Re: Bash CVE-2014-6271 and CGI / HTTPD

2014-09-24 Thread Rainer Jung
Am 24.09.2014 um 22:21 schrieb Rainer Jung: Am 24.09.2014 um 22:15 schrieb Rainer Jung: Am 24.09.2014 um 20:20 schrieb Eric Covener: On Wed, Sep 24, 2014 at 1:48 PM, Paul Querna p...@querna.org mailto:p...@querna.org wrote: Thoughts? Is it reasonable to do something in mod_cgi{d

Re: Bash CVE-2014-6271 and CGI / HTTPD

2014-09-24 Thread Rainer Jung
Am 24.09.2014 um 23:29 schrieb Yann Ylavic: On Wed, Sep 24, 2014 at 11:15 PM, Rainer Jung rainer.j...@kippdata.de wrote: A workaround like --- server/util_script.c.orig 2013-09-14 14:12:54.0 + +++ server/util_script.c2014-09-24 20:35:54.952054361 + @@ -128,6 +128,12

Re: Bash CVE-2014-6271 and CGI / HTTPD

2014-09-24 Thread Rainer Jung
Am 24.09.2014 um 23:15 schrieb Rainer Jung: Am 24.09.2014 um 22:21 schrieb Rainer Jung: Am 24.09.2014 um 22:15 schrieb Rainer Jung: Am 24.09.2014 um 20:20 schrieb Eric Covener: On Wed, Sep 24, 2014 at 1:48 PM, Paul Querna p...@querna.org mailto:p...@querna.org wrote: Thoughts

Re: svn commit: r1622429 - /httpd/httpd/branches/2.4.x/STATUS

2014-09-08 Thread Rainer Jung
Am 04.09.2014 um 12:13 schrieb Ruediger Pluem: Can we really backport this? We are increasing the size of proxy_worker_shared and changing offsets inside the struct. I documented a woraround for the problem of short proxy URLs in BZ53218. It should be applicable in many cases. It is based

Re: svn commit: r1622429 - /httpd/httpd/branches/2.4.x/STATUS

2014-09-04 Thread Rainer Jung
Am 04.09.2014 um 12:13 schrieb Ruediger Pluem: Can we really backport this? We are increasing the size of proxy_worker_shared and changing offsets inside the struct. Bummer, I guess you are right. mod_proxy.h seems to be part of the public API so we can't backport like this. Will revoke the

Re: Test failure on 2.4-HEAD

2014-08-26 Thread Rainer Jung
Am 26.08.2014 um 17:02 schrieb Eric Covener: On Tue, Aug 26, 2014 at 10:51 AM, Jim Jagielski j...@jagunet.com wrote: Anyone else seeing this with HEAD of 2.4? # testing : trailer (pid) # expected: '67568' # received: 'No chunked trailer available!' not ok 3 # Failed test 3 in

Re: svn commit: r1615289 - in /httpd/httpd/trunk: CHANGES modules/proxy/mod_proxy_http.c

2014-08-25 Thread Rainer Jung
Am 21.08.2014 um 14:57 schrieb Yann Ylavic: On Sat, Aug 2, 2014 at 10:24 AM, rj...@apache.org wrote: Author: rjung Date: Sat Aug 2 08:24:35 2014 New Revision: 1615289 URL: http://svn.apache.org/r1615289 Log: PR53420: Proxy responses with error status and ProxyErrorOverride On hang until

Re: [VOTE] Release 2.2.29 as GA?

2014-08-25 Thread Rainer Jung
Am 22.08.2014 um 19:59 schrieb William A. Rowe Jr.: The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild of the docs/manual/ since 2.2.28, can be found in; http://httpd.apache.org/dev/dist/ +/-1 [ X] Release 2.2.29 (apr 1.5.1, apr-util 1.5.3) +1 to release,

PR 53420 (Proxy plus EOS handling when calling ap_discard_request_body)

2014-08-01 Thread Rainer Jung
I investigated PR53420 (https://issues.apache.org/bugzilla/show_bug.cgi?id=53420), see my last reply there. Using proxy in combination with ProxyErrorOverride shows a hang until the proxy timeout fires. The hang happens, when the proxy calls ap_discard_request_body to discard the origin

Re: FYI: build status of AIX 2.4.10

2014-08-01 Thread Rainer Jung
Am 01.08.2014 um 18:44 schrieb Eric Covener: On Fri, Aug 1, 2014 at 12:35 PM, Michael Felt mamf...@gmail.com wrote: btw: I ran (as best I could) ApacheTest against 2.4.10. On the one hand, all tests it did passed, but it skipped several, which surprises me somewhat - because I thought I had all

Re: svn commit: r1612921 - in /httpd/httpd/trunk: configure.in server/util_pcre.c

2014-07-24 Thread Rainer Jung
Am 24.07.2014 um 02:39 schrieb Takashi Sato: --- httpd/httpd/trunk/configure.in (original) +++ httpd/httpd/trunk/configure.in Wed Jul 23 19:01:45 2014 @@ -236,7 +236,9 @@ if test $PCRE_CONFIG != false; then fi case `$PCRE_CONFIG --version` in [[1-5].*]) -AC_MSG_ERROR([Need at

