About PR56925's fix (was: svn commit: r1682872 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-01 Thread Yann Ylavic
Hi Rainer, On Mon, Jun 1, 2015 at 1:06 PM, rj...@apache.org wrote: @@ -232,14 +238,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: trunk patch: http://svn.apache.org/r1681694 2.4.x patch: trunk works (modulo CHANGES) +1: ylavic + rjung: Would it makes sense to handle

Re: ALPN patch comments

2015-06-01 Thread Rainer Jung
Am 29.04.2015 um 13:05 schrieb Kaspar Brand: I did some formatting cleanup in r1676709 and put a patch for 2.4.x online under https://people.apache.org/~kbrand/mod_ssl-2.4.x-alpn_2015-04-29.diff. This should hopefully make it easier for people to test and review (it's an amalgamation of ten

Re: ALPN patch comments

2015-06-01 Thread Stefan Eissing
It sounds like it could be a vhost thing. SSL_CTX is most likely not global, but maybe unique for a vhost? I am not certain myself, maybe someone else with more knowledge of mod_ssl could pitch in? //Stefan Am 01.06.2015 um 13:04 schrieb Rainer Jung rainer.j...@kippdata.de: Am 29.04.2015

Re: About PR56925's fix (was: svn commit: r1682872 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-01 Thread Rainer Jung
Am 01.06.2015 um 13:36 schrieb Yann Ylavic: Hi Rainer, On Mon, Jun 1, 2015 at 1:06 PM, rj...@apache.org wrote: @@ -232,14 +238,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: trunk patch: http://svn.apache.org/r1681694 2.4.x patch: trunk works (modulo CHANGES) +1: ylavic +

Re: httpd and OpenSSL 1.0.2

2015-06-01 Thread Tom Browder
On Wed, May 27, 2015 at 11:33 AM, Mario Brandt jbl...@gmail.com wrote: Hi Tom, I tried on Debian 7 and 8 both x64 To see your configure options would help a lot. Okay, here's what I had to do to my Linux Deb 7, 64-bit system: 1. Remove any deb packages of httpd, apr, apr-util, openssl. 2.

Re: mod_ssl: Reading dhparams and ecparams not only from the first certificate file

2015-06-01 Thread Rainer Jung
Am 27.05.2015 um 09:33 schrieb Rainer Jung: Am 27.05.2015 um 08:40 schrieb Kaspar Brand: On 26.05.2015 10:33, Rainer Jung wrote: I find it questionable. I would find it more natural to embed the params in the cert files they apply to, so e.g. the DH params in the RSA cert file and the EC

Re: httpd and OpenSSL 1.0.2

2015-06-01 Thread Tom Browder
On Mon, Jun 1, 2015 at 10:22 AM, Tom Browder tom.brow...@gmail.com wrote: Okay, here's what I had to do to my Linux Deb 7, 64-bit system: ... 2. Source packages used (in order of installation): ... pcre2-10.00.tar.bz2 Oops, my error: I had to use pcre-8.36 (httpd cannot yet use pcre2).

Re: httpd and OpenSSL 1.0.2

2015-06-01 Thread Mario Brandt
Hi Tom, since I'm mostly a windows user and sure how to debug that and wasn't successful, it would be nice if you could give me the working script. Thanks Mario

Re: Good at assembler ? (Was:httpd - side channel attack - timing of digest comparisons)

2015-06-01 Thread Yann Ylavic
On Fri, May 29, 2015 at 12:11 PM, Dirk-Willem van Gulik di...@webweaving.org wrote: So if you have the time can read assembler well - can you compile this at a reasonable optimizer setting and look at the assembler to confirm that key elements are not somehow optimized away; i.e. the innner

Re: PMC Reporting [Was: Re: 2.2 and 2.4 and 2.6/3.0]

2015-06-01 Thread Daniel Ruggeri
On 5/30/2015 9:03 PM, William A Rowe Jr wrote: So I'll let Eric share what he submitted for May on our behalf, but here is the submitted/accepted/recorded report of Feb '15 - it's awfully high level, so I'm not sure that updating dev@ regularly with the contents offers a whole lot of

Re: PMC Reporting [Was: Re: 2.2 and 2.4 and 2.6/3.0]

2015-06-01 Thread Eric Covener
There's usually just not much to it. Here's what was last submitted: Report from the Apache HTTP Server project [Eric Covener] ## Description: The Apache HTTP Server Project develops and maintains an open-source HTTP server for modern operating systems. ## Activity: Overall project