Re: [VOTE] Release httpd-2.4.38

[Steffen]

+1

Build and tested by Apache Lounge Community  Windows Win32/Win64 VC11, 
VC14 VC15, no trouble reports received.



Build with by Microsoft  supported convert with the in the tarball 
included  dsw/dsp/makefile files.


Build with dependencies:


- httpd.exe with OPENSSL_Applink and VC14/15 SupportedOS Manifest
- nghttp2 1.36.0
- jansson 2.12
- VC15 openssl 1.1.1a, VC14/11 1.0.2q
- curl 7.63.0 WinSSL
- apr 1.6.5
- apr-util 1.6.1 with Crypto OpenSSL enabled
- apr-iconv 1.2.2
- zlib 1.2.11
- brotli 1.0.7
- pcre 8.42 with JIT, SUPPORT_UTF, SUPPORT_UNICODE_PROPERTIES, 
REBUILD_CHARTABLES

- libxml2 2.9.9
- lua 5.2.4  with LUA_COMPAT_ALL
- expat 2.2.6

Not seen  new warnings over I reported here before.

Cheers,

Steffen



On Thursday 17/01/2019 at 19:49, Daniel Ruggeri  wrote:

Hi, all;
   Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[ ] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha1: 6ee19a7b936a6ddbbf81b313c4a8b38bf232b40e *httpd-2.4.38.tar.gz
sha256: 
38d0b73aa313c28065bf58faf64cec12bf7c7d5196146107df2ad07541aa26a6 
*httpd-2.4.38.tar.gz


--
Daniel Ruggeri

Re: [VOTE] Release httpd-2.4.38

[Daniel Ruggeri]

On 1/20/2019 4:25 PM, Noel Butler wrote:
>
>
>>
>>   It's not just good, it's good enough!
>>
>  
> tongue in cheek here, but...
> shouldn't that be the other way around,  "It's not just good enough,
> it's good!"   :)
>  

haha - tounge in cheek indeed. The line, "It's not just good, it's good
enough" is a throwback to an old The Simpson's TV series reference.


>  
> -- 
>
> Kind Regards,
>
> Noel Butler
>
> This Email, including any attachments, may contain legally privileged
> information, therefore remains confidential and subject to copyright
> protected under international law. You may not disseminate, discuss,
> or reveal, any part, to anyone, without the authors express written
> authority to do so. If you are not the intended recipient, please
> notify the sender then delete all copies of this message including
> attachments, immediately. Confidentiality, copyright, and legal
> privilege are not waived or lost by reason of the mistaken delivery of
> this message. Only PDF  and ODF
>  documents accepted, please
> do not send proprietary formatted documents
>

Re: [VOTE] Release httpd-2.4.38

[Dennis Clarke]

On 1/20/19 6:50 PM, Rainer Jung wrote:

Hi Dennis,
Am 21.01.2019 um 00:34 schrieb Dennis Clarke:

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically 
linked (already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :


I guess you mean for a build that shows the crashes (statically linked 
ones)? Note mine are 32 bit binaries 


OKay, you have a really long list of deps there. I am surprised actually.

and reallyall module set, so lots 
of dependencies.


OKay ... I tend to build a minimal set of modules for the task at hand
to get a decent server going that can run in production without too many
surprises.



The following is from a build against OpenSSL 1.1.1a:



My only builds are now built with OpenSSL 1.1.1a.





     libjansson.so.4 => 
/path/to/install/jansson/2.12-1.solaris10.sparc/lib/libjansson.so.4


Never seen a need for that.

     libcurl.so.4 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/libcurl.so.4


Everyone needs curl!  Who doesn't love curl?  I even have the tee-shirt!

     libssl.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libssl.so.1.1
     libcrypto.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libcrypto.so.1.1
     libpcre.so.1 => 


*nod*


/path/to/install/pcre/8.42-1.solaris10.sparc/lib/libpcre.so.1


I seem to recall having issues with pcre in the distant past but can not
really remember what they were. Something about WordPress having a major
fit all because some pcre feature was not built.  Long past now.

     libdistcache.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libdistcache.so.1


Never ever looked into this one. I'll take a look.

     libnal.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libnal.so.1


Nope .. also never needed it.