Re: svn commit: r1612940 - /httpd/httpd/trunk/include/ap_regex.h

2014-07-24 Thread Rainer Jung
Am 24.07.2014 um 11:56 schrieb Takashi Sato: --- httpd/httpd/trunk/include/ap_regex.h (original) +++ httpd/httpd/trunk/include/ap_regex.h Wed Jul 23 20:27:32 2014 @@ -79,6 +79,12 @@ extern C { #define AP_REG_MATCH MATCH_ /** suggested prefix for ap_regname */ +/* Arguments for

Re: svn commit: r1612653 - /httpd/httpd/trunk/server/util_pcre.c

2014-07-23 Thread Rainer Jung
On 23.07.2014 02:25, Guenter Knauf wrote: Hi Rainer, On 22.07.2014 23:01, Rainer Jung wrote: documenting the requirement PCRE = 6.7 and dropping the check (and error message) for PCRE_DUPNAMES from server/util_pcre.c. -1. Please think of non-configure builds; it doesnt hurt if the code errors

Re: svn commit: r1612653 - /httpd/httpd/trunk/server/util_pcre.c

2014-07-22 Thread Rainer Jung
On 22.07.2014 22:20, Christophe JAILLET wrote: Hi, shouldn't the #error just a few lines below be updated as well, to be more explicit than too old ? You are right. But what about instead changing the configure pcre version test: Index: configure.in

Re: [VOTE] Release Apache httpd 2.4.10 as GA

2014-07-18 Thread Rainer Jung
On 15.07.2014 19:20, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.10 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.10 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.10 as GA

2014-07-16 Thread Rainer Jung
On 15.07.2014 19:20, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.10 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.10 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: mod_ssl SSL session timeout

2014-07-13 Thread Rainer Jung
On 15.06.2014 09:51, Kaspar Brand wrote: On 14.06.2014 12:53, Rainer Jung wrote: I'm slightly in favor of the latter, i.e. something like SSL_CTX_set_timeout(sc-server-ssl_ctx, sc-session_cache_timeout == UNSET

Re: mod_ssl SSL session timeout

2014-06-14 Thread Rainer Jung
On 14.06.2014 10:23, Kaspar Brand wrote: On 13.06.2014 16:55, Rainer Jung wrote: Now since a long time most clients do no longer rely on the server caching the sessions. Instead they use TLS session resumption (RFC 5077). without server-side state/stateless is actually the important term

Re: mod_ssl SSL session timeout

2014-06-14 Thread Rainer Jung
On 14.06.2014 11:44, Rainer Jung wrote: On 14.06.2014 10:23, Kaspar Brand wrote: On 13.06.2014 16:55, Rainer Jung wrote: Now since a long time most clients do no longer rely on the server caching the sessions. Instead they use TLS session resumption (RFC 5077). without server-side state

mod_ssl SSL session timeout

2014-06-13 Thread Rainer Jung
Traditionally mod_ssl allows reuse of SSL sessions by its SSL session cache on the server side. One can control via SSLSessionCacheTimeout how long a session is kept in the cache (if the cache is big enough). Now since a long time most clients do no longer rely on the server caching the sessions.

Memory leak in mod_ssl ssl_callback_TmpDH

2014-05-16 Thread Rainer Jung
While doing some customization of mod_ssl I checked for memory leaks on Solaris using libumem and found 5 allocations that happen for each handshake and do not seem to get freed. Versions: httpd 2.4 head plus OpenSSL 1.0.1g ::findleaks ... 000b9688 85 002779c8

Re: svn commit: r1583175 - /httpd/httpd/trunk/modules/mappers/mod_alias.c

2014-05-05 Thread Rainer Jung
On 05.05.2014 15:34, Eric Covener wrote: I don't want to churn in SVN too much, does anyone have an issue with dropping the context info stuff for the regex case completely? Thanks for asking again and agreed here. Regards, Rainer On Mon, Mar 31, 2014 at 1:49 PM, Eric Covener

Re: Problem of URL in bugzilla

2014-04-21 Thread Rainer Jung
On 21.04.2014 23:15, Mark Thomas wrote: On 20/04/2014 20:11, Mark Thomas wrote: On 20/04/2014 18:51, Rainer Jung wrote: CCing Mark our Bugzilla (and much more) champion, hoping he knows more or at least needs the info. @Mark: I think the transform svn revision to link feature is a Bugzilla

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-20 Thread Rainer Jung
On 14.04.2014 13:08, Jeff Trawick wrote: (not to say there aren't complications, like trying to keep system directories out of rpath) Adding my current workarounds for 2.4 here for reference. Here openssl_libs is either -ldl -lz (Linux) or -lz -ldl -lsocket -lnsl (Solaris). The value of

Re: Problem of URL in bugzilla

2014-04-20 Thread Rainer Jung
CCing Mark our Bugzilla (and much more) champion, hoping he knows more or at least needs the info. @Mark: I think the transform svn revision to link feature is a Bugzilla global one, not specific to httpd. It seems partially broken after the recent update, see below for details. Regards, Rainer

Re: Any reason why building with OpenSSL shouldn't add its lib dir to rpath?

