Re: SSL support extensions - design review request

2014-08-20 Thread Igor Galić
- Original Message - James, Thanks for the feedback. I think Alan already addressed most of the issues. Here are my comments on the remaining items. Why do TSSslCertFindByName() and TSSslCertFindByAddress() take a TSSslVConn argument? I'm using the TSSslVConn to cache

Re: SSL support extensions - design review request

2014-08-20 Thread Alan M. Carroll
Igor, I'm using the TSSslVConn to cache a pointer to the global cert table (loaded from ssl_multicert.config). Since in theory the ssl_multicert.config could be reloaded at any point, we acquire() a copy does this mean we would now support reloading of the ssl config w/o restart? No. It

5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
All; I have created the 5.1.x branch. This is in preparation for the 5.1.0 release of Traffic Server. All commits to this branch must be explicitly approved by the Release Manager (amc). If you have something you really need to get in to 5.1.0, fix it on master first and then ask to have that

Re: 5.1.0 has branched

2014-08-20 Thread Adam W. Dace
Searched around the web a bit...and am trying this: adace@mound:~/Src/apache git clone https://git-wip-us.apache.org/repos/asf/trafficserver.git ... adace@mound:~/Src/apache cd trafficserver adace@mound:~/Src/apache/trafficserver git checkout 5.1.x Branch 5.1.x set up to track remote branch 5.1.x

Re: 5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
Adam, adace@mound:~/Src/apache/trafficserver git checkout 5.1.x Branch 5.1.x set up to track remote branch 5.1.x from origin. Switched to a new branch '5.1.x' adace@mound:~/Src/apache/trafficserver Does that sound right? Yes.

Re: SSL support extensions - design review request

2014-08-20 Thread James Peach
On Aug 20, 2014, at 5:33 AM, Igor Galić i.ga...@brainsware.org wrote: - Original Message - James, Thanks for the feedback. I think Alan already addressed most of the issues. Here are my comments on the remaining items. Why do TSSslCertFindByName() and

Re: 5.1.0 has branched

2014-08-20 Thread Alan M. Carroll
All; I forgot to note that as part of the last triage a number of bugs were moved from 5.1.0 to 5.2.0 because of the lack of an available patch. If one of these was yours, you will need to work on it on master for 5.2.0 and explicitly request a back port to 5.1.0.

Re: SSL support extensions - design review request

2014-08-20 Thread James Peach
On Aug 19, 2014, at 10:13 AM, Alan M. Carroll a...@network-geographics.com wrote: James, I can answer a few of these. Thanks for the docs, this looks very promising. When you are ready to submit patches, this will need API review

Re: 5.1.0 has branched

2014-08-20 Thread Adam W. Dace
Thanks. :-) On Wed, Aug 20, 2014 at 10:12 AM, Alan M. Carroll a...@network-geographics.com wrote: Adam, adace@mound:~/Src/apache/trafficserver git checkout 5.1.x Branch 5.1.x set up to track remote branch 5.1.x from origin. Switched to a new branch '5.1.x'

Traffic server antivirus plugin?

2014-08-20 Thread Juan Pablo Daniel
Hi! I have ATS as a forward proxy working great and now I want to extend his tentacles to protect the users. Is there a run command on every transferred file plugin so when a user start a download it runs a command (the antivirus client) on the file and then on the result decides if it pass or

header-rewrite change

2014-08-20 Thread Manjesh Nilange
Hi all, We have a feature to implement and are wondering if header-rewrite is the right home for this feature. In a nutshell, when using ATS as a reverse proxy, we want to redirect all http requests with a certain cookie to their https counterparts but not using remap.config. The remap.config

Re: Traffic server antivirus plugin?

2014-08-20 Thread James Peach
On Aug 20, 2014, at 12:35 PM, Juan Pablo Daniel jpdbor...@gmail.com wrote: Hi! I have ATS as a forward proxy working great and now I want to extend his tentacles to protect the users. Is there a run command on every transferred file plugin so when a user start a download it runs a command

Re: [VOTE] Release Apache Traffic Server 4.2.2 (RC0)

2014-08-20 Thread Phil Sorber
On Sun, Aug 10, 2014 at 2:41 PM, Phil Sorber sor...@apache.org wrote: Hello All, I've prepared a release for v4.2.2 (RC0) which is the latest stable release in the 4.2.x series. This is the third release in our Long Term Support (LTS) version as detailed in our Release Management document:

Re: Traffic server antivirus plugin?

2014-08-20 Thread Nick Kew
On 20 Aug 2014, at 22:35, James Peach wrote: Is there a run command on every transferred file plugin so when a user start a download it runs a command (the antivirus client) on the file and then on the result decides if it pass or fails ? Maybe https://www.ironbee.com can do this? Indeed,

Re: Traffic server antivirus plugin?

2014-08-20 Thread Juan Pablo Daniel
Hello, first thanks you for replying :) Using ironbee will make me add something else to my server, and it looks like it's on a very early stage (with not secure and ready for production banners and everything) , have you tried this with ATS? is it working well? Is there any reason why not to do