     libdl.so.1 =>    /lib/libdl.so.1
     libxml2.so.2 => 
/path/to/install/libxml2/2.9.9-1.solaris10.sparc/lib/libxml2.so.2

     libz.so.1 => /usr/lib/libz.so.1


Yes .. of course.

     libbrotlienc.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlienc.so.1
     libbrotlicommon.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlicommon.so.1


Never needed it.


     libldap.so.5 =>  /usr/lib/libldap.so.5


? LDAP.  Nope.  Never had a need.

     liblua.so.5.3 => 
/path/to/install/lua/5.3.5-1.solaris10.sparc/lib/liblua.so.5.3

     libm.so.2 => /lib/libm.so.2
     libaprutil-1.so.0 => 
/path/to/install/apr-util/1.6.x/1.6.1/solaris10.sparc-modular_enable-apr_1.6.5-dso_enable-expat_2.2.6-1-ldap_explicit-openssl_1.1.1a-1-shared-sqlite_3.26.0-1-bdb_6.1.19-1-mysql_6.1.11-5-oracle_11.2.0.2.0/lib/libaprutil-1.so.0 



OKay the Berkeley db annoys me as I have a long standing love for it but
always run into issues building it from sources.  I have to look into
that one more time.

     libdb-6.1.so => 
/path/to/install/berkeley_db/6.1.19-1.solaris10.sparc/lib/libdb-6.1.so




     libresolv.so.2 =>    /lib/libresolv.so.2


How did you get libresolve thrown into the mix?  Is this connected to a
recent ISC Bind build ?

     libnghttp2.so.14 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/curl-deps/libnghttp2.so.14 


Never tried the new http/2 and not even sure new browsers support it.
Yet another item I need to look into.



Server version: Apache/2.4.38 (Unix)
Server built:   Jan 18 2019 06:28:45
Server's Module Magic Number: 20120211:83
Server loaded:  APR 1.6.5, APR-UTIL 1.6.1
Compiled using: APR 1.6.5, APR-UTIL 1.6.1
Architecture:   32-bit


Right.  Whereas I have long since done everything 64-bit.


Server MPM: event
   threaded: yes (fixed thread count)
     forked: yes (variable process count)
Server compiled with
  -D APR_HAS_SENDFILE
  -D APR_HAS_MMAP
  -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
  -D APR_USE_PROC_PTHREAD_SERIALIZE
  -D APR_USE_PTHREAD_SERIALIZE
  -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
  -D APR_HAS_OTHER_CHILD
  -D AP_HAVE_RELIABLE_PIPED_LOGS
  -D DYNAMIC_MODULE_LIMIT=256
  -D 
HTTPD_ROOT="/path/to/install/httpd/2.4.x/2.4.38/solaris10.sparc-1.6.5-1.6.1-1.1.1a-1-shared-reallyall-static" 

  -D 

Re: [VOTE] Release httpd-2.4.38

[Rainer Jung]

Hi Dennis,

Am 21.01.2019 um 00:34 schrieb Dennis Clarke:

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically 
linked (already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :


I guess you mean for a build that shows the crashes (statically linked 
ones)? Note mine are 32 bit binaries and reallyall module set, so lots 
of dependencies. The following is from a build against OpenSSL 1.1.1a:



corv # ldd /usr/local/bin/httpd
     libpcre.so.1 =>  /usr/local/lib/libpcre.so.1
     libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0
     libexpat.so.1 => /usr/local/lib/libexpat.so.1
     libiconv.so.2 => /usr/local/lib/libiconv.so.2
     libapr-1.so.0 => /usr/local/lib/libapr-1.so.0
     libuuid.so.1 =>  /lib/64/libuuid.so.1
     libsendfile.so.1 =>  /lib/64/libsendfile.so.1
     librt.so.1 =>    /lib/64/librt.so.1
     libsocket.so.1 =>    /lib/64/libsocket.so.1
     libnsl.so.1 =>   /lib/64/libnsl.so.1
     libpthread.so.1 =>   /lib/64/libpthread.so.1
     libc.so.1 => /lib/64/libc.so.1
     libaio.so.1 =>   /lib/64/libaio.so.1
     libmd.so.1 =>    /lib/64/libmd.so.1
     libmp.so.2 =>    /lib/64/libmp.so.2
     libscf.so.1 =>   /lib/64/libscf.so.1
     libdoor.so.1 =>  /lib/64/libdoor.so.1
     libuutil.so.1 => /lib/64/libuutil.so.1
     libgen.so.1 =>   /lib/64/libgen.so.1
     libm.so.2 => /lib/64/libm.so.2
     /lib/sparcv9/../libm/sparcv9/libm_hwcap1.so.2
     /platform/SUNW,SPARC-Enterprise/lib/sparcv9/libc_psr.so.1