2014-04-18 Thread Rainer Jung
Hi Jeff, On 14.04.2014 13:08, Jeff Trawick wrote: (not to say there aren't complications, like trying to keep system directories out of rpath) See a related discussion from 2011 RUNPATH for module dependencies on Unix/Linux e.g. here: http://markmail.org/message/guastewy5uvn36s7 Joe had some

Re: Mini-advisory on heartbeat bug on http://httpd.apache.org/ ?

2014-04-11 Thread Rainer Jung
On 11.04.2014 18:05, Jeff Trawick wrote: On Fri, Apr 11, 2014 at 10:18 AM, Jeff Trawick traw...@gmail.com mailto:traw...@gmail.com wrote: On Fri, Apr 11, 2014 at 8:56 AM, Rainer M. Canavan rainer.cana...@sevenval.com mailto:rainer.cana...@sevenval.com wrote: On Apr

Re: half-OT: heartbleed CVE-2014-0160

2014-04-09 Thread Rainer Jung
On 09.04.2014 18:05, Reindl Harald wrote: Am 09.04.2014 17:41, schrieb William A. Rowe Jr.: Combined with typical ssl session shmcb ... That single process still has session keys of other prefork processes, as well as the common ssl session ticket key and ssl cert keys. In practice the

Re: half-OT: heartbleed CVE-2014-0160

2014-04-09 Thread Rainer Jung
On 09.04.2014 21:42, Rainer Jung wrote: On 09.04.2014 18:05, Reindl Harald wrote: Am 09.04.2014 17:41, schrieb William A. Rowe Jr.: Combined with typical ssl session shmcb ... That single process still has session keys of other prefork processes, as well as the common ssl session ticket

Re: svn commit: r1583175 - /httpd/httpd/trunk/modules/mappers/mod_alias.c

2014-03-31 Thread Rainer Jung
On 30.03.2014 22:52, Eric Covener wrote: On Sun, Mar 30, 2014 at 4:13 PM, Rainer Jung rainer.j...@kippdata.de wrote: AFAICT { In as much that it was ever useful, this breaks people relying on the context info for aliasmatches structured the way this code was originally biased to expecting

Re: svn commit: r1583175 - /httpd/httpd/trunk/modules/mappers/mod_alias.c

2014-03-30 Thread Rainer Jung
On 30.03.2014 20:29, Eric Covener wrote: On Sun, Mar 30, 2014 at 2:20 PM, rj...@apache.org wrote: Author: rjung Date: Sun Mar 30 18:20:09 2014 New Revision: 1583175 URL: http://svn.apache.org/r1583175 Log: Fix segfault in mod_alias introduced in r1132494. AliasMatch does not append

Re: [VOTE] Release httpd 2.2.27 as GA?

2014-03-17 Thread Rainer Jung
On 17.03.2014 10:59, Plüm, Rüdiger, Vodafone Group wrote: I try to find a slot to vote on 2.2.x later today, but I guess it will be in the evening my local time (GMT+1). Same here, some builds and tests still running, currently looks OK. One minor nag: out of tree build found another problem

Re: [VOTE] Release httpd 2.2.27 as GA?

2014-03-17 Thread Rainer Jung
On 17.03.2014 20:15, William A. Rowe Jr. wrote: On Mon, 17 Mar 2014 13:25:32 +0100 Rainer Jung rainer.j...@kippdata.de wrote: On 17.03.2014 10:59, Plüm, Rüdiger, Vodafone Group wrote: I try to find a slot to vote on 2.2.x later today, but I guess it will be in the evening my local time (GMT

Re: [VOTE] Release Apache httpd 2.4.9 as GA

2014-03-15 Thread Rainer Jung
the failures. Unfortunately I'm a bit limited on time during this weekend to narrow down the root cause (test framework, OpenSSL, httpd) on the failing platform. Regards, Rainer On Mar 14, 2014, at 2:13 PM, Rainer Jung rainer.j...@kippdata.de wrote: On 13.03.2014 17:49, Jim Jagielski wrote

Re: [VOTE] Release Apache httpd 2.4.9 as GA

2014-03-15 Thread Rainer Jung
On 15.03.2014 17:25, Rainer Jung wrote: On 15.03.2014 14:45, Jim Jagielski wrote: What platform? I'll try to recreate... Solaris 10 Sparc. I used the latest and greatest for test framework, Perl 5.18.2 and needed Per modules build from scratch. Also OpenSSL 1.0.1f. For the Linux

Re: [VOTE] Release Apache httpd 2.4.9 as GA

2014-03-14 Thread Rainer Jung
On 13.03.2014 17:49, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.9 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.9 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-12 Thread Rainer Jung
On 12.03.2014 11:37, Jim Jagielski wrote: At the very least, upgrading from 2.4.7 to 2.4.8 should not cause this much pain. I will let the vote run a bit more to gauge additional feedback, but my sense says that 2.4.8 will likely be revoked/dropped and 2.4.9 will be proposed which either (1)

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-12 Thread Rainer Jung
On 12.03.2014 01:59, Dr Stephen Henson wrote: On 12/03/2014 00:30, Dr Stephen Henson wrote: The fix was applied on Feb 11 2013. That would mean that official releases affected would be 0.9.8y, 1.0.0j and 1.0.1c. Any later official release should include the fix but we weren't planning to

