Re: [VOTE] Release Apache httpd 2.4.26 as GA

2018-02-21 Thread Eric Covener 
On Tue, Feb 20, 2018 at 9:20 PM, Eric Covener  wrote:
> On Tue, Jun 13, 2017 at 10:05 PM, Eric Covener  wrote:
>> +1 AIX/xlc/ppc64
>>
>> I have two quirks to record, both are openssl / openssl 1.1 related
>> but given the state of my AIX system I am still +1 on the release.
>>
>>  - proxy/ssl.t almost totally fails with handhsake errors between
>> client and origin
>> [Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
>> SSL Library Error: error:14171105:SSL
>> routines:tls_process_server_hello:wrong cipher returned
>>
>> - There is some kind of atexit()-like issue with unloaded openssl-1.1
>> that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
>> related to signal handling thing)
>> .() at 0x0
>> exit(??) at 0x90550c0
>> destroy_and_exit_process(process = 0x00011001eb28,
>> process_exit_value = 0), line 266 in "main.c"
>> main(argc = 4, argv = 0x07c8), line 685 in "main.c"
>
> (replying to old vote thread for posterity)
>
> TIL:
>  - linux calls atexit() callbacks when a library is unloaded, not just
> at process exit
>  - AIX doesn't
>  - openssl 1.1 adds an atexit handler
>  - openssl 1.1 has some code to try to prevent the library from really
> being unloaded by inflating the dlopen reference count so its atexit
> will really be available at exit.
> - https://github.com/openssl/openssl/pull/1693
> -  apparently this isn't working on AIX
>  - openssl 1.1 doesn't seem to be provided by IBM or third parties on
> AIX as of early 2018.

LoadFile of libcrypto.so.1.1 works around this by preventing
libcrypto.so.1.1 from being unloaded when mod_ssl is loaded. Added a
hint to https://wiki.apache.org/httpd/AIXPlatform

>
>
>
>
>
>
>
>
> --
> Eric Covener
> cove...@gmail.com



-- 
Eric Covener
cove...@gmail.com

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2018-02-20 Thread Eric Covener 
On Tue, Jun 13, 2017 at 10:05 PM, Eric Covener  wrote:
> +1 AIX/xlc/ppc64
>
> I have two quirks to record, both are openssl / openssl 1.1 related
> but given the state of my AIX system I am still +1 on the release.
>
>  - proxy/ssl.t almost totally fails with handhsake errors between
> client and origin
> [Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
> SSL Library Error: error:14171105:SSL
> routines:tls_process_server_hello:wrong cipher returned
>
> - There is some kind of atexit()-like issue with unloaded openssl-1.1
> that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
> related to signal handling thing)
> .() at 0x0
> exit(??) at 0x90550c0
> destroy_and_exit_process(process = 0x00011001eb28,
> process_exit_value = 0), line 266 in "main.c"
> main(argc = 4, argv = 0x07c8), line 685 in "main.c"

(replying to old vote thread for posterity)

TIL:
 - linux calls atexit() callbacks when a library is unloaded, not just
at process exit
 - AIX doesn't
 - openssl 1.1 adds an atexit handler
 - openssl 1.1 has some code to try to prevent the library from really
being unloaded by inflating the dlopen reference count so its atexit
will really be available at exit.
- https://github.com/openssl/openssl/pull/1693
-  apparently this isn't working on AIX
 - openssl 1.1 doesn't seem to be provided by IBM or third parties on
AIX as of early 2018.








-- 
Eric Covener
cove...@gmail.com

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-19 Thread Niklas Edmundsson 

On Tue, 13 Jun 2017, Jim Jagielski wrote:


The pre-release test tarballs for Apache httpd
version 2.4.26 can be found at the usual place:

http://httpd.apache.org/dev/dist/


Late to the game and more of a nitpick for next release:

http://httpd.apache.org/dev/dist/CHANGES_2.4.26 notably has links to 
the complete 2.2.x and 2.0.x release history, but NOT for the complete 
2.4.x release history...


