.org/viewvc?rev=834378view=rev Log: enable support for ECC keys and ECDH ciphers. Tested against OpenSSL 1.0.0b3. [Vipul Gupta vipul.gupta sun.com, Sander

Re: Httpd 3.0 or something else

2009-11-10 Thread Graham Leggett
Paul Querna wrote: But Serf Buckets and the event loop definitely do need some more work -- simple things, like if the backend bucket is a socket, how do you tell the event loop, that a would block rvalue maps to a file descriptor talking to an origin server. You don't want to just keep

Re: Httpd 3.0 or something else

2009-11-10 Thread Graham Leggett
Greg Stein wrote: I am also concerned about the patterns of sendfile() in the current serf bucket archittecture, and making a whole pipeline do sendfile correctly seems quite difficult. Well... it generally *is* quite difficult in the presence of SSL, gzip, and chunking. Invariably,

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Mon, Nov 9, 2009 at 18:47, Graham Leggett minf...@sharp.fm wrote: ... When you read from a serf bucket, it will return however much you ask for, or as much as it has without blocking. When it gives you that data, it can say I have more, I'm done, or This is what I had without blocking.

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Tue, Nov 10, 2009 at 11:14, Akins, Brian brian.ak...@turner.com wrote: On 11/9/09 3:08 PM, Greg Stein gst...@gmail.com wrote: 2) If you have 10,000 client connections, and some number of sockets in the system ready for read/write... how do you quickly determine *which* buckets to poll to

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Tue, Nov 10, 2009 at 12:01, Jim Jagielski j...@jagunet.com wrote: On Nov 9, 2009, at 2:19 PM, Akins, Brian wrote: On 11/9/09 2:06 PM, Greg Stein gst...@gmail.com wrote: These issues are already solved by moving to a Serf core. It is fully asynchronous. Okay that's one convert, any

Re: Httpd 3.0 or something else

2009-11-10 Thread Graham Leggett
Greg Stein wrote: Who is you? Anybody who reads from a bucket. In this case, the core network loop when a client connection is ready for writing. So would it be correct to say that in this theoretical httpd, the httpd core, and nobody else, would read from the serf bucket? Up till now, my

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Tue, Nov 10, 2009 at 12:54, Graham Leggett minf...@sharp.fm wrote: Greg Stein wrote: Who is you? Anybody who reads from a bucket. In this case, the core network loop when a client connection is ready for writing. So would it be correct to say that in this theoretical httpd, the httpd

mod_fcgid 2.3.4 problem with uploading data 64k

2009-11-10 Thread Dan Hulme
I have been able to confirm this bug but have not designed a test case.  It should be fairly easy to duplicate, however.  My particular test case was using phpicalendar 2.31 with publish.php on Sunbird calendars.  Previously, this worked fine, but upon using fcgid 2.3.4, I started getting calendar

Re: mod_fcgid 2.3.4 problem with uploading data 64k

2009-11-10 Thread Jeff Trawick
On Tue, Nov 10, 2009 at 4:24 PM, Dan Hulme dhu...@gmail.com wrote: I have been able to confirm this bug but have not designed a test case.  It should be fairly easy to duplicate, however.  My particular test case was using phpicalendar 2.31 with publish.php on Sunbird calendars.  Previously,

Re: Httpd 3.0 or something else

2009-11-10 Thread Lieven Govaerts
On Tue, Nov 10, 2009 at 6:10 PM, Greg Stein gst...@gmail.com wrote: On Tue, Nov 10, 2009 at 11:14, Akins, Brian brian.ak...@turner.com wrote: On 11/9/09 3:08 PM, Greg Stein gst...@gmail.com wrote: 2) If you have 10,000 client connections, and some number of sockets in the system ready for

Re: mod_fcgid 2.3.4 problem with uploading data 64k

2009-11-10 Thread Dan Hulme
Aha, thank you! This is the bug, indeed. -Dan On Tue, Nov 10, 2009 at 1:27 PM, Jeff Trawick traw...@gmail.com wrote: On Tue, Nov 10, 2009 at 4:24 PM, Dan Hulme dhu...@gmail.com wrote: I have been able to confirm this bug but have not designed a test case.  It should be fairly easy to

