Re: SSLUserName - mod_auth_user

2014-04-23 Thread Tom Evans
On Mon, Apr 21, 2014 at 12:38 PM, Graham Leggett minf...@sharp.fm wrote: Hi all, Right now, we have the SSLUserName directive, which takes an arbitrary SSL variable and turns it into a username for the benefit of the request. This has the downside that only SSL variables (and some CGI

Re: unsetting encrypted cookies when encryption key changes

2013-12-12 Thread Tom Evans
On Thu, Dec 12, 2013 at 7:30 PM, Graham Leggett minf...@sharp.fm wrote: On 12 Dec 2013, at 16:57, Thomas Eckert thomas.r.w.eck...@gmail.com wrote: The patch does not help but I think it got me on the right track though I'm a bit confused about the 'dirty' flag. Where is that flag supposed to

Re: unsetting encrypted cookies when encryption key changes

2013-11-25 Thread Tom Evans
On Mon, Nov 25, 2013 at 1:34 PM, Thomas Eckert thomas.r.w.eck...@gmail.com wrote: Thanks but I'm no sure if that's what I am looking for. I want to get rid of the old sessions (with the old key) and replace them with new ones (with the new key). Firstly, (ISTM) you want to preserve the

Re: How to fail in case of an error

2013-06-20 Thread Tom Evans
On Wed, Jun 19, 2013 at 1:10 PM, markus.k...@nokia.com wrote: Hi, what is the recommended way for a module to fail the start of Apache, if the module cannot be started (e.g. due to a configuration problem)? It depends. If you know it has failed in a directive configuration handler, you can

Re: URL decoding in Apache module

2013-06-14 Thread Tom Evans
On Fri, Jun 14, 2013 at 9:01 AM, Sindhi Sindhi sindhi@gmail.com wrote: Hi, I have a C++ filter module written for Apache. I see that all URL's sent to Apache server are encoded. Does Apache already do the URL decoding and store it somewhere in the request_rec structure OR the filter

Re: URL scanning by bots

2013-05-03 Thread Tom Evans
On Fri, May 3, 2013 at 10:54 AM, André Warnier a...@ice-sa.com wrote: So here is a challenge for the Apache devs : describe how a bot-writer could update his software to avoid the consequences of the scheme that I am advocating, without consequences on the effectivity of their URL-scanning.

Re: URL scanning by bots

2013-05-01 Thread Tom Evans
On Wed, May 1, 2013 at 1:47 AM, André Warnier a...@ice-sa.com wrote: Christian Folini wrote: Hey André, I do not think your protection mechanism is very good (for reasons mentioned before) But you can try it out for yourself easily with 2-3 ModSecurity rules and the pause directive. Regs,

Re: URL scanning by bots

2013-05-01 Thread Tom Evans
On Wed, May 1, 2013 at 10:37 AM, Ben Laurie b...@links.org wrote: So your argument is that extra connections use resources in servers but not clients? I only care about the servers. However, the clients are most likely constrained by CPU or network. Slowing down all the requests at the server

Re: Interpolating %{variables} in all directives

2013-04-18 Thread Tom Evans
On Thu, Apr 18, 2013 at 4:09 PM, Igor Galić i.ga...@brainsware.org wrote: Hey folks o/~ From an IRC conversation in #httpd and #httpd-dev emerged the idea to interpolate %{variables} in all directives. According to sf we have somewhere a ~10 line code fragment which does that without much

Re: use connection hostname for SNI and SSLProxyCheckPeerCN instead of the Host: header

2013-04-12 Thread Tom Evans
On Fri, Apr 12, 2013 at 7:18 AM, Lam, Eugene euge...@amazon.com wrote: Hi Kaspar, Thanks for digging up that thread. I still think SNI needs to be considered, but not in the way I originally thought! On 4/10/13 9:43 PM, Kaspar Brand httpd-dev.2...@velox.ch wrote: On 10.04.2013 02:49, Lam,