Mine is:

libjansson.so.4 => 
/path/to/install/jansson/2.12-1.solaris10.sparc/lib/libjansson.so.4
libcurl.so.4 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/libcurl.so.4
libssl.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libssl.so.1.1
libcrypto.so.1.1 => 
/path/to/install/openssl-1.1.1a-1.solaris10.sparc/lib/libcrypto.so.1.1
libpcre.so.1 => 
/path/to/install/pcre/8.42-1.solaris10.sparc/lib/libpcre.so.1
libdistcache.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libdistcache.so.1
libnal.so.1 => 
/path/to/install/distcache/1.5.1-9.solaris10.sparc/lib/libnal.so.1

libdl.so.1 =>/lib/libdl.so.1
libxml2.so.2 => 
/path/to/install/libxml2/2.9.9-1.solaris10.sparc/lib/libxml2.so.2

libz.so.1 => /usr/lib/libz.so.1
libbrotlienc.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlienc.so.1
libbrotlicommon.so.1 => 
/path/to/install/brotli/1.0.7-1.solaris10.sparc/lib/libbrotlicommon.so.1

libldap.so.5 =>  /usr/lib/libldap.so.5
liblua.so.5.3 => 
/path/to/install/lua/5.3.5-1.solaris10.sparc/lib/liblua.so.5.3

libm.so.2 => /lib/libm.so.2
libaprutil-1.so.0 => 
/path/to/install/apr-util/1.6.x/1.6.1/solaris10.sparc-modular_enable-apr_1.6.5-dso_enable-expat_2.2.6-1-ldap_explicit-openssl_1.1.1a-1-shared-sqlite_3.26.0-1-bdb_6.1.19-1-mysql_6.1.11-5-oracle_11.2.0.2.0/lib/libaprutil-1.so.0
libdb-6.1.so => 
/path/to/install/berkeley_db/6.1.19-1.solaris10.sparc/lib/libdb-6.1.so

libresolv.so.2 =>/lib/libresolv.so.2
libexpat.so.1 => 
/path/to/install/expat/2.2.6-1.solaris10.sparc/lib/libexpat.so.1
libapr-1.so.0 => 
/path/to/install/apr/1.6.x/1.6.5/solaris10.sparc-dso_enable/lib/libapr-1.so.0

libuuid.so.1 =>  /lib/libuuid.so.1
libsendfile.so.1 =>  /lib/libsendfile.so.1
librt.so.1 =>/lib/librt.so.1
libsocket.so.1 =>/lib/libsocket.so.1
libnsl.so.1 =>   /lib/libnsl.so.1
libpthread.so.1 =>   /lib/libpthread.so.1
libc.so.1 => /lib/libc.so.1
libnghttp2.so.14 => 
/path/to/install/curl/7.63.0-111-3.solaris10.sparc/lib/curl-deps/libnghttp2.so.14

libsasl.so.1 =>  /usr/lib/libsasl.so.1
libmd.so.1 =>/lib/libmd.so.1
libnspr4.so =>   /usr/lib/mps/libnspr4.so
libplc4.so =>/usr/lib/mps/libplc4.so
libnss3.so =>/usr/lib/mps/libnss3.so
libssl3.so =>/usr/lib/mps/libssl3.so
libaio.so.1 =>   /lib/libaio.so.1
libmp.so.2 =>/lib/libmp.so.2
libscf.so.1 =>   /lib/libscf.so.1

Re: [VOTE] Release httpd-2.4.38

[Dennis Clarke]

