[RESULT][VOTE] Release httpd-2.4.39

2019-03-30 Thread Daniel Ruggeri
Hi, all;
   I am pleased to report that the vote has PASSED with the following
recorded votes:
+1: jorton, icing, jim, ylavic, covener, rjung, druggeri
+0: cjaillet (apparent test system issue)

Thanks to everyone who took the time to test and vote as well as the
work that went into the release itself!
I shall forthwith begin the distribution of the release tarball to the
mirrors.

-- 
Daniel Ruggeri

On 3/27/2019 10:09 AM, Daniel Ruggeri wrote:
> Hi, all;
>    Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.39:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
> sha256:
> 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30
> *httpd-2.4.39.tar.gz
>


Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Daniel Ruggeri


On 3/27/2019 10:09 AM, Daniel Ruggeri wrote:
> Hi, all;
>    Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.39:
> [X] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
> sha256:
> 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30
> *httpd-2.4.39.tar.gz
>

+1 from me with the following test system:


  kernel:
    name: Linux
    release: 4.9.0-8-amd64
    version: #1 SMP Debian 4.9.144-3 (2019-02-02)
    machine: x86_64

  libraries:
    openssl: "1.1.1a"
    openldap: "2.4.47"
    apr: "1.6.5"
    apr-util: "1.6.1"
    iconv: "1.2.2"
    brotli: "1.0.7"
    nghttp2: "1.35.1"
    zlib: "1.2.11"
    pcre: "8.42"
    libxml2: "2.9.9"
    php: "7.3.3"
    lua: "5.3.5"
    curl: "7.63.0"

-- 
Daniel Ruggeri



Re: [Bug 60757] mod_proxy_hcheck Doesn't perform checks

2019-03-30 Thread Rainer Jung

Hi Jean-Frederic,

Am 14.02.2019 um 09:15 schrieb root:

https://bz.apache.org/bugzilla/show_bug.cgi?id=60757

jfclere  changed:

What|Removed |Added

  Status|NEEDINFO|RESOLVED
  Resolution|--- |FIXED

--- Comment #20 from jfclere  ---
Fixed by r1853560 in trunk, will propose a back port later.


did you plan to propose that backport? r1853560 and the unrelated 
r1853992 (same file) have not been backported yet.


Regards,

Rainer



Re: [VOTE] Release httpd-2.4.39

2019-03-30 Thread Rainer Jung

Am 27.03.2019 um 16:09 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.39:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha1: e66d6bfea42254e64d3b5009f49ecc486ac46de2 *httpd-2.4.39.tar.gz
sha256: 8b95fe249f3a6c50aad3ca125eef3e02d619116cde242e1bc3c266b7b5c37c30 
*httpd-2.4.39.tar.gz


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)


- not tested but still expected to happen: problems with prefork plus 
mod_ext_filter plus LimitRequestBody  on Solaris (not a regression)


Detailed report:

- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
  except for expected deltas

Built on

- Solaris 10 Sparc as 32 Bit Binaries
- SLES 11+12 (64 Bits)
- RHEL 6+7 (64 Bits)

For all platforms built

- with default (shared) and static modules
- with module set reallyall
- using --enable-load-all-modules
- against external APR/APU 1.6.5/1.6.1

- using external libraries
  - expat 2.2.6
  - pcre 8.43
  - lua 5.3.5 (compiled with LUA_COMPAT_MODULE)
  - distcache 1.5.1
  - libxml2 2.9.9
  - libnghttp2 1.37.0
  - brotli 1.0.7
  - curl 7.64.1
  - jansson 2.12
and
  - openssl 0.9.8zh, 1.0.2, 1.0.2r plus patches (head), 1.0.1e, 1.0.1j 
plus patches (head), 1.1.1, 1.1.1b plus patches (head)


- Tool chain:
- platform gcc except on Solaris
  (gcc 8.2.0 Solaris 10)
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing
  - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE,
-D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__
and -D_XPG6

All of the 126 builds succeeded.

- compiler warnings: none

Tested for

- Solaris 10, SLES 11+12, RHEL 6+7
- MPMs prefork, worker, event
- default and static module builds
- log level trace8
- module set reallyall
  - for "reallyall" 129 modules plus MPMs
- Perl client bundle build against OpenSSL 1.1.1, 1.1.0i, 1.0.2p and 0.9.8zh
- OpenSSL once linked statically and once as a shared library

Every OpenSSL version in the client tested with every version in the 
server, not just the same version.


The total number of test suite runs was 1366 (plus some on Solaris still 
running, the whole suite hasn't finished yet, but enough to come up with 
a clear expectation).


The following test failures were seen:

a Crashes only on Solaris and only with event MPM and static builds.
  The crash seems to happen only at the end of a process, likely due
  to double cleanup of the various OpenSSL instances that are
  contained in the process.

b Tests 4, 8 and 12 of t/modules/buffer.t
  Not a regression
  Relatively frequent (725) failures on all platforms for all OpenSSL
  client and server versions.
  See earlier list discussions about buffer.t.

c Various tests in t/apache/expr_string.t
  Not a regression.
  Test numbers : 6, 11, 14, 17, 20, 23, 26, 29
  Happens for 61 out of about 1350 runs
  (4 times on SLES 11, 2 times on Solaris 10,
   otherwise always on RHEL6).
  The failure is always on line 87, where the error_log contents
  are checked. Could be due to logs written to NFS.

d Test 5 in t/modules/dav.t:
  Not a regression.
  once RHEL 6 and once SLES 11
  Creation, modified and now times not in the correct order.
  This seems to be a system issue, all tests done on NFS,
  many tested on virtualized guests.

e Test 54 in t/modules/cgi.t line 232:
  Not a regression
  8 times once Solaris
  Test checks log contents. Could be false positive due to
  logs written to NFS.

Regards,

Rainer