Broken links in 2.4/current docs

2013-03-27 Thread Tom Evans
Hi all mod_macro documentation seems to have gone AWOL: http://httpd.apache.org/docs/current/mod/mod_macro.html http://httpd.apache.org/docs/2.4t/mod/mod_macro.html Both linked from /docs/ver/mod/ Cheers Tom

Re: mod_ssl dynamic configuration project

2013-03-27 Thread Tom Evans
On Tue, Mar 26, 2013 at 8:25 PM, Tim Traver tt-l...@simplenet.com wrote: Hi all, ok, I just wanted to start here, because this seems like the place. I know this is going to meet a lot of resistance, but here is my crazy idea. I'd like to figure out a way to dynamically retrieve the SSL keys

Re: some key fields of request_rec are null

2013-03-13 Thread Tom Evans
On Tue, Mar 12, 2013 at 8:04 PM, Nce Rt nce...@yahoo.com wrote: here is one of the past emails: On Wed, Mar 6, 2013 at 4:21 PM, Nce Rt nce...@yahoo.com wrote: A custom handler which is registered to run APR_HOOK_FIRST has these fields null when processing http request: r-content_type,

Re: mod_cache with Cache-Control no-cache= or private=

2013-03-13 Thread Tom Evans
On Wed, Mar 13, 2013 at 5:27 PM, Yann Ylavic ylavic@gmail.com wrote: How would the origin invalidate a Set-Cookie, with an empty one ? Regards, Yann. Set it again, with an in the past expiry date. Cheers Tom

Re: some key fields of request_rec are null

2013-03-12 Thread Tom Evans
On Mon, Mar 11, 2013 at 7:47 PM, Nce Rt nce...@yahoo.com wrote: that's what is null I've been talking about past 2 weeks!! You still haven't confirmed what handler you are running in. Certain parts of the request_rec are populated by different handler stages, if your handler is running before

Re: svn commit: r1387603 - /httpd/httpd/trunk/modules/proxy/mod_proxy.c

2012-09-19 Thread Tom Evans
On Wed, Sep 19, 2012 at 3:34 PM, Jim Jagielski j...@jagunet.com wrote: I cannot think of one good reason why we've been doing the below... I any case, I think vhosts inheriting these structs is a pretty nasty bug, as well as memory hog... Hi Jim Is one possible use case for this defining

Re: Bug with ProxyPass / and mod_proxy_balancer + double-slashes (httpd-2.4.3)

2012-09-06 Thread Tom Evans
On Wed, Sep 5, 2012 at 6:08 PM, Zisis Lianas zisis.lia...@consol.de wrote: There seems to be some problems when trying to proxy / with ProxyPass and mod_proxy_balancer. See also: https://issues.apache.org/bugzilla/show_bug.cgi?id=51982 https://issues.apache.org/bugzilla/show_bug.cgi?id=51489

Re: Bug with ProxyPass / and mod_proxy_balancer + double-slashes (httpd-2.4.3)

2012-09-06 Thread Tom Evans
On Thu, Sep 6, 2012 at 12:42 PM, Zisis Lianas zisis.lia...@consol.de wrote: Also with the trailing slash the config does not work correctly, see attached logfile. Please keep in mind that this only happens if the backend returns a 301. Status from backend: 301 Location:

Re: Bug with ProxyPass / and mod_proxy_balancer + double-slashes (httpd-2.4.3)

2012-09-06 Thread Tom Evans
On Thu, Sep 6, 2012 at 4:07 PM, Zisis Lianas zisis.lia...@consol.de wrote: Tom, thanks for your feedback. The main difference between our configurations is that you do ProxyPassReverse the single BalancerMember (http://app05/...), which is also working for me - in my configuration I

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-05-03 Thread Tom Evans
On Mon, Apr 30, 2012 at 8:15 AM, Plüm, Rüdiger, Vodafone Group ruediger.pl...@vodafone.com wrote: -Original Message- From: Kaspar Brand [mailto:httpd-dev.2...@velox.ch] Sent: Sonntag, 29. April 2012 09:59 To: dev@httpd.apache.org Subject: Re: [users@httpd] SNI with apache 2.4.1