On 1/20/19 2:19 PM, Rainer Jung wrote:

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)




That is a brutally detailed pile of work there and I am impressed and
curious.  I have done everything as 64-bit objects everywhere and wonder
if you could share what you see on Solaris 10 from :

corv # ldd /usr/local/bin/httpd
libpcre.so.1 =>  /usr/local/lib/libpcre.so.1
libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0
libexpat.so.1 => /usr/local/lib/libexpat.so.1
libiconv.so.2 => /usr/local/lib/libiconv.so.2
libapr-1.so.0 => /usr/local/lib/libapr-1.so.0
libuuid.so.1 =>  /lib/64/libuuid.so.1
libsendfile.so.1 =>  /lib/64/libsendfile.so.1
librt.so.1 =>/lib/64/librt.so.1
libsocket.so.1 =>/lib/64/libsocket.so.1
libnsl.so.1 =>   /lib/64/libnsl.so.1
libpthread.so.1 =>   /lib/64/libpthread.so.1
libc.so.1 => /lib/64/libc.so.1
libaio.so.1 =>   /lib/64/libaio.so.1
libmd.so.1 =>/lib/64/libmd.so.1
libmp.so.2 =>/lib/64/libmp.so.2
libscf.so.1 =>   /lib/64/libscf.so.1
libdoor.so.1 =>  /lib/64/libdoor.so.1
libuutil.so.1 => /lib/64/libuutil.so.1
libgen.so.1 =>   /lib/64/libgen.so.1
libm.so.2 => /lib/64/libm.so.2
/lib/sparcv9/../libm/sparcv9/libm_hwcap1.so.2
/platform/SUNW,SPARC-Enterprise/lib/sparcv9/libc_psr.so.1
corv #
corv # /usr/local/bin/httpd -V
Server version: Apache/2.4.38 (Unix)
Server built:   Jan 20 2019 07:23:02
Server's Module Magic Number: 20120211:83
Server loaded:  APR 1.6.5, APR-UTIL 1.6.1
Compiled using: APR 1.6.5, APR-UTIL 1.6.1
Architecture:   64-bit
Server MPM: event
  threaded: yes (fixed thread count)
forked: yes (variable process count)
Server compiled with
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_PROC_PTHREAD_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/usr/local"
 -D SUEXEC_BIN="/usr/local/bin/suexec"
 -D DEFAULT_PIDLOG="www/var/logs/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="www/conf/mime.types"
 -D SERVER_CONFIG_FILE="www/conf/httpd.conf"
corv #

Dennis

Re: [VOTE] Release httpd-2.4.38

[Noel Butler]

> It's not just good, it's good enough!

tongue in cheek here, but... 
shouldn't that be the other way around,  "It's not just good enough,
it's good!"   :) 

-- 
Kind Regards, 

Noel Butler 

This Email, including any attachments, may contain legally 
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
--
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument

Re: [VOTE] Release httpd-2.4.38

[Rainer Jung]

Am 17.01.2019 um 19:49 schrieb Daniel Ruggeri:

Hi, all;
    Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:

[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.


+1 to release and thanks a bunch for RM!

Summary: all OK except for

- some shutdown crashes on Solaris with MPM event when statically linked 
(already observed in 2.4.37)


Detailed report:

- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
  except for expected deltas

Built on

- Solaris 10 Sparc as 32 Bit Binaries
- SLES 11+12 (64 Bits)
- RHEL 6+7 (64 Bits)

For all platforms built

- with default (shared) and static modules
- with module set reallyall
- using --enable-load-all-modules
- against external APR/APU 1.6.5/1.6.1

- using external libraries
  - expat 2.2.6
  - pcre 8.42
  - lua 5.3.5 (compiled with LUA_COMPAT_MODULE)
  - distcache 1.5.1
  - libxml2 2.9.9
  - libnghttp2 1.35.1
  - brotli 1.0.7
  - curl 7.63.0
  - jansson 2.12
and
  - openssl 0.9.8zh, 1.0.2q, 1.0.2, 1.0.1e, 1.0.1i, 1.1.1, 1.1.1a

- Tool chain:
- platform gcc except on Solaris
  (gcc 8.2.0 Solaris 10)
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing
  - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE,
-D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__
and -D_XPG6

All of the 126 builds succeeded.