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-12 Thread Rainer Jung
On 12.03.2014 14:55, Dr Stephen Henson wrote: On 12/03/2014 12:29, Rainer Jung wrote: On 12.03.2014 11:37, Jim Jagielski wrote: At the very least, upgrading from 2.4.7 to 2.4.8 should not cause this much pain. I will let the vote run a bit more to gauge additional feedback, but my sense says

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-12 Thread Rainer Jung
On 12.03.2014 18:39, William A. Rowe Jr. wrote: On Wed, 12 Mar 2014 00:30:57 + Dr Stephen Henson shen...@opensslfoundation.com wrote: On 11/03/2014 21:46, Gregg Smith wrote: On 3/11/2014 1:29 PM, Rainer Jung wrote: On 11.03.2014 17:34, Jim Jagielski wrote: The pre-release test tarballs

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-11 Thread Rainer Jung
On 11.03.2014 17:34, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.8 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.8 GA. [ ] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-11 Thread Rainer Jung
On 11.03.2014 21:41, Dr Stephen Henson wrote: On 11/03/2014 20:29, Rainer Jung wrote: On 11.03.2014 17:34, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.8 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing

Re: [VOTE] Release Apache httpd 2.4.8 as GA

2014-03-11 Thread Rainer Jung
On 11.03.2014 21:53, Rainer Jung wrote: On 11.03.2014 21:41, Dr Stephen Henson wrote: On 11/03/2014 20:29, Rainer Jung wrote: On 11.03.2014 17:34, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.8 can be found at the usual place: http://httpd.apache.org/dev/dist

Re: 2.4.8 This Month

2014-02-25 Thread Rainer Jung
On 22.02.2014 18:17, Rainer Jung wrote: On 19.02.2014 14:08, Jim Jagielski wrote: I'd like to shoot for a TR sometime next week... I updated aurora our US server for www.apache.org, the project sites and also mail-archives.a.o to 2.4.8 dev svn revision 1570851 plus apr/apu head revision

Re: modules calling ap_lingering_close()!!!

2014-02-22 Thread Rainer Jung
On 20.02.2014 18:24, Jeff Trawick wrote: BTW, do you know if there's a known collection of patches for 2.4 support or for other critical fixes? mod_wsgi is running on eos and reliably serves wiki.apache.org using the following patch on top of 3.4 in combination with 2.4.4, 2.4.6 and 2.4.6

Re: 2.4.8 This Month

2014-02-22 Thread Rainer Jung
On 19.02.2014 14:08, Jim Jagielski wrote: I'd like to shoot for a TR sometime next week... I updated aurora our US server for www.apache.org, the project sites and also mail-archives.a.o to 2.4.8 dev svn revision 1570851 plus apr/apu head revision of their 1.5 branches. Looks good, but only

Re: [VOTE] obscuring (or not) commit logs/CHANGES for fixes to vulnerabilities

2014-01-12 Thread Rainer Jung
On 11.01.2014 14:02, Jeff Trawick wrote: On Sat, Jan 11, 2014 at 2:51 AM, Ben Reser b...@reser.org mailto:b...@reser.org wrote: On 1/10/14, 5:38 AM, Jeff Trawick wrote: [ ] It is an accepted practice (but not required) to obscure or omit the vulnerability impact in

Re: svn commit: r1556914 - /httpd/httpd/trunk/modules/dav/lock/locks.c

2014-01-09 Thread Rainer Jung
On 09.01.2014 19:48, jaillet...@apache.org wrote: Author: jailletc36 Date: Thu Jan 9 18:48:11 2014 New Revision: 1556914 URL: http://svn.apache.org/r1556914 Log: Add missing break in 'dav_generic_do_refresh' to avoid useless computation. Modified:

Re: svn commit: r1554300 - in /httpd/httpd/trunk: CHANGES include/ap_mmn.h include/ap_regex.h include/http_core.h modules/proxy/mod_proxy.c modules/proxy/mod_proxy.h server/core.c server/request.c ser

2014-01-02 Thread Rainer Jung
On 01.01.2014 18:26, Stefan Fritsch wrote: Am Mittwoch, 1. Januar 2014, 14:06:17 schrieb Graham Leggett: Maybe making ap_regname() accept an optional prefix string that is prepended to each name would be a good idea? Maybe the use in LocationMatch and friends should add some prefix to

Re: problem with different version of openssl in Apache and apache module

2013-12-20 Thread Rainer Jung
On 20.12.2013 10:51, Alex Bligh wrote: On 19 Dec 2013, at 19:29, Hong wrote: I wrote an Apache module that call functions in openssl library to sign the messages. The module is dynamic linked to openssl library 1.0.1d when I built it. It works fine when it is loaded into the Apache that

Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2013-12-16 Thread Rainer Jung
On 16.12.2013 20:25, William A. Rowe Jr. wrote: On Sat, 14 Dec 2013 10:25:00 +0100 Kaspar Brand httpd-dev.2...@velox.ch wrote: On 14.12.2013 09:36, William A. Rowe Jr. wrote: ProxyPass is not involved in the SSL forward proxy case at all, as I already tried to point out. Good, we've