Re: Moving on

2012-04-20 Thread Tom Evans
On Fri, Apr 20, 2012 at 2:46 PM, Rich Bowen rbo...@rcbowen.com wrote: … and     Where's the spoons? Where's the spoons? Where's the bloody spoons? But with no mention of swimming pools full of puppies or Lord Palmerston? Of course no one gets it... Tom (I have, of course, just demonstrated

Re: Moving on

2012-04-20 Thread Tom Evans
On Fri, Apr 20, 2012 at 3:34 PM, Rich Bowen rbo...@rcbowen.com wrote: Thank you, both of you, for further illustrating my point. Now, ask yourself whether your mutual chuckle was worth making most of the rest of us feel like we were outside some shared joke. That was kind of my point, hence

Re: Why aren't name-based vhosts not working properly under SSL?

2012-04-17 Thread Tom Evans
2012/4/17 Igor Galić i.ga...@brainsware.org: Hi Tom, some constructive criticism, if you so allow: Thanks, I don't actually have a problem with my config. The OP questioned whether my cut-down version of the config actually did use different ServerRoot, etc, so I posted a more complete

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Tom Evans
On Mon, Apr 16, 2012 at 3:47 PM, Michael Weiser mich...@weiser.dinsnail.net wrote: Hi there, On Mon, Apr 16, 2012 at 01:45:16PM +0200, Peter Sylvester wrote: that makes mod_ssl put the content of the host header into the sni data structures instead of the hostname from the URL used in the

Re: Why aren't name-based vhosts not working properly under SSL?

2012-04-16 Thread Tom Evans
On Mon, Apr 16, 2012 at 4:34 PM, Mikhail T. mi+t...@aldan.algebra.com wrote: If the SSL-certificate is the same for all named vhosts configured for the given IP-address/port-number combination, why can not the vhosts have different DocumentRoots and other settings? Thank you. Yours,   -mi

Re: Why aren't name-based vhosts not working properly under SSL?

2012-04-16 Thread Tom Evans
On Mon, Apr 16, 2012 at 4:51 PM, Mikhail T. mi+t...@aldan.algebra.com wrote: On 16.04.2012 11:40, Tom Evans wrote: They can. Excerpt from my httpd.conf: Your excerpt does not show different DocumentRoots -- nor any other settings... Could you show more contents? What is the Apache version

Re: Why aren't name-based vhosts not working properly under SSL?

2012-04-16 Thread Tom Evans
On Mon, Apr 16, 2012 at 5:25 PM, Issac Goldstand mar...@beamartyr.net wrote: Are you sure that your client supports SNI? This is not reliant on SNI. Cheers Tom

Re: Scope of ProxyPreserveHost (was: Re: [users@httpd] SNI with apache 2.4.1 reverse proxy)

2012-04-10 Thread Tom Evans
On Tue, Apr 10, 2012 at 1:38 AM, Jie Gao j@sydney.edu.au wrote: Hi All Would it be possible to expand the scope of ProxyPreserveHost to Location? Regards, Jie I don't understand; ProxyPreserveHost affects the proxying apache server, and controls whether it rewrites the 'Host' header

Re: TRACE still enabled by default

2012-03-22 Thread Tom Evans
On Wed, Mar 21, 2012 at 7:33 PM, Roy T. Fielding field...@gbiv.com wrote: TRACE won't work at all if the most popular end-point doesn't support it. If folks want to protect clients (including gateways) against their own stupidity regarding what they choose to send in a TRACE request, then do

Re: TRACE still enabled by default

2012-03-22 Thread Tom Evans
On Thu, Mar 22, 2012 at 3:15 PM, Eric Covener cove...@gmail.com wrote: How about providing a simpler way of turning it off, rather than turning it off by default? Arbitrarily, it seems, you can't use Limit or LimitExcept to restrict it, and instead have to use a RewriteRule. We've had

Re: httpd 2.4.1 and mod_slotmem_shm / mod_proxy_balancer (AH01179)

2012-03-07 Thread Tom Evans
On Wed, Mar 7, 2012 at 9:39 AM, Zisis Lianas zisis.lia...@consol.de wrote: Hi Jim, for me/us it's needed, because we operate with multi-instancing. e.g.: Apache installation directory (ServerRoot) is /opt/http-2.4.x/ (belonging to apache:apache). This installation only provides the httpd

