Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Dennis Clarke

On 1/20/19 6:50 PM, Rainer Jung wrote:

Hi Dennis,
Am 21.01.2019 um 00:34 schrieb Dennis Clarke:

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically 
linked (already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :


I guess you mean for a build that shows the crashes (statically linked 
ones)? Note mine are 32 bit binaries 


OKay, you have a really long list of deps there. I am surprised actually.

and reallyall module set, so lots 
of dependencies.


OKay ... I tend to build a minimal set of modules for the task at hand
to get a decent server going that can run in production without too many
surprises.



The following is from a build against OpenSSL 1.1.1a:



My only builds are now built with OpenSSL 1.1.1a.





     libjansson.so.4 => 
/path/to/install/jansson/2.12-1.solaris10.sparc/lib/libjansson.so.4


Never seen a need for that.

     libcurl.so.4 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/libcurl.so.4


Everyone needs curl!  Who doesn't love curl?  I even have the tee-shirt!

     libssl.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libssl.so.1.1
     libcrypto.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libcrypto.so.1.1
     libpcre.so.1 => 


*nod*


/path/to/install/pcre/8.42-1.solaris10.sparc/lib/libpcre.so.1


I seem to recall having issues with pcre in the distant past but can not
really remember what they were. Something about WordPress having a major
fit all because some pcre feature was not built.  Long past now.

     libdistcache.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libdistcache.so.1


Never ever looked into this one. I'll take a look.

     libnal.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libnal.so.1


Nope .. also never needed it.



     libdl.so.1 =>    /lib/libdl.so.1
     libxml2.so.2 => 
/path/to/install/libxml2/2.9.9-1.solaris10.sparc/lib/libxml2.so.2

     libz.so.1 => /usr/lib/libz.so.1


Yes .. of course.

     libbrotlienc.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlienc.so.1
     libbrotlicommon.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlicommon.so.1


Never needed it.


     libldap.so.5 =>  /usr/lib/libldap.so.5


? LDAP.  Nope.  Never had a need.

     liblua.so.5.3 => 
/path/to/install/lua/5.3.5-1.solaris10.sparc/lib/liblua.so.5.3

     libm.so.2 => /lib/libm.so.2
     libaprutil-1.so.0 => 
/path/to/install/apr-util/1.6.x/1.6.1/solaris10.sparc-modular_enable-apr_1.6.5-dso_enable-expat_2.2.6-1-ldap_explicit-openssl_1.1.1a-1-shared-sqlite_3.26.0-1-bdb_6.1.19-1-mysql_6.1.11-5-oracle_11.2.0.2.0/lib/libaprutil-1.so.0 



OKay the Berkeley db annoys me as I have a long standing love for it but
always run into issues building it from sources.  I have to look into
that one more time.

     libdb-6.1.so => 
/path/to/install/berkeley_db/6.1.19-1.solaris10.sparc/lib/libdb-6.1.so




     libresolv.so.2 =>    /lib/libresolv.so.2


How did you get libresolve thrown into the mix?  Is this connected to a
recent ISC Bind build ?

     libnghttp2.so.14 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/curl-deps/libnghttp2.so.14 


Never tried the new http/2 and not even sure new browsers support it.
Yet another item I need to look into.



Server version: Apache/2.4.38 (Unix)
Server built:   Jan 18 2019 06:28:45
Server's Module Magic Number: 20120211:83
Server loaded:  APR 1.6.5, APR-UTIL 1.6.1
Compiled using: APR 1.6.5, APR-UTIL 1.6.1
Architecture:   32-bit


Right.  Whereas I have long since done everything 64-bit.


Server MPM: event
   threaded: yes (fixed thread count)
     forked: yes (variable process count)
Server compiled with
  -D APR_HAS_SENDFILE
  -D APR_HAS_MMAP
  -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
  -D APR_USE_PROC_PTHREAD_SERIALIZE
  -D APR_USE_PTHREAD_SERIALIZE
  -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
  -D APR_HAS_OTHER_CHILD
  -D AP_HAVE_RELIABLE_PIPED_LOGS
  -D DYNAMIC_MODULE_LIMIT=256
  -D 
HTTPD_ROOT="/path/to/install/httpd/2.4.x/2.4.38/solaris10.sparc-1.6.5-1.6.1-1.1.1a-1-shared-reallyall-static" 

  -D 

Close mbox-cvs@ mailing list?

2019-01-20 Thread sebb
The mbox-cvs@httpd used to be used for mbox commit messages.

However these now seem to be sent to cvs@

AFAICT there is no need to keep the list.

