Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread Rainer Jung
On 30.01.2012 03:16, William A. Rowe Jr. wrote: On 1/29/2012 3:18 PM, Rainer Jung wrote: Overview: Minor problem (not a regression): config.guess and config.sub are a bit old (2008) due to buildconf in the released apr overwriting the config.* in our svn by the system config.*. This is fixed

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Michael Felt
I have been adding this to the config.layout # Adopt layout using /opt (read-only) filesystem conventions on AIX # Standard executables in /opt (shareable) # man pages at AIX standard location (/usr/share/man) # editable files, scripts in /etc and /var Layout AIX prefix:

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Noel Butler
On Mon, 2012-01-30 at 11:03 +0100, Michael Felt wrote: prefix:/opt/apache2 exec_prefix: /opt/apache2 I have often ponderd WHY people do things like this, the projects name is apache, not apache2 signature.asc Description: This is a digitally signed message part

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Graham Leggett
On 30 Jan 2012, at 12:03 PM, Michael Felt wrote: So, my question about this proposed layout: are there any files in /opt that need to be modified on a per-system basis? Not that I could see, no. Finally, as a distributeable I would be creating an installp, or AIX legacy package as this,

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Guenter Knauf
Am 29.01.2012 20:19, schrieb William A. Rowe Jr.: On 1/29/2012 4:21 AM, Michael Felt wrote: Um. Now that I am back from vacation - I am aware you are busy with a known bug (core issue), but would still be nice to have a 2.4.0/2.4.1 something to test-build with (for AIX). The right answer

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Guenter Knauf
Am 29.01.2012 20:19, schrieb William A. Rowe Jr.: On 1/29/2012 4:21 AM, Michael Felt wrote: Um. Now that I am back from vacation - I am aware you are busy with a known bug (core issue), but would still be nice to have a 2.4.0/2.4.1 something to test-build with (for AIX). The right answer

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Jim Jagielski
On Jan 29, 2012, at 8:22 PM, Noel Butler wrote: On Sun, 2012-01-29 at 13:19 -0600, William A. Rowe Jr. wrote: On 1/29/2012 4:21 AM, Michael Felt wrote: Um. Now that I am back from vacation - I am aware you are busy with a known bug (core issue), but would still be nice to have a

Re: who is working on getting security patches proposed for 2.0.65?

2012-01-30 Thread Rainer Jung
On 25.01.2012 14:00, Jeff Trawick wrote: I'll start with the patch for CVE-2011-4317. I removed CVE-2011-3348 from STATUS (does not apply to 2.0.x) and added a comment for CVE-2010-2068, which IMHO does not apply either. Regards, Rainer

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Jim Jagielski
Anyone with Windows willing to sign up to review/test? On Jan 29, 2012, at 2:53 PM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Jim Jagielski
On Jan 29, 2012, at 2:53 PM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to avoid, aren't we?) OK, patch is attached.

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 4:02 AM, Rainer Jung wrote: We add apu-1-confg --includes to CPPFLAGS and then use CPP and apu_version.h to detect which version we have. That works for most gcc versions, but recent gcc chokes, because apu_version.h includes apr_version.h, which can not be found due to our

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 4:31 AM, Noel Butler wrote: On Mon, 2012-01-30 at 11:03 +0100, Michael Felt wrote: prefix:/opt/apache2 exec_prefix: /opt/apache2 I have often ponderd WHY people do things like this, the projects name is apache, not apache2 No, it isn't. Apache is the name

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 7:24 AM, Jim Jagielski wrote: On Jan 29, 2012, at 8:22 PM, Noel Butler wrote: On Sun, 2012-01-29 at 13:19 -0600, William A. Rowe Jr. wrote: On 1/29/2012 4:21 AM, Michael Felt wrote: Um. Now that I am back from vacation - I am aware you are busy with a known bug (core

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread Rainer Jung
On 30.01.2012 19:10, William A. Rowe Jr. wrote: On 1/30/2012 4:02 AM, Rainer Jung wrote: We add apu-1-confg --includes to CPPFLAGS and then use CPP and apu_version.h to detect which version we have. That works for most gcc versions, but recent gcc chokes, because apu_version.h includes