Re: httpd 2.4.1 and mod_slotmem_shm / mod_proxy_balancer (AH01179)

2012-03-07 Thread Tom Evans
2012/3/7 Igor Galić i.ga...@brainsware.org: I knew this is going to be my favourite part of this discussion ;) So far, DefaultRuntimeDir sounds most reasonable (to me) I'd like it green! But seriously, doesn't this directive change the runtime directory from the default to something not the

Re: [proposed] remove docs/1.3/

2012-02-27 Thread Tom Evans
On Mon, Feb 27, 2012 at 4:00 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: Because 1.3 code and docs are no longer maintained.  Because 1.3 docs shipped in the tarball, they got the whole deal when they downloaded it. By continuing to publish something out-of-date, we imply to users that

Re: [RESULT] Re: [VOTE] Release Apache httpd 2.4.1

2012-02-17 Thread Tom Evans
On Fri, Feb 17, 2012 at 1:42 PM, Jim Jagielski j...@jagunet.com wrote: As such, I call the vote as PASSING and that httpd 2.4.1 will be released as GA. Congratulations, very excited to soon have 2.4 in production! Cheers Tom

Re: 2.4.0 TR happening today…

2012-01-16 Thread Tom Evans
On Mon, Jan 16, 2012 at 2:47 PM, Jim Jagielski j...@jagunet.com wrote: I will be doing the TR of Apache httpd 2.4.0 later on today... w00t! Sorry to be a user poking in to the dev list, but will 2.4.0 be GA, or will GA be a later release in the 2.4 series? Cheers Tom

Re: Virtual host and DNS record

2011-12-01 Thread Tom Evans
On Thu, Dec 1, 2011 at 9:34 AM, ipmanux ipma...@gmail.com wrote: Dear all, I am using RHEL with HTTPD+TOMCAT, I configured  4 VHOSTs on the same server   -3 VHOST (named-based)          1st  vhost: www.abc.com          2nd vhost: www.def.com          3rd  vhost: www.ghi.com   -1

Re: Virtual host and DNS record

2011-12-01 Thread Tom Evans
2011/12/1 Igor Galić i.ga...@brainsware.org: users@ might have been a better place for this. ack. Sorry, didn't notice the OP sent to dev, I would have redirected. Cheers Tom

Re: ProxyPass ErrorDocument

2011-09-14 Thread Tom Evans
On Tue, Sep 13, 2011 at 3:47 PM, Nick Gearls nickgea...@gmail.com wrote: Unless I misunderstand something, I found a problem with ProxyPass behaviour: with the config below, I expect, when the back-end server does not answer (status 502), to receive my custom HTML page. But it doesn't - the

Truly minor inconsistency in mod_rangecnt.c

2011-08-25 Thread Tom Evans
Hi Dirk-Willem, list. I wasn't sure whether to mail this in, it is inconsequential; the module is supposed to count the number of ranges, but it actually counts the number of commas between ranges, leading to an off-by-one. IE, a request with 6 ranges would not be rejected, where as the code has

Re: How to test if request has been aborted

2011-07-28 Thread Tom Evans
On Thu, Jul 28, 2011 at 7:26 AM, Tony Abo t...@hitech.com wrote: I am working on a custom request handler that works with Apache 2.x. There are times that the request may take a considerable amount of time to process. I need to cut the processing short if the user decides to press the stop

Re: svn commit: r1133582 - in /httpd/httpd/trunk: CHANGES docs/manual/filter.xml docs/manual/mod/mod_data.xml docs/manual/mod/mod_data.xml.meta docs/manual/new_features_2_4.xml modules/filters/config.

