Re: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-08-30 Thread Brian Smith
Kaspar Brand httpd-dev.2...@velox.ch wrote: On 28.08.2015 19:27, Jeff Trawick wrote: For one, it is appropriate for the default config is there to enable practices which are reasonable in most situations, and OCSP Stapling is widely accepted as an appropriate feature for HTTP servers to

Re: mod_ssl-2.4.x-certkeyfile and OCSPStapling

2014-02-04 Thread Brian Smith
On Tue, Feb 4, 2014 at 10:25 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 04.02.2014 19:16, schrieb Falco Schwarz: After playing around a bit more with this patch, I discovered that OCSPStapling cannot get the issuer certificate if you use only the SSLCertificateFile directive. It

RE: ap_setup_client_block and Content-Length

2008-02-15 Thread Brian Smith
Nick Kew wrote: Charles Fry [EMAIL PROTECTED] wrote: Hi, I desire to access a request's Content-Length from an input filter. When it exists, you can get it with apr_table_get(r-headers_in, Content-Length) There is no way to get an accurate content length if other input filters have

RE: ap_get_brigade hangs when submitting a muitipart/form-data

2008-02-15 Thread Brian Smith
Jarek Kucypera wrote: ap_get_brigade is designed to be used in input filters. If you want read request data in your content handler, you must use ap_should_client_block and ap_get_client_block. There are lots of modules that ship with Apache that are using ap_get_brigade, and the source code

RE: Reading of input after headers sent and 100-continue.

2008-01-30 Thread Brian Smith
-Original Message- From: Graham Dumpleton [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 29, 2008 4:29 PM To: modules-dev@httpd.apache.org Subject: Reading of input after headers sent and 100-continue. The HTTP output filter will send a 100 result back to a client when the

RE: Reading of input after headers sent and 100-continue.

2008-01-30 Thread Brian Smith
Graham Dumpleton wrote: Effectively, if a 200 response came back, it seems to suggest that the client still should send the request body, just that it 'SHOULD NOT wait for an indefinite period'. It doesn't say explicitly for the client that it shouldn't still send the request body if