Re: Empty cookies [Was Re: libapreq2 co-maintainer]

2012-06-21 Thread Joe Schaefer
apreq does the right thing now by both throwing an exception (indicating a malformed cookie) and parsing the header correctly.  This is a very old subject: Thomas should be using eval like so:    $apreq = APR::Request::Apache2-handle($r);    my $jar = eval { $apreq-jar };    $jar = $@-jar if $@;  

How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Hi, I am (still) working on a module that uses another commercial shared object library (.so). I use the following to successfully build the module (currently, just tweaking mod_headers.c for testing): /apps/httpd/bin/apxs -L /apps/netpoint/AccessServerSDK/oblix/lib/ -c -i -a

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Sorin Manolache
On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that, it says it can't find the .so: [root@apachemodule build-mod_headers]# ./compile-mod-headers.sh /apps/httpd/build/libtool --silent --mode=compile gcc -prefer-pic

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Anthony Whitehead
Jim, Have you looked at the LoadFile directive, sometime that can be of use for third party libraries. http://httpd.apache.org/docs/2.4/mod/mod_so.html#loadfile /Ant On 21 June 2012 20:19, oh...@cox.net wrote: Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
oh...@cox.net wrote: Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that, it says it can't find the .so: [root@apachemodule build-mod_headers]#

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Ben Noordhuis
On Thu, Jun 21, 2012 at 8:43 PM, oh...@cox.net wrote: I tried that, which allowed me to start Apache, but am getting a segfault. Run it through gdb and inspect the backtrace. Compiling with debug symbols and optimizations disabled (-g -O0) will help.

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
oh...@cox.net wrote: Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that, it says it can't find the .so: [root@apachemodule build-mod_headers]#

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that, it says it can't find the .so:

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Sorin Manolache
On 2012-06-21 22:04, oh...@cox.net wrote: Ben Noordhuis i...@bnoordhuis.nl wrote: On Thu, Jun 21, 2012 at 8:43 PM, oh...@cox.net wrote: I tried that, which allowed me to start Apache, but am getting a segfault. Run it through gdb and inspect the backtrace. Compiling with debug symbols

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 1:40 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolachesor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that,

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Sorin Manolache
On 2012-06-21 22:22, oh...@cox.net wrote: [root@apachemodule bin]# gdb httpd GNU gdb Red Hat Linux (6.3.0.0-1.162.el4rh) Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 22:04, oh...@cox.net wrote: Ben Noordhuis i...@bnoordhuis.nl wrote: On Thu, Jun 21, 2012 at 8:43 PM, oh...@cox.net wrote: I tried that, which allowed me to start Apache, but am getting a segfault. Run it through gdb

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Sorin Manolache
And I forgot to say: run gdb in some sort of environment where you see your current source code line and a couple of surrounding lines. You could achieve this with the list command, but I prefer running gdb in emacs and let emacs do the nice listing of source code in a different panel. S

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Sorin Manolache sor...@gmail.com wrote: And I forgot to say: run gdb in some sort of environment where you see your current source code line and a couple of surrounding lines. You could achieve this with the list command, but I prefer running gdb in emacs and let emacs do the nice

ap_run_log_transaction() appears to run prior to request finishing

2012-06-21 Thread Paul Stengel
Hello, I am developing a module which extends mod_log_config and provides a custom log format for CPU time elapsed per request. In order to do this, once the request reaches the ap_run_log_transaction() hook, the Apache worker must apr_proc_wait() for any child processes related to the request to

Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Joe Lewis
On 6/21/12 5:49 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolachesor...@gmail.com wrote: And I forgot to say: run gdb in some sort of environment where you see your current source code line and a couple of surrounding lines. You could achieve this with the list command,

UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 5:49 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolachesor...@gmail.com wrote: And I forgot to say: run gdb in some sort of environment where you see your current source code line and a couple of surrounding

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
oh...@cox.net wrote: Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 5:49 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolachesor...@gmail.com wrote: And I forgot to say: run gdb in some sort of environment where you see your current source code

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 6:46 PM, oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 5:49 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin Manolachesor...@gmail.com wrote: And I forgot to say: run gdb in some sort of

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Ben Noordhuis
On Fri, Jun 22, 2012 at 3:32 AM, oh...@cox.net wrote: Program received signal SIGSEGV, Segmentation fault. 0x003518d6c1e1 in BN_num_bits () from /lib64/libcrypto.so.4 So, it's actually blowing up in BN_num_bits() in /lib64/libcrypto.so.4? Type `bt full` and you'll get a backtrace +

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Joe Lewis
On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 6:46 PM, oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 5:49 PM, oh...@cox.net wrote: oh...@cox.net wrote: Sorin