Re: Reverse proxy, mod_security, segmentation fault

2013-12-12 Thread Rainer Jung
On 12.12.2013 10:16, Ewald Dieterich wrote: I already asked on the mod_security developer mailing list for help, but didn't get a response. So I'm trying my luck here. On a Debian unstable installation (Apache 2.4.6, apr 1.4.8, apr-util 1.5.3, mod_security 2.7.5) I enabled mpm_worker and

Re: Reverse proxy, mod_security, segmentation fault

2013-12-12 Thread Rainer Jung
On 12.12.2013 16:16, Ewald Dieterich wrote: On 12/12/2013 11:53 AM, Rainer Jung wrote: On 12.12.2013 10:16, Ewald Dieterich wrote: On a Debian unstable installation (Apache 2.4.6, apr 1.4.8, apr-util 1.5.3, mod_security 2.7.5) I enabled mpm_worker and configured a simple reverse proxy. When I

Re: Issue with apr-1.5.0 on FreeBSD 10beta3

2013-12-08 Thread Rainer Jung
On 08.12.2013 19:32, Jeff Trawick wrote: On Sun, Dec 8, 2013 at 8:56 AM, Jeff Trawick traw...@gmail.com mailto:traw...@gmail.com wrote: On Tue, Nov 26, 2013 at 4:01 PM, Rainer Jung rainer.j...@kippdata.de mailto:rainer.j...@kippdata.de wrote: On 26.11.2013 15:58, olli

Re: svn commit: r1546976 - in /httpd/httpd/branches/2.4.x: ./ STATUS modules/lua/lua_request.c

2013-12-02 Thread Rainer Jung
On 02.12.2013 13:18, j...@apache.org wrote: Author: jim Date: Mon Dec 2 12:18:19 2013 New Revision: 1546976 URL: http://svn.apache.org/r1546976 Log: Merge r1544820 from trunk: mod_lua: Fix compiler warning by using correct APR_SIZE_T_FMT and APR_OFF_T_FMT format macro in debug

Re: what's the procedure for adding new versions (like 2.4.7) to Bugzilla?

2013-11-27 Thread Rainer Jung
On 27.11.2013 19:15, Plüm, Rüdiger, Vodafone Group wrote: Done (for httpd and APR). You need to have the needed permissions on Bugzilla. Just request them from infra for your Bugzilla account. I right now also added 2.2.26 and 1.5.3, I have the needed permissions. If you prefer it that way, you

Re: Issue with apr-1.5.0 on FreeBSD 10beta3

2013-11-26 Thread Rainer Jung
On 26.11.2013 15:58, olli hauer wrote: On 2013-11-25 23:25, Jeff Trawick wrote: See if this brings any happiness: Index: network_io/unix/sockets.c === --- network_io/unix/sockets.c (revision 1545394) +++

Re: svn commit: r1410459 - in /httpd/httpd/trunk: docs/log-message-tags/next-number server/mpm/event/event.c server/mpm/eventopt/eventopt.c

2013-11-24 Thread Rainer Jung
On 24.11.2013 01:03, Eric Covener wrote: I'm curious what other scenarios will fail though. I can try Sun Studio on Solaris 10 x86_64 (32-bit and 64-bit builds) soon. But Sun Studio on SPARC presumably uses different explicit code in APR and I don't have access to that. I will try to get

Re: svn commit: r1410459 - in /httpd/httpd/trunk: docs/log-message-tags/next-number server/mpm/event/event.c server/mpm/eventopt/eventopt.c

2013-11-23 Thread Rainer Jung
On 22.11.2013 23:03, Jim Jagielski wrote: Anyone ever try OpenPA? https://trac.mcs.anl.gov/projects/openpa/ It's under MIT, fwiw. Haven't tried it but the README http://git.mcs.anl.gov/radix/openpa.git/blob_plain/HEAD:/README indicates only platform support based on gcc plus

Re: module log id missing for main.c

2013-11-23 Thread Rainer Jung
On 23.11.2013 14:19, Jeff Trawick wrote: (maybe sf already knows something about this) [Thu Nov 21 16:20:17.035427 2013] [:emerg] [pid 1237:tid 47440161182336] AH00017: Pre-configuration failed, exiting Maybe main.c isn't a module, but it is probably best to put core there. Some other

Re: svn commit: r1410459 - in /httpd/httpd/trunk: docs/log-message-tags/next-number server/mpm/event/event.c server/mpm/eventopt/eventopt.c

2013-11-23 Thread Rainer Jung
On 23.11.2013 14:15, Jeff Trawick wrote: On Sat, Nov 23, 2013 at 8:04 AM, Rainer Jung rainer.j...@kippdata.de mailto:rainer.j...@kippdata.de wrote: On 22.11.2013 23:03, Jim Jagielski wrote: Anyone ever try OpenPA? https://trac.mcs.anl.gov/projects/openpa

Re: [RESULT] Re: [VOTE] Release Apache httpd 2.4.7 as GA

2013-11-23 Thread Rainer Jung
On 22.11.2013 18:47, Jim Jagielski wrote: With +1 votes from jim,covener,trawick,gsmith,breser,noel.butler,hiding,jblond and h.reindl and NO -1 votes, I call the voting closed with the result of Releasing 2.4.7 as GA. Jim I just now found out that the atomics problem for event also happens