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 7:24 AM, Jim Jagielski wrote: On Sun, 2012-01-29 at 13:19 -0600, William A. Rowe Jr. wrote: The right answer would be to have snapshots to share, but AFAIK we no longer create them? If people didn't test formally announced *betas*, I have significant doubts that they would

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Jim Jagielski
On Jan 30, 2012, at 2:03 PM, William A. Rowe Jr. wrote: On 1/30/2012 7:24 AM, Jim Jagielski wrote: On Sun, 2012-01-29 at 13:19 -0600, William A. Rowe Jr. wrote: The right answer would be to have snapshots to share, but AFAIK we no longer create them? If people didn't test formally

2.4.1….??

2012-01-30 Thread Jim Jagielski
Do I dare float the idea of a 2.4.1 TR very soon??

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Stefan Fritsch
On Monday 30 January 2012, William A. Rowe Jr. wrote: On 1/30/2012 4:31 AM, Noel Butler wrote: On Mon, 2012-01-30 at 11:03 +0100, Michael Felt wrote: prefix:/opt/apache2 exec_prefix: /opt/apache2 I have often ponderd WHY people do things like this, the projects name

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Stefan Fritsch
On Mon, 30 Jan 2012, Jim Jagielski wrote: On Jan 29, 2012, at 2:53 PM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 12:27 PM, Rainer Jung wrote: On 30.01.2012 19:10, William A. Rowe Jr. wrote: On 1/30/2012 4:02 AM, Rainer Jung wrote: We add apu-1-confg --includes to CPPFLAGS and then use CPP and apu_version.h to detect which version we have. That works for most gcc versions, but recent gcc

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 1:54 PM, Jim Jagielski wrote: On Jan 30, 2012, at 2:03 PM, William A. Rowe Jr. wrote: On 1/30/2012 7:24 AM, Jim Jagielski wrote: On Sun, 2012-01-29 at 13:19 -0600, William A. Rowe Jr. wrote: The right answer would be to have snapshots to share, but AFAIK we no longer create

Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases?

1.3 patches for recent security issues (funny or not, depending on your situation)

2012-01-30 Thread Jeff Trawick
Notes to the general public: * This is not necessarily a complete list, depending on your idea of recent. * These are not official patches. * These do not match any vetted commits to the source tree. * No official release of these or other fixes to 1.3 is planned. CVE-2011-3368/CVE-2011-4317:

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread William A. Rowe Jr.
On 1/25/2012 4:59 PM, William A. Rowe Jr. wrote: There are two considerations, as Jim pointed out. First a choice; [ ] Include apr-util 1.4.1 in any httpd 2.2.x [ ] Remain at apr-util 1.3.12 in any httpd 2.2.x The concensus was for apr-util 1.4.1 to be included. Thanks for chiming

Re: 1.3 patches for recent security issues (funny or not, depending on your situation)

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 3:54 PM, Jeff Trawick wrote: Notes to the general public: * This is not necessarily a complete list, depending on your idea of recent. * These are not official patches. * These do not match any vetted commits to the source tree. * No official release of these or other fixes to

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread Jeff Trawick
On Mon, Jan 30, 2012 at 4:57 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 1/25/2012 4:59 PM, William A. Rowe Jr. wrote: There are two considerations, as Jim pointed out.  First a choice;  [ ]  Include apr-util 1.4.1 in any httpd 2.2.x  [ ]  Remain at apr-util 1.3.12 in any httpd

Re: 1.3 patches for recent security issues (funny or not, depending on your situation)

2012-01-30 Thread Jeff Trawick
On Mon, Jan 30, 2012 at 5:07 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 1/30/2012 3:54 PM, Jeff Trawick wrote: Notes to the general public: * This is not necessarily a complete list, depending on your idea of recent. * These are not official patches. * These do not match any

Re: Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread Eric Covener
On Mon, Jan 30, 2012 at 4:53 PM, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases? -0

Re: Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread Noel Butler
On Mon, 2012-01-30 at 15:53 -0600, William A. Rowe Jr. wrote: On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases? No... Maybe that's a consideration for 3.stable-release, if at