Re: intend to roll 2.3 alpha on Wednesday

2009-11-10 Thread Paul Querna
On Tue, Nov 10, 2009 at 3:40 AM, Niklas Edmundsson ni...@acc.umu.se wrote: On Mon, 9 Nov 2009, Nick Kew wrote: Graham Leggett wrote: Is there a need to bundle APR at all? Yep, let's draw a line under that.  APR is a dependency, not a component. I assume that there still is a mechanism

Re: Httpd 3.0 or something else

2009-11-10 Thread Akins, Brian
On 11/10/09 1:56 PM, Greg Stein gst...@gmail.com wrote: But some buckets might be performing gzip or SSL encryption. That consumes CPU within the network thread. You could just run x times CPU cores number of network threads. You can't use more than 100% of a CPU anyway. The model that some

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Tue, Nov 10, 2009 at 16:33, Lieven Govaerts svn...@mobsol.be wrote: On Tue, Nov 10, 2009 at 6:10 PM, Greg Stein gst...@gmail.com wrote: ... You have 10k buckets representing the response for 10k clients. The core loop reads the response from the bucket, and writes that to the network.

Re: Httpd 3.0 or something else

2009-11-10 Thread Greg Stein
On Tue, Nov 10, 2009 at 17:30, Akins, Brian brian.ak...@turner.com wrote: On 11/10/09 1:56 PM, Greg Stein gst...@gmail.com wrote: But some buckets might be performing gzip or SSL encryption. That consumes CPU within the network thread. You could just run x times CPU cores number of network

Re: svn commit: r830765 - /httpd/httpd/trunk/modules/ssl/ssl_toolkit_compat.h

2009-11-10 Thread William A. Rowe Jr.
Guenter Knauf wrote: AC_DEFUN([CHECK_OCSP], [ AC_CHECK_HEADERS(openssl/ocsp.h,· [AC_DEFINE([HAVE_OCSP], 1, [Define if OCSP is supported by OpenSSL])] ) ]) This seems like a very wordy way of expressing AC_CHECK_HEADERS(openssl/ocsp.h)

Re: static analysis of httpd

2009-11-10 Thread William A. Rowe Jr.
Paul Querna wrote: on request, here is mod_fcgid: http://zeus.kimaker.com/~chip/fcgid-scan/ mod_ftp would also interest me, at least

Re: How does this Known Problem in Clients solve?

2009-11-10 Thread William A. Rowe Jr.
dreamice wrote: Trailing CRLF on POSTs This is a legacy issue. The CERN webserver required POST data to have an extra CRLF following it. Thus many clients send an extra CRLF that is not included in the Content-Length of the request. Apache works around this problem by eating any empty lines

Re: mod_fcgid: add mod_status support?

2009-11-10 Thread William A. Rowe Jr.
Jeff Trawick wrote: 2009/11/9 pqf p...@mailtech.cn: Hi, all I am new to this community, I am think to add mod_status support to mod_fcgid, which provide more internal information to administrators. Is it a good idea? I am working on it now, but if someone think it's not a good idea,

Re: Httpd 3.0 or something else

2009-11-10 Thread William A. Rowe Jr.
Graham Leggett wrote: - Supporting prefork as httpd does now; and I'm very happy to see prefork die it's timely death. Let's go about working out where out-of-process magic happens. Gated, single threaded handlers may be sensible in some cases. But for the core server it makes async worthless,

Re: Httpd 3.0 or something else

2009-11-10 Thread William A. Rowe Jr.
Greg Stein wrote: On Mon, Nov 9, 2009 at 14:21, Paul Querna p...@querna.org wrote: ... I agree in general, a serf-based core does give us a good start. But Serf Buckets and the event loop definitely do need some more work -- simple things, like if the backend bucket is a socket, how do you

Re: Httpd 3.0 or something else

2009-11-10 Thread Basant Kukreja
On Tue, Nov 10, 2009 at 05:30:34PM -0500, Akins, Brian wrote: On 11/10/09 1:56 PM, Greg Stein gst...@gmail.com wrote: But some buckets might be performing gzip or SSL encryption. That consumes CPU within the network thread. You could just run x times CPU cores number of network