Agreed?

S.


Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Rainer Jung

Hi Dennis,

Am 21.01.2019 um 00:34 schrieb Dennis Clarke:

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically 
linked (already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :


I guess you mean for a build that shows the crashes (statically linked 
ones)? Note mine are 32 bit binaries and reallyall module set, so lots 
of dependencies. The following is from a build against OpenSSL 1.1.1a:



corv # ldd /usr/local/bin/httpd
     libpcre.so.1 =>  /usr/local/lib/libpcre.so.1
     libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0
     libexpat.so.1 => /usr/local/lib/libexpat.so.1
     libiconv.so.2 => /usr/local/lib/libiconv.so.2
     libapr-1.so.0 => /usr/local/lib/libapr-1.so.0
     libuuid.so.1 =>  /lib/64/libuuid.so.1
     libsendfile.so.1 =>  /lib/64/libsendfile.so.1
     librt.so.1 =>    /lib/64/librt.so.1
     libsocket.so.1 =>    /lib/64/libsocket.so.1
     libnsl.so.1 =>   /lib/64/libnsl.so.1
     libpthread.so.1 =>   /lib/64/libpthread.so.1
     libc.so.1 => /lib/64/libc.so.1
     libaio.so.1 =>   /lib/64/libaio.so.1
     libmd.so.1 =>    /lib/64/libmd.so.1
     libmp.so.2 =>    /lib/64/libmp.so.2
     libscf.so.1 =>   /lib/64/libscf.so.1
     libdoor.so.1 =>  /lib/64/libdoor.so.1
     libuutil.so.1 => /lib/64/libuutil.so.1
     libgen.so.1 =>   /lib/64/libgen.so.1
     libm.so.2 => /lib/64/libm.so.2
     /lib/sparcv9/../libm/sparcv9/libm_hwcap1.so.2
     /platform/SUNW,SPARC-Enterprise/lib/sparcv9/libc_psr.so.1


Mine is:

libjansson.so.4 => 
/path/to/install/jansson/2.12-1.solaris10.sparc/lib/libjansson.so.4
libcurl.so.4 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/libcurl.so.4
libssl.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libssl.so.1.1
libcrypto.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libcrypto.so.1.1
libpcre.so.1 => 
/path/to/install/pcre/8.42-1.solaris10.sparc/lib/libpcre.so.1
libdistcache.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libdistcache.so.1
libnal.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libnal.so.1

libdl.so.1 =>/lib/libdl.so.1
libxml2.so.2 => 
/path/to/install/libxml2/2.9.9-1.solaris10.sparc/lib/libxml2.so.2

libz.so.1 => /usr/lib/libz.so.1
libbrotlienc.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlienc.so.1
libbrotlicommon.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlicommon.so.1

libldap.so.5 =>  /usr/lib/libldap.so.5
liblua.so.5.3 => 
/path/to/install/lua/5.3.5-1.solaris10.sparc/lib/liblua.so.5.3

libm.so.2 => /lib/libm.so.2
libaprutil-1.so.0 => 
/path/to/install/apr-util/1.6.x/1.6.1/solaris10.sparc-modular_enable-apr_1.6.5-dso_enable-expat_2.2.6-1-ldap_explicit-openssl_1.1.1a-1-shared-sqlite_3.26.0-1-bdb_6.1.19-1-mysql_6.1.11-5-oracle_11.2.0.2.0/lib/libaprutil-1.so.0
libdb-6.1.so => 
/path/to/install/berkeley_db/6.1.19-1.solaris10.sparc/lib/libdb-6.1.so

libresolv.so.2 =>/lib/libresolv.so.2
libexpat.so.1 => 
/path/to/install/expat/2.2.6-1.solaris10.sparc/lib/libexpat.so.1
libapr-1.so.0 => 
/path/to/install/apr/1.6.x/1.6.5/solaris10.sparc-dso_enable/lib/libapr-1.so.0

libuuid.so.1 =>  /lib/libuuid.so.1
libsendfile.so.1 =>  /lib/libsendfile.so.1
librt.so.1 =>/lib/librt.so.1
libsocket.so.1 =>/lib/libsocket.so.1
libnsl.so.1 =>   /lib/libnsl.so.1
libpthread.so.1 =>   /lib/libpthread.so.1
libc.so.1 => /lib/libc.so.1
libnghttp2.so.14 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/curl-deps/libnghttp2.so.14

libsasl.so.1 =>  /usr/lib/libsasl.so.1
libmd.so.1 =>/lib/libmd.so.1
libnspr4.so =>   /usr/lib/mps/libnspr4.so
libplc4.so =>/usr/lib/mps/libplc4.so
libnss3.so =>/usr/lib/mps/libnss3.so
libssl3.so =>/usr/lib/mps/libssl3.so
libaio.so.1 =>   /lib/libaio.so.1
libmp.so.2 =>/lib/libmp.so.2
libscf.so.1 =>   /lib/libscf.so.1

Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Dennis Clarke

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :

corv # ldd /usr/local/bin/httpd
libpcre.so.1 =>  /usr/local/lib/libpcre.so.1
libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0
libexpat.so.1 => /usr/local/lib/libexpat.so.1
libiconv.so.2 => /usr/local/lib/libiconv.so.2
libapr-1.so.0 => /usr/local/lib/libapr-1.so.0
libuuid.so.1 =>  /lib/64/libuuid.so.1
libsendfile.so.1 =>  /lib/64/libsendfile.so.1
librt.so.1 =>/lib/64/librt.so.1
libsocket.so.1 =>/lib/64/libsocket.so.1
libnsl.so.1 =>   /lib/64/libnsl.so.1
libpthread.so.1 =>   /lib/64/libpthread.so.1
libc.so.1 => /lib/64/libc.so.1
libaio.so.1 =>   /lib/64/libaio.so.1
libmd.so.1 =>/lib/64/libmd.so.1
libmp.so.2 =>/lib/64/libmp.so.2
libscf.so.1 =>   /lib/64/libscf.so.1
libdoor.so.1 =>  /lib/64/libdoor.so.1
libuutil.so.1 => /lib/64/libuutil.so.1
libgen.so.1 =>   /lib/64/libgen.so.1
libm.so.2 => /lib/64/libm.so.2
/lib/sparcv9/../libm/sparcv9/libm_hwcap1.so.2
/platform/SUNW,SPARC-Enterprise/lib/sparcv9/libc_psr.so.1
corv #
corv # /usr/local/bin/httpd -V
Server version: Apache/2.4.38 (Unix)
Server built:   Jan 20 2019 07:23:02
Server's Module Magic Number: 20120211:83
Server loaded:  APR 1.6.5, APR-UTIL 1.6.1
Compiled using: APR 1.6.5, APR-UTIL 1.6.1
Architecture:   64-bit
Server MPM: event
  threaded: yes (fixed thread count)
forked: yes (variable process count)
Server compiled with
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_PROC_PTHREAD_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/usr/local"
 -D SUEXEC_BIN="/usr/local/bin/suexec"
 -D DEFAULT_PIDLOG="www/var/logs/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="www/conf/mime.types"
 -D SERVER_CONFIG_FILE="www/conf/httpd.conf"
corv #

Dennis


Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Noel Butler
> It's not just good, it's good enough!

tongue in cheek here, but... 
shouldn't that be the other way around,  "It's not just good enough,
it's good!"   :) 

-- 
Kind Regards, 

Noel Butler 

This Email, including any attachments, may contain legally 
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
--
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument

Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Rainer Jung

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)


Detailed report:

- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
  except for expected deltas

Built on

- Solaris 10 Sparc as 32 Bit Binaries
- SLES 11+12 (64 Bits)
- RHEL 6+7 (64 Bits)

For all platforms built

- with default (shared) and static modules
- with module set reallyall
- using --enable-load-all-modules
- against external APR/APU 1.6.5/1.6.1

- using external libraries
  - expat 2.2.6
  - pcre 8.42
  - lua 5.3.5 (compiled with LUA_COMPAT_MODULE)
  - distcache 1.5.1
  - libxml2 2.9.9
  - libnghttp2 1.35.1
  - brotli 1.0.7
  - curl 7.63.0
  - jansson 2.12
and
  - openssl 0.9.8zh, 1.0.2q, 1.0.2, 1.0.1e, 1.0.1i, 1.1.1, 1.1.1a

- Tool chain:
- platform gcc except on Solaris
  (gcc 8.2.0 Solaris 10)
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing
  - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE,
-D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__
and -D_XPG6

All of the 126 builds succeeded.

- compiler warnings: none

Tested for

- Solaris 10, SLES 11+12, RHEL 6+7
- MPMs prefork, worker, event
  - prefork skipped on Solaris due to the accept lock problem that
leads to timeouts and thus excessive testing times in the proxy
- default and static module builds
- log level trace8
- module set reallyall
  - for "reallyall" 128 modules plus MPMs
- Perl client bundle build against OpenSSL 1.1.1, 1.1.0i, 1.0.2p and 0.9.8zh
- OpenSSL once linked statically and once as shared library

Every OpenSSL version in the client tested with every version in the 
server, not just the same version.