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Daniel Ruggeri
On 1/30/2012 7:51 AM, Jim Jagielski wrote: Anyone with Windows willing to sign up to review/test? I don't have a build environment to create something based on the diff, but if someone can create a build , I'll happily do the testing. -- Daniel Ruggeri

Re: Segfault in openssl's err_cmp when using SSLCryptoDevice and new SSLProxyMachineCertificateChainFile

2012-01-30 Thread Daniel Ruggeri
It's been hell lately - sorry for the sloow reply On 1/19/2012 1:13 AM, Sander Temme wrote: Interesting... which version of OpenSSL? Must be 0.9.7 or 0.9.8, because err_cmp() disappeared after that. And the signature doesn't match what we're seeing in the backtrace. And which

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Michael Felt
I can look at RPM, but I am at least 80% of the way with installp. A quickDirty one is already ready, but I want to finish it up a little bit more (sub filesets, dependancies). On Mon, Jan 30, 2012 at 10:31 AM, Graham Leggett minf...@sharp.fm wrote: On 30 Jan 2012, at 12:03 PM, Michael Felt

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread Michael Felt
I had assummed that apache2 was so that people could test apache2 without killing their apache1 installation. IMHO IBM's packaging of early apache (called IHS for - I think IBM HTTP Server) was 'different' and they kept changing the name of the main directory, e.g. changed the capitalization of

Re: Segfault in openssl's err_cmp when using SSLCryptoDevice and new SSLProxyMachineCertificateChainFile

2012-01-30 Thread Dr Stephen Henson
On 30/01/2012 23:43, Daniel Ruggeri wrote: It's been hell lately - sorry for the sloow reply On 1/19/2012 1:13 AM, Sander Temme wrote: Interesting... which version of OpenSSL? Must be 0.9.7 or 0.9.8, because err_cmp() disappeared after that. And the signature doesn't match what

Re: [RESCINDED ]Re: [VOTE] Release Apache httpd 2.4.0

2012-01-30 Thread William A. Rowe Jr.
On 1/30/2012 6:21 PM, Michael Felt wrote: I had assummed that apache2 was so that people could test apache2 without killing their apache1 installation. Fairly certain that was true. Of course moving from 2.0-2.2-2.4 that is no longer much help. Anyways, just wanted to let you know there is

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Rainer Jung
On 31.01.2012 00:36, Daniel Ruggeri wrote: On 1/30/2012 7:51 AM, Jim Jagielski wrote: Anyone with Windows willing to sign up to review/test? I don't have a build environment to create something based on the diff, but if someone can create a build , I'll happily do the testing. What's you

Re: Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread Rainer Jung
On 30.01.2012 22:53, William A. Rowe Jr. wrote: On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases? -0.5 Rainer

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Daniel Ruggeri
On 1/31/2012 12:01 AM, Rainer Jung wrote: What's you runtime env then (Win version and 32 or 64 Bits)? Rainer I have at my immediate disposal Server 2003 32-bit as well as Win7 and Server 2008 64-bit. I may be able to scrounge up some more exotic configurations if needed. My earlier tests to

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Gregg Smith
On 1/29/2012 11:53 AM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to avoid, aren't we?) OK, patch is attached. This needs

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Gregg Smith
On 1/30/2012 11:14 PM, Gregg Smith wrote: On 1/29/2012 11:53 AM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more isolated, rather than the current impl which is intrusive (which is part of what we're trying to avoid,

Re: Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread Stefan Fritsch
On Monday 30 January 2012, William A. Rowe Jr. wrote: On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases? FTR, I am also -0 to this change right now.

Re: Socket transfer from Apache httpd to a non-httpd process for https connections

2012-01-30 Thread Henrik Strand
Hi Ray, I'm using a slightly modified version of http://httpd.apache.org/docs/2.3/mod/mod_proxy_fdpass.html Regards, Henrik On Fri, 2012-01-20 at 17:12 +0100, Ray Morris wrote: I'm using a httpd module that does a socket transfer from the httpd process to another non-httpd process that is