Re: svn commit: r1542615 - /httpd/httpd/trunk/build/config-stubs

2013-11-20 Thread Rainer Jung
On 19.11.2013 23:45, Stefan Fritsch wrote: Hi Rainer, Am Sonntag, 17. November 2013, 12:47:53 schrieb Rainer Jung: URL: http://svn.apache.org/r1542615 Log: Explicitly list in which directories to look for config*.m4 files. --- httpd/httpd/trunk/build/config-stubs (original) +++ httpd

Re: svn commit: r1542615 - /httpd/httpd/trunk/build/config-stubs

2013-11-17 Thread Rainer Jung
Hi Stefan, On 17.11.2013 00:49, s...@apache.org wrote: Author: sf Date: Sat Nov 16 23:49:04 2013 New Revision: 1542615 URL: http://svn.apache.org/r1542615 Log: Explicitly list in which directories to look for config*.m4 files. If some distributor patches a config*.m4 file with quilt,

Re: [VOTE] Release Apache httpd 2.2.26 as GA

2013-11-16 Thread Rainer Jung
On 13.11.2013 18:03, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.2.26 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.2.26 GA. [X] +1: Good to go [ ] +0: meh [ ] -1: Danger Will

Re: Warnings in buildconf on trunk

2013-10-01 Thread Rainer Jung
On 01.10.2013 09:53, Ruediger Pluem wrote: I see the following autoconf warning when executing buildconf on trunk: rebuilding configure configure.in:406: warning: AC_COMPILE_IFELSE was called before AC_USE_SYSTEM_EXTENSIONS ../../lib/autoconf/specific.m4:386: AC_USE_SYSTEM_EXTENSIONS is

Re: Increasing mod_ssl's minimum required OpenSSL version for trunk/2.4.x to 0.9.8a

2013-09-25 Thread Rainer Jung
On 25.09.2013 07:33, Kaspar Brand wrote: On 23.09.2013 11:17, Joe Orton wrote: On Sun, Sep 22, 2013 at 12:32:23PM +0200, Kaspar Brand wrote: Feedback on this approach is again very welcome. Increasing the minimum required OpenSSL version from 0.9.7 to 0.9.8a shouldn't be of concern, IMO, as

Re: event MPM (Was: Re: Planning for 2.4.7 in Oct)

2013-09-15 Thread Rainer Jung
On 15.09.2013 05:31, Rainer Jung wrote: On 10.09.2013 16:13, Jim Jagielski wrote: For completeness, a full, combined patch is: http://people.apache.org/~jim/patches/httpd-2.4-event-test.patch It requires a patch that knows about creating new files when encountering /dev/null

Re: breach attack

2013-08-06 Thread Rainer Jung
On 06.08.2013 19:36, Paul Querna wrote: On Tue, Aug 6, 2013 at 10:32 AM, Eric Covener cove...@gmail.com wrote: On Tue, Aug 6, 2013 at 1:24 PM, Paul Querna p...@querna.org wrote: Hiya, Has anyone given much thought to changes in httpd to help mitigate the recently publicized breach attack:

Re: mod_proxy, oooled backend connections and the keep-alive race condition

2013-08-05 Thread Rainer Jung
On 05.08.2013 13:18, Eric Covener wrote: On Mon, Aug 5, 2013 at 2:49 AM, Thomas Eckert thomas.r.w.eck...@gmail.com wrote: One could do an 'OPTIONS *' request. But I am not sure if that is any better than proxy-initial-not-pooled in terms of performance. I don't see why an OPTIONS request

Re: [DISCUSS] Dropping the E-word from mod_lua (SFW)

2013-08-02 Thread Rainer Jung
On 02.08.2013 14:41, Daniel Gruno wrote: Hi dev@, Though this is mainly a question for docs@, I thought I'd drop this email into the dev@ list instead, since this is where I think objections, if there are any, will arise. Today, on various Internet channels, I have had to do my very best to

Re: FYI: Text error on download page re: 2.0.65

2013-07-27 Thread Rainer Jung
On 27.07.2013 19:14, Michael Felt wrote: 1) Congradulations on an EOL - seems it was idle for a long time anyway. 2) small typo on download page: Unix Source: httpd-2.0.66.tar.bz2 http://mirror.sdunix.com/apache//httpd/httpd-2.0.65.tar.bz2 [ PGP

Re: Many test failures on mod_deflate tests

2013-07-25 Thread Rainer Jung
On 25.07.2013 13:43, Plüm, Rüdiger, Vodafone Group wrote: I see many tests for mod_deflate currently failing on trunk (OS is RH5 64 Bit). Failed Test Stat Wstat Total Fail Failed List of Failed ---

Re: Many test failures on mod_deflate tests

2013-07-25 Thread Rainer Jung
On 25.07.2013 14:55, Rainer Jung wrote: On 25.07.2013 13:43, Plüm, Rüdiger, Vodafone Group wrote: I see many tests for mod_deflate currently failing on trunk (OS is RH5 64 Bit). Failed Test Stat Wstat Total Fail Failed List of Failed