- compiler warnings: none

Tested for

- Solaris 10, SLES 11+12, RHEL 6+7
- MPMs prefork, worker, event
  - prefork skipped on Solaris due to the accept lock problem that
leads to timeouts and thus excessive testing times in the proxy
- default and static module builds
- log level trace8
- module set reallyall
  - for "reallyall" 128 modules plus MPMs
- Perl client bundle build against OpenSSL 1.1.1, 1.1.0i, 1.0.2p and 0.9.8zh
- OpenSSL once linked statically and once as shared library

Every OpenSSL version in the client tested with every version in the 
server, not just the same version.


The total number of test suite runs was 1318 (plus some of them still 
running, the whole suite hasn't finished yet, but enough to come up with 
a clear expectation).


The following test failures were seen:

a Crashes only on Solaris and only with event MPM and static builds.
  The crash seems to happen only at the end of a process, likely due
  to double cleanup of OpenSSL.

b Test 59 of t/modules/include.t only and always on
  Solaris.
  Not a regression
  Old analysis was:
  This is due to a bug in the test, which uses strftime()
  with a "%s" pattern that is not supported on Solaris.
  Until recently the server and the test client both returned
  verbatim "%s" and the test succeeded. After updating some
  Perl modules for the http2 tests, the perl client even
  on Solaris now supports "%s" in strftime and the test starts
  to fail. It seems we have to fix the test.

c Various tests in t/apache/expr_string.t
  Not a regression.
  Test numbers : 6, 11, 14, 17, 20, 23, 26, 29
  Happens for 39 out of about 1300 runs
  (twice on SLES 11, 3 times on Solaris 10, otherwise always on RHEL6).
  The failure is always on line 87, where the error_log contents
  are checked. Could be due to logs written to NFS.

d Test 5 in t/modules/dav.t:
  Not a regression.
  4 times, once Solaris, twice RHEL 6 and once RHEL 7
  Creation, modified and now times not in the correct order.
  This seems to be a system issue, all tests done on NFS,
  many tested on virtualized guests.

e Test 54 in t/modules/cgi.t line 232:
  Twice once Solaris
  Test checks log contents. Could be false positive due to
  logs written to NFS.

f I expect prefork on Solaris still to observe timeouts during
  proxy tests like reported for previous versions, but didn't test
  it this time due to the long test runs when the problem happens.
  I will start these runs after the other ones will have finished
  just to be able to report, whether the old problem is still
  there or has changed.

g t/modules/http2.t fails for client using OpenSSL 0.9.8(zh)
  False positive.
  Calculation for number of tests was wrong in this case,
  so test complained about 52 tests expected but 56 tests run.
  Fixed now in svn.

So apart from the shutdown crashes on Solaris no real problems. I think 
the Solaris shutdown problem is not critical, because only for event 
plus static build (plus probably APU crypto enabled). Already observed 
for 2.4.37.


gdb bt:

#0  do_rand_init_ossl_ () at crypto/rand/rand_lib.c:313
#1  0xfe8b92dc in pthread_once () from /lib/libc.so.1
#2  0xfd9800b4 in CRYPTO_THREAD_run_once (once=0xfdb32088 , 
init=0xfd9738cc ) at crypto/threads_pthread.c:113
#3  0xfd974148 in RAND_set_rand_method (meth=0x0) at 
crypto/rand/rand_lib.c:664

#4  0xfd974220 in rand_cleanup_int () at crypto/rand/rand_lib.c:355
#5  0xfd95f8c4 in 

Re: [VOTE] Release httpd-2.4.38

[Yann Ylavic]

On Thu, Jan 17, 2019 at 7:49 PM Daniel Ruggeri  wrote:
>
> I would like to call a VOTE over the next few days to release this
> candidate tarball as 2.4.38:

+1: It's not just good, it's good enough!

Tested on Debian(s) 8, 9 and 10 w/ openssl(s) 1.0.2, 1.1.0 and 1.1.1.

Thanks Daniel for RMing!