2011-06-13 Thread Tom Evans
On Mon, Jun 13, 2011 at 12:11 PM, Paul Querna p...@querna.org wrote: Why is this in the core? The example in the documentation doesn't make sense, this data encoded this way is inline, not the whole response. I don't get why this is a filter in httpd core, its a feature of an app server

Re: ProxyPreserveHost - added functionality

2011-02-24 Thread Tom Evans
On Wed, Feb 23, 2011 at 7:12 PM, Jeffrey E Burgoyne burgo...@keenuh.com wrote: I am doing some work with a large organization that has recently acquired two products that work properly through a reverse proxy system only when ProxyPreserveHost is set to on. The organization had issue as they

Re: ProxyPreserveHost - added functionality

2011-02-24 Thread Tom Evans
On Thu, Feb 24, 2011 at 2:40 PM, Jeffrey E Burgoyne burgo...@keenuh.com wrote: In a location context (do not believe I can use a directory as it is being proxied), I thought about that. I felt it was better to mirror the current ProxyPass configuration item for consistencies sake. There isn't

Re: SetHandler mod_ruby Apache 2.2.17 Windows

2011-02-09 Thread Tom Evans
On Wed, Feb 9, 2011 at 2:13 PM, Zeno Davatz zdav...@gmail.com wrote: Hi I tried for a couple of days now and I also searched the Internet long and wide and then I bounced into this: https://issues.apache.org/bugzilla/show_bug.cgi?id=25435 My question is in reading to above Bug-Report as

Re: SetHandler mod_ruby Apache 2.2.17 Windows

2011-02-09 Thread Tom Evans
On Wed, Feb 9, 2011 at 2:59 PM, Zeno Davatz zdav...@gmail.com wrote: Dear Tom Thank you for your reply. Yes, it seems so, as my index.rbx is not being loaded AFAICT. According to my understanding the above setup should work, but it does not work as the page is not served but I just get the

Re: Some love for balancer manager?

2010-12-22 Thread Tom Evans
On Wed, Dec 22, 2010 at 3:32 PM, Jim Jagielski j...@jagunet.com wrote: Part of the love is working on making dynamic addition/subtraction of balancer members a reality. My hope is to have that done in time for the beta. Would that include support for adding new vhosts/balancers at graceful

Re: Server reloads

2010-11-12 Thread Tom Evans
On Fri, Nov 12, 2010 at 1:21 PM, Bryan McQuade bmcqu...@google.com wrote: Hi. I have read the docs but I have a few questions regarding server reloads. Under what conditions will httpd reread its conf file? Will httpd also reload its shared modules when updating conf files? I am trying to make

Re: Missing proxy_balancer feature

2010-06-30 Thread Tom Evans
On Wed, Jun 30, 2010 at 3:47 AM, Daniel Ruggeri drugg...@primary.net wrote: On 6/29/2010 9:17 PM, William A. Rowe Jr. wrote: Yet again, in class another student pointed out that the Enabled/Disabled choice in mod_proxy_balancer totally ignores the concept of quiescing, where we are taking a

Re: Missing proxy_balancer feature

2010-06-30 Thread Tom Evans
On Wed, Jun 30, 2010 at 1:05 PM, Mark Watts m.wa...@eris.qinetiq.com wrote: A restart of httpd (graceful or otherwise) has no understanding that the running config can be any different from that on disk. Indeed, how would httpd differentiate between a restart to reconfigure a given balancer

Re: Fast by default

2010-05-28 Thread Tom Evans
On Fri, May 28, 2010 at 12:31 PM, Eric Covener cove...@gmail.com wrote: On Fri, May 28, 2010 at 12:08 AM, Sergey Chernyshev sergey.chernys...@gmail.com wrote: Hi, I'm working on helping people to have their sites fast by default and was wondering if Apache HTTPD team can consider enabling a

Re: Oxygen icons for Apache

2010-04-21 Thread Tom Evans
On Wed, Apr 21, 2010 at 4:44 PM, Javier Llorente jav...@opensuse.org wrote: Hello, Apache's current icons are a bit out-of-date, so I've created a collection of icons for Apache; it has oxygen+crystal+custom icons, a config file and a README. Perhaps it could be included in Apache, so that

Re: Can I have two virtual hosts with same servername?