Re: svn commit: r1482918 - in /httpd/httpd/trunk: modules/http/http_filters.c server/protocol.c

2013-07-25 Thread Rainer Jung
On 15.05.2013 17:46, minf...@apache.org wrote: Author: minfrin Date: Wed May 15 15:46:01 2013 New Revision: 1482918 URL: http://svn.apache.org/r1482918 Log: core: Stop ap_finalize_request_protocol() and ap_get_client_block() from silently swallowing errors from the filter stack, create

Re: [VOTE] Release Apache httpd 2.4.6 as GA

2013-07-17 Thread Rainer Jung
On 15.07.2013 18:48, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.6 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.6 GA. NOTE: The -deps tarballs are included here *only* to make

Re: TR of 2.4.6

2013-07-15 Thread Rainer Jung
On 15.07.2013 15:20, Jeff Trawick wrote: On Jul 15, 2013 9:07 AM, Jim Jagielski j...@jagunet.com mailto:j...@jagunet.com wrote: Just a FYI: I plan to TR 2.4.6 this afternoon (eastern). It will be 2.4.5 minus r1485675. As such, 2.4.6 will still ship with PR54948 un-patched, but I think it's

Re: [VOTE] Release Apache httpd 2.4.5 as GA

2013-07-14 Thread Rainer Jung
On 11.07.2013 20:54, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.5 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.5 GA. NOTE: The -deps tarballs are included here *only* to make

Re: [VOTE] Release Apache httpd 2.4.5 as GA

2013-07-14 Thread Rainer Jung
On 11.07.2013 20:54, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.5 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.5 GA. NOTE: The -deps tarballs are included here *only* to make

Re: [VOTE] Release Apache httpd 2.4.5 as GA

2013-07-14 Thread Rainer Jung
On 14.07.2013 23:05, Rainer Jung wrote: On 11.07.2013 20:54, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.5 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.5 GA. NOTE: The -deps

Re: [VOTE] Release Apache httpd 2.4.5 as GA

2013-07-14 Thread Rainer Jung
On 14.07.2013 23:40, Rainer Jung wrote: On 14.07.2013 23:05, Rainer Jung wrote: On 11.07.2013 20:54, Jim Jagielski wrote: The pre-release test tarballs for Apache httpd 2.4.5 can be found at the usual place: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing

Re: [VOTE] Release Apache httpd 2.4.5 as GA

2013-07-13 Thread Rainer Jung
Hi Jeff, On 14.07.2013 03:46, Jeff Trawick wrote: Tested with event on FreeBSD 9 (amd64). I'm running the test suite on an ASF FreeBSD 9 system as well. There I get two observations: - long (several minutes) hanging in t/apache/limits.t Failed test 8 in t/apache/limits.t at line 141 (Read

Re: Hey Steinar... Re: Revisiting the pre_htaccess hook

2013-07-10 Thread Rainer Jung
On 10.07.2013 13:14, Steinar H. Gunderson wrote: On Tue, Jul 09, 2013 at 08:53:03AM -0400, Jeff Trawick wrote: Do you have time to test with this patch on top of 2.4.x and report back? http://people.apache.org/~sf/open_htaccess_hook.patch Hi, I've tried this, adjusted mpm-itk, and it

Re: [PATCH] Fix LDAPReferrals off

2013-07-09 Thread Rainer Jung
On 09.07.2013 17:47, Joe Orton wrote: On Thu, Jun 20, 2013 at 08:41:04AM -0400, Eric Covener wrote: I'm only concerned with someone who was getting by with LDAPReferrals OFF because the default gave their SDK an error. Now OFF would be fatal too. Just revisiting this... at least it seems

Re: svn commit: r1497466 - in /httpd/httpd/branches/2.2.x: CHANGES STATUS modules/ssl/ssl_engine_io.c

2013-07-03 Thread Rainer Jung
On 03.07.2013 19:04, Eric Covener wrote: URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/ssl/ssl_engine_io.c?rev=1497466r1=1497465r2=1497466view=diff == ---

Re: [VOTE] Release 2.0.65 [the final frontier]

2013-07-01 Thread Rainer Jung
On 28.06.2013 23:28, William A. Rowe Jr. wrote: Candidates are in http://httpd.apache.org/dev/dist/ +/-1 [+1] Release 2.0.65 as the final 2.0 series package +1 for release and thanks for RM. Tested on Solaris 8+10 Sparc, SuSE Linux Enterprise 10 32Bit, SLES 10+11 64 Bit, RedHat

Re: [VOTE] Release 2.2.25

2013-07-01 Thread Rainer Jung
On 28.06.2013 23:29, William A. Rowe Jr. wrote: Candidates are in http://httpd.apache.org/dev/dist/ +/-1 [+1] Release 2.2.25 (apr 1.4.8, apr-util 1.5.2) +1 to release: - Netware src artefact not checked (missing) - signature and hashes OK - key in KEYS file - gz and bz2 contents

Re: mod_lua in 2.4 CHANGES

2013-06-28 Thread Rainer Jung
On 28.06.2013 03:59, Guenter Knauf wrote: On 28.06.2013 01:03, Rainer Jung wrote: Hi Daniel and/or Günter, can you have a look at the trunk CHANGES file and move the lua items that should now be in 2.4 to the 2.4 CHANGES file? We forgot that when we synced 2.4 with trunk and it would be nice

Re: [quickpoll] bundle apr-util 1.4.1 or 1.5.2 with httpd 2.2.25?