Re: [VOTE] Release httpd-2.4.38

[Dennis Clarke]

On 1/17/19 1:49 PM, Daniel Ruggeri wrote:


I would like to call a VOTE over the next few days to release this 
candidate tarball as 2.4.38:



On Solaris 10 SPARC with OpenSSL 1.1.1a and Oracle Studio 12.6 tools :

[x] +1: It's not just good, it's good enough!

Up and running ( testing ) now https://corv.tls13.net/

fun.

Dennis Clarke

Re: [VOTE] Release httpd-2.4.38

[Noel Butler]

On 18/01/2019 04:49, Daniel Ruggeri wrote:

> Hi, all;
> Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
> 
> I would like to call a VOTE over the next few days to release this candidate 
> tarball as 2.4.38:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
> 
> The computed digests of the tarball up for vote are:
> sha1: 6ee19a7b936a6ddbbf81b313c4a8b38bf232b40e *httpd-2.4.38.tar.gz
> sha256: 38d0b73aa313c28065bf58faf64cec12bf7c7d5196146107df2ad07541aa26a6 
> *httpd-2.4.38.tar.gz

All good on slackware 14 to current, with apr-1.6.5 and apr-util 1.6.1

-- 
Kind Regards, 

Noel Butler 

This Email, including any attachments, may contain legally 
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
--
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument

Re: [VOTE] Release httpd-2.4.38

[Daniel Ruggeri]

On 2019-01-17 12:49, Daniel Ruggeri wrote:

Hi, all;
   Please find below the proposed release tarball and signatures:
https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release this
candidate tarball as 2.4.38:
[ ] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha1: 6ee19a7b936a6ddbbf81b313c4a8b38bf232b40e *httpd-2.4.38.tar.gz
sha256:
38d0b73aa313c28065bf58faf64cec12bf7c7d5196146107df2ad07541aa26a6
*httpd-2.4.38.tar.gz


+1 from me. Tested against the following. Had an errant test failure 
related to my environment, but all good now.


  kernel:
name: Linux
release: 4.9.0-8-amd64
version: #1 SMP Debian 4.9.130-2 (2018-10-27)
machine: x86_64

  libraries:
openssl: "1.1.1a"
openldap: "2.4.47"
apr: "1.6.5"
apr-util: "1.6.1"
iconv: "1.2.2"
brotli: "1.0.7"
nghttp2: "1.35.1"
zlib: "1.2.11"
pcre: "8.42"
libxml2: "2.9.9"
php: "5.6.40"
lua: "5.3.5"
curl: "7.63.0"

--
Daniel Ruggeri

Re: [VOTE] Release httpd-2.4.38

[Jim Jagielski]

+1: Tested on:

  o macOS 10.14.2, Xcode 10.1
  o CentOS7

Will do more testing today but so far, so good.

Thx for RMing!

> On Jan 17, 2019, at 1:49 PM, Daniel Ruggeri  wrote:
> 
> Hi, all;
>   Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
> 
> I would like to call a VOTE over the next few days to release this candidate 
> tarball as 2.4.38:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
> 
> The computed digests of the tarball up for vote are:
> sha1: 6ee19a7b936a6ddbbf81b313c4a8b38bf232b40e *httpd-2.4.38.tar.gz
> sha256: 38d0b73aa313c28065bf58faf64cec12bf7c7d5196146107df2ad07541aa26a6 
> *httpd-2.4.38.tar.gz
> 
> -- 
> Daniel Ruggeri

Re: [VOTE] Release httpd-2.4.38

[Joe Orton]

On Thu, Jan 17, 2019 at 12:49:18PM -0600, Daniel Ruggeri wrote:
> Hi, all;
>Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
> 
> I would like to call a VOTE over the next few days to release this candidate
> tarball as 2.4.38:
> [X] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.

+1 for release from me, thanks for RMing Daniel.

- test suite passes (run with -sslproto TLSv1.2) on Fedora 29
- CHANGES, reported versions and MMN are good

I also verified the fix for PR 63052 in this build.

Regards, Joe

Re: [VOTE] Release httpd-2.4.38

[Yann Ylavic]

On Thu, Jan 17, 2019 at 7:49 PM Daniel Ruggeri  wrote:
>
> Hi, all;
> Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/

http://httpd.apache.org/dev/dist/