2010-04-09 Thread Tom Evans
On Fri, Apr 9, 2010 at 6:43 AM, Michael Ni michael...@gmail.com wrote: I have a java project that resides in tomcat.  Recently we needed to add Wordpress (php project). We decided to go with Apache Server in front with virtual hosts with mod_proxy_ajp. So far I have gotten different server

Re: [RESULTS] [VOTE] Release httpd 2.3.4-alpha

2009-12-10 Thread Tom Evans
On Thu, Dec 10, 2009 at 12:26 PM, Michael Felt mamf...@gmail.com wrote: mich...@x054:[/data/prj/pcre-8.00]ls bin ls: 0653-341 The file bin does not exist. mich...@x054:[/data/prj/pcre-8.00]mkdir bin mich...@x054:[/data/prj/pcre-8.00]ls *config pcre-config mich...@x054:[/data/prj/pcre-8.00]ln

Re: [RESULTS] [VOTE] Release httpd 2.3.4-alpha

2009-12-10 Thread Tom Evans
, 2009 at 2:38 PM, Tom Evans tevans...@googlemail.com wrote: On Thu, Dec 10, 2009 at 12:26 PM, Michael Felt mamf...@gmail.com wrote: mich...@x054:[/data/prj/pcre-8.00]ls bin ls: 0653-341 The file bin does not exist. mich...@x054:[/data/prj/pcre-8.00]mkdir bin mich...@x054:[/data/prj/pcre-8.00

Re: signal handler questions

2009-12-08 Thread Tom Evans
On Tue, Dec 8, 2009 at 2:57 PM, Tianwei tianwei.sh...@gmail.com wrote: Hi, all,    I met some SIGHUP problem for my httpd-2.2.14 version. To verify this problem, I use a clean 2.2.14 version, and configure it with:   CFLAGS=-O0 -g ./configure --prefix=/home/tianwei/apache/install/

Re: svn commit: r885606 - /httpd/httpd/trunk/build/rpm/httpd.init

2009-12-04 Thread Tom Evans
On Fri, Dec 4, 2009 at 12:59 AM, Graham Leggett minf...@sharp.fm wrote: William A. Rowe Jr. wrote: Ok, so they want to roll their own.  Sounds like a maintainer issue.  What does this say for using our httpd rpm for an Ubuntu or other distribution of linux? Ubuntu is Debian based, and uses

Re: svn commit: r885606 - /httpd/httpd/trunk/build/rpm/httpd.init

2009-12-04 Thread Tom Evans
On Fri, Dec 4, 2009 at 12:37 PM, Graham Leggett minf...@sharp.fm wrote: Tom Evans wrote: Really? It works perfectly on all boxes I use it on. What precisely has changed about reading a pid from a file, sending signals to a process, or spawning a process with specific arguments that has made

Re: How do I debug a module ?

2009-07-24 Thread Tom Evans
On Fri, 2009-07-24 at 03:00 -0700, ricardo13 wrote: hi, The GDB session is very large. trim valid debug My module calls mod_teste !!! Thank you Ricardo So whats the problem? It seems to be working fine. Your breakpoint is on ap_process_request, and you single step through it,

RE: Dynamicly insert 'require' into request

2009-07-22 Thread Tom Evans
On Wed, 2009-07-22 at 10:43 +0100, Ben Davies wrote: Okay, so upon further inspection, it appears that there may not be an equivalent function for mod_perls set_handlers(). This leads me to a problem: how do I turn off a hook, especially, as the check_user() hook expects the r-user property

RE: mod_deflate feature needed

2009-07-16 Thread Tom Evans
On Thu, 2009-07-16 at 10:20 -0600, Anthony J. Biacco wrote: We're not violating the specs, we're following them. The HTTP spec states that you should send out a content-length header with the correct trasnfer length, and mod_deflate in this case is not doing that. -Tony No it doesn't; it

Re: Module that forward requests

2009-07-14 Thread Tom Evans
On Tue, 2009-07-14 at 03:22 -0700, ricardo13 wrote: Hi, Yesterday, I studied mod_rewrite very much and I believe that fully_qualify_uri() function is where mod_rewrite does proxy. That's right ?? This is way ?? Other question, I copied fully_qualify_uri() function, but when print value