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 6:46 PM, oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 5:49 PM, oh...@cox.net wrote:

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 6:46 PM, oh...@cox.net wrote: Joe

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Joe Lewis
On 6/21/12 9:39 PM, oh...@cox.net wrote: oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 6:46 PM, oh...@cox.net wrote:

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Joe Lewis j...@joe-lewis.com wrote: On 6/21/12 9:39 PM, oh...@cox.net wrote: oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote:

Re: UNSOLVED was Re: SOLVED was Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread Joe Lewis
On 6/21/12 10:02 PM, oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 9:39 PM, oh...@cox.net wrote: oh...@cox.net wrote: oh...@cox.net wrote: Joe Lewisj...@joe-lewis.com wrote: On 6/21/12 7:32 PM, oh...@cox.net wrote: oh...@cox.net wrote:

Re: md5crypt passwords

2012-06-21 Thread Ben Laurie
On Wed, Jun 20, 2012 at 1:25 PM, Nick Edwards nick.z.edwa...@gmail.com wrote: Hello, I posted this to users list last week but no-one bit, so I'm trying here. With md5crypt no longer recommended for use by its author, will Apache soon support sha256/sha512 in basic authentication via MySQL.

Re: md5crypt passwords

2012-06-21 Thread Issac Goldstand
On 21/06/2012 12:40, Ben Laurie wrote: 4. Use something that is hard to optimise in hardware (ideally). And what about massive sites that need the crypto HW to manage the concurrent logins? Yes, you're making it harder on the hackers, but also potentially on our users. ...Or did I just put my

Re: md5crypt passwords

2012-06-21 Thread Ben Laurie
On Thu, Jun 21, 2012 at 10:53 AM, Issac Goldstand mar...@beamartyr.net wrote: On 21/06/2012 12:40, Ben Laurie wrote: 4. Use something that is hard to optimise in hardware (ideally). And what about massive sites that need the crypto HW to manage the concurrent logins? I have never come across

Re: md5crypt passwords

2012-06-21 Thread Noel Butler
On Thu, 2012-06-21 at 10:40 +0100, Ben Laurie wrote: 4. Use something that is hard to optimise in hardware (ideally). 5. Only hire web developers who know what they're doing, who know what security is, and how to audit their code :) If they cant get the database, then it wouldn't mater if

Re: md5crypt passwords

2012-06-21 Thread Noel Butler
On Thu, 2012-06-21 at 10:57 +0100, Ben Laurie wrote: On Thu, Jun 21, 2012 at 10:53 AM, Issac Goldstand mar...@beamartyr.net wrote: On 21/06/2012 12:40, Ben Laurie wrote: 4. Use something that is hard to optimise in hardware (ideally). And what about massive sites that need the crypto HW

Re: md5crypt passwords

2012-06-21 Thread André Malo
* Reindl Harald wrote: i only needed to point out that weakhash(weakhash(weakhash())) does not result in stronghash() no matter how often you wrap I'm not sure, why the topic drifted there anyway. md5crypt does not actually nest hashes like this. nd -- package

Re: How to compiling/link/use Apache module that uses shared library?

2012-06-21 Thread ohaya
Sorin Manolache sor...@gmail.com wrote: On 2012-06-21 19:47, oh...@cox.net wrote: I've tried using -l pointing directly to the .so, libobaccess.so, but when I do that, it says it can't find the .so: [root@apachemodule build-mod_headers]# ./compile-mod-headers.sh

Empty cookies [Was Re: libapreq2 co-maintainer]

2012-06-21 Thread Issac Goldstand
On 20/06/2012 14:19, Thomas Busch wrote: On 20/06/2012 13:35, Thomas Busch wrote: The reason I'm asking is that the following bug https://rt.cpan.org/Public/Bug/Display.html?id=69866 hasn't been solved and is still causing Internal Server Error's on a lot of mod_perl installation. I see

Re: md5crypt passwords

2012-06-21 Thread Nick Edwards
Hi Stefan, On 6/21/12, Stefan Fritsch s...@sfritsch.de wrote: On Wed, 20 Jun 2012, Nick Edwards wrote: I posted this to users list last week but no-one bit, so I'm trying here. With md5crypt no longer recommended for use by its author, will Apache soon support sha256/sha512 in basic

Re: LimitRequestFieldSize: spurious note about max value?

2012-06-21 Thread Bojan Smojver
On Tue, 2012-06-19 at 15:42 +1000, Bojan Smojver wrote: Docs contain this note for LimitRequestFieldSize directive: noteUnder normal conditions, the value should not be changed from the default. Also, you can't set this higher than 8190 without modifying the source code and