The total number of test suite runs was 1318 (plus some of them still 
running, the whole suite hasn't finished yet, but enough to come up with 
a clear expectation).


The following test failures were seen:

a Crashes only on Solaris and only with event MPM and static builds.
  The crash seems to happen only at the end of a process, likely due
  to double cleanup of OpenSSL.

b Test 59 of t/modules/include.t only and always on
  Solaris.
  Not a regression
  Old analysis was:
  This is due to a bug in the test, which uses strftime()
  with a "%s" pattern that is not supported on Solaris.
  Until recently the server and the test client both returned
  verbatim "%s" and the test succeeded. After updating some
  Perl modules for the http2 tests, the perl client even
  on Solaris now supports "%s" in strftime and the test starts
  to fail. It seems we have to fix the test.

c Various tests in t/apache/expr_string.t
  Not a regression.
  Test numbers : 6, 11, 14, 17, 20, 23, 26, 29
  Happens for 39 out of about 1300 runs
  (twice on SLES 11, 3 times on Solaris 10, otherwise always on RHEL6).
  The failure is always on line 87, where the error_log contents
  are checked. Could be due to logs written to NFS.

d Test 5 in t/modules/dav.t:
  Not a regression.
  4 times, once Solaris, twice RHEL 6 and once RHEL 7
  Creation, modified and now times not in the correct order.
  This seems to be a system issue, all tests done on NFS,
  many tested on virtualized guests.

e Test 54 in t/modules/cgi.t line 232:
  Twice once Solaris
  Test checks log contents. Could be false positive due to
  logs written to NFS.

f I expect prefork on Solaris still to observe timeouts during
  proxy tests like reported for previous versions, but didn't test
  it this time due to the long test runs when the problem happens.
  I will start these runs after the other ones will have finished
  just to be able to report, whether the old problem is still
  there or has changed.

g t/modules/http2.t fails for client using OpenSSL 0.9.8(zh)
  False positive.
  Calculation for number of tests was wrong in this case,
  so test complained about 52 tests expected but 56 tests run.
  Fixed now in svn.

So apart from the shutdown crashes on Solaris no real problems. I think 
the Solaris shutdown problem is not critical, because only for event 
plus static build (plus probably APU crypto enabled). Already observed 
for 2.4.37.


gdb bt:

#0  do_rand_init_ossl_ () at crypto/rand/rand_lib.c:313
#1  0xfe8b92dc in pthread_once () from /lib/libc.so.1
#2  0xfd9800b4 in CRYPTO_THREAD_run_once (once=0xfdb32088 , 
init=0xfd9738cc ) at crypto/threads_pthread.c:113
#3  0xfd974148 in RAND_set_rand_method (meth=0x0) at 
crypto/rand/rand_lib.c:664

#4  0xfd974220 in rand_cleanup_int () at crypto/rand/rand_lib.c:355
#5  0xfd95f8c4 in 

Re: Latest test builds

2019-01-20 Thread Jim Jagielski
sorry wrong list

> On Jan 19, 2019, at 8:16 PM, Jim Jagielski  wrote:
> 
> I've uploaded the latest test builds for macOS and Linux 64.
> These are based on ~r1851640 and include 2 main updates from
> the earlier one:
> 
>  o beanshell now included
>  o macOS path bug should now be squashed 
> (https://bz.apache.org/ooo/show_bug.cgi?id=127965)
> 
> Let me know if anyone wants me to kick off a Linux 32bit
> build.
> 
> Find them here:
> 
>  http://home.apache.org/~jim/AOO-builds/4.2.0-dev-r1851640/
> 
> Cheers!



Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Yann Ylavic
On Thu, Jan 17, 2019 at 7:49 PM Daniel Ruggeri  wrote:
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.38:

+1: It's not just good, it's good enough!

Tested on Debian(s) 8, 9 and 10 w/ openssl(s) 1.0.2, 1.1.0 and 1.1.1.

Thanks Daniel for RMing!


Re: [VOTE] Release httpd-2.4.38

2019-01-20 Thread Dennis Clarke

On 1/17/19 1:49 PM, Daniel Ruggeri wrote:


I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:



On Solaris 10 SPARC with OpenSSL 1.1.1a and Oracle Studio 12.6 tools :

[x] +1: It's not just good, it's good enough!

Up and running ( testing ) now https://corv.tls13.net/

fun.

Dennis Clarke