2013-06-28 Thread Rainer Jung
On 28.06.2013 19:55, William A. Rowe Jr. wrote: Just wanted to know the opinion of some of you who are on email today. [ ] stay at apr-util 1.4.1 (last 1.4 release) [X] jump up to apr-util 1.5.2 (now that it is more stable) Rainer

mod_lua in 2.4 CHANGES

2013-06-27 Thread Rainer Jung
Hi Daniel and/or Günter, can you have a look at the trunk CHANGES file and move the lua items that should now be in 2.4 to the 2.4 CHANGES file? We forgot that when we synced 2.4 with trunk and it would be nice to have them in the 2.4 file before 2.4.5 gets tagged. It would be nice if you could

Re: svn commit: r1497101 - in /httpd/httpd/branches/2.2.x: ./ CHANGES STATUS modules/dav/main/mod_dav.c

2013-06-26 Thread Rainer Jung
On 26.06.2013 23:16, wr...@apache.org wrote: Author: wrowe Date: Wed Jun 26 21:16:53 2013 New Revision: 1497101 URL: http://svn.apache.org/r1497101 Log: mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML)

Re: svn commit: r1470940 - in /httpd/httpd/trunk: CHANGES modules/dav/main/util.c

2013-06-26 Thread Rainer Jung
On 23.04.2013 15:14, minf...@apache.org wrote: Author: minfrin Date: Tue Apr 23 13:14:34 2013 New Revision: 1470940 URL: http://svn.apache.org/r1470940 Log: mod_dav: Make sure that when we prepare an If URL for Etag comparison, we compare unencoded paths. PR 53910 Patch submitted by

Re: svn commit: r952007 - /httpd/httpd/trunk/acinclude.m4

2013-06-22 Thread Rainer Jung
On 22.06.2013 15:26, Eric Covener wrote: On Sun, Jun 6, 2010 at 6:05 PM, rj...@apache.org wrote: Author: rjung Date: Sun Jun 6 22:05:17 2010 New Revision: 952007 URL: http://svn.apache.org/viewvc?rev=952007view=rev Log: make shared moduled and module set most the default. Static

eventopt observations

2013-06-19 Thread Rainer Jung
While testing the new APR 1.4.8 I ran the httpd test suite on trunk, the first time since long. 1) eventopt didn't run on SLES 10 32 Bit Error message: [Wed Jun 19 14:24:21.443541 2013] [mpm_eventopt:crit] [pid 25540:tid 3082651312] AH02406: atomics not

Re: svn commit: r1492782 - /httpd/httpd/trunk/docs/manual/mod/mod_lua.xml

2013-06-17 Thread Rainer Jung
On 17.06.2013 18:03, Guenter Knauf wrote: Hi, ATM I cant get the Java docu stuff working on my new dev box: BUILD FAILED java.lang.StackOverflowError and also I'm short of time to look further into fixing it - therefore I would like to ask someone for some help with the below commit to

Re: svn commit: r1491612 - /httpd/httpd/branches/2.4.x/STATUS

2013-06-14 Thread Rainer Jung
On 14.06.2013 16:41, André Malo wrote: On Wednesday 12 June 2013 21:18:05 Stefan Fritsch wrote: On Tuesday 11 June 2013, André Malo wrote: trunk patch: http://svn.apache.org/r1491155 2.4.x patch: trunk patch works nd: why would you do that in a stable branch? + sf:

Re: svn commit: r1491612 - /httpd/httpd/branches/2.4.x/STATUS

2013-06-14 Thread Rainer Jung
On 14.06.2013 17:44, André Malo wrote: On Friday 14 June 2013 17:34:26 Rainer Jung wrote: On 14.06.2013 16:41, André Malo wrote: On Wednesday 12 June 2013 21:18:05 Stefan Fritsch wrote: On Tuesday 11 June 2013, André Malo wrote: trunk patch: http://svn.apache.org/r1491155 2.4.x

[Result][Vote] Switch mod_lua in 2.4 to CTR

2013-06-11 Thread Rainer Jung
I call the vote closed. Results are: +1: covener, fuankg, humbedooh, rjung, sf +0: - -1: - So mod_lua is now CTR in 2.4. Regards, Rainer

Re: Location walk after directory walk?

2013-06-10 Thread Rainer Jung
On 10.06.2013 15:37, Eric Covener wrote: Is there some historical or other reason that the location has higher precedence that directory/files? I think the other way is much more intuitive Don't know about th real motivation, but after having learned that from the explicit description in the

[Vote] Switch mod_lua in 2.4 to CTR

2013-06-08 Thread Rainer Jung
As announced yesterday in the proposal thread: I suggest to switch mod_lua in 2.4 to CTR mode. Motivation: mod_lua is still marked experimental because we did not yet expect it to be complete or the APIs to be stable. So we did expect and wanted to allow incompatible changes. Now that a few of

<    1   2   3   4   5   6   7   8   9   10   >