Yes, it's available in CHANGES_2.4 but I think there should be a hint 
in CHANGES_2.4.26 as well to avoid confusing newcomers more than 
necessary :-)


Also I suspect that the following note at the bottom of the CHANGES_ 
files has gone stale:


 [Apache 2.3.0-dev includes those bug fixes and changes with the
   Apache 2.2.xx tree as documented, and except as noted, below.]

AFAIK the 2.2.xx tree isn't changing much nowadays...

/Nikke
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 Niklas Edmundsson, Admin @ {acc,hpc2n}.umu.se  | ni...@acc.umu.se
---
 "Initiate warp shell." - Picard
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-16 Thread Jacob Champion 

Slightly late to the party, but

[x] +1: Good to go

Ubuntu 16.04 x64: test suites for httpd and mod_websocket pass with

APR 1.5.2, APR-Util 1.5.4
OpenSSL 1.0.2g (Debian patched)
mpm_event, mpm_prefork, mpm_worker
mod_websocket 0.1.1

I didn't test brotli or PHP. The prefork tests intermittently run into 
PR 23238's segfault [1].


--Jacob

[1] https://bz.apache.org/bugzilla/show_bug.cgi?id=23238

[RESULT] Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-16 Thread Jim Jagielski 
With more than the 3 +1 (binding) votes, and no -1, this vote
PASSES.

I anticipate a Release Announcement on Monday. Will move the
artifacts for mirror grab.

Thx to all testers and all contributors!

> On Jun 13, 2017, at 1:33 PM, Jim Jagielski  wrote:
> 
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
>   http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-16 Thread William A Rowe Jr 
On Tue, Jun 13, 2017 at 12:33 PM, Jim Jagielski  wrote:
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

  [X] +1: Good to go

Looking good, thanks for RM'ing!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-16 Thread Jim Jagielski 
+1:
   o macOS 10.12.5 / Xcode 8.3.3
   o CentOS 6, 64bit

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-16 Thread Stefan Eissing 

> Am 13.06.2017 um 19:33 schrieb Jim Jagielski :
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.

+1 

MacOS 10.12.5 (openssl 1.0.2l, nghttp2 1.23.1)
Ubuntu 16.04.02 (openssl 1.0.2j, nghttp2 1.23.1)

Thanks for RMing again!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-15 Thread Jacob Perkins 
Good to go from here. Tested on C6 32/64 and C7 64



—
Jacob Perkins
Product Owner
cPanel Inc.

jacob.perk...@cpanel.net 
Office:  713-529-0800 x 4046
Cell:  713-560-8655

> On Jun 13, 2017, at 12:33 PM, Jim Jagielski  wrote:
> 
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
>   http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [X ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!



smime.p7s
Description: S/MIME cryptographic signature

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-15 Thread Steffen 


+1 on Windows

All fine  with building (to get a complete build did the MS dsp/dsw 
way) VC14/15 and running.


Build with:


nghttp2 1.23.1
apr 1.6.2
apr-util 1.6.0 with Crypto OpenSSL enabled
apr-iconv 1.2.1
VC15 openssl 1.1.0f, VC11/14 openssl 1.0.2l
zlib 1.2.11
brotli lib 1.0.0
pcre 8.40 with JIT, SUPPORT_UTF8 and REBUILD_CHARTABLES enabled
httpd.exe with OPENSSL_Applink and VC14/15 SupportedOS Manifest
libxml2 2.9.4
lua 5.2.4
expat 2.2.0



On Tuesday 13/06/2017 at 19:33, Jim Jagielski  wrote:

The pre-release test tarballs for Apache httpd
version 2.4.26 can be found at the usual place:

http://httpd.apache.org/dev/dist/

I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

[ ] +1: Good to go
[ ] +0: meh
[ ] -1: Danger Will Robinson. And why.

Vote will last the normal 72 hrs.

NOTE: The *-deps are only there for convenience.

Thx!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-14 Thread Yann Ylavic 
On Tue, Jun 13, 2017 at 7:33 PM, Jim Jagielski  wrote:
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
>
[X] +1: Good to go

Tested on Debian(s) 7, 8 and 9.
All tests passed (but usual TODOs in "t/modules/session.t" for Debian 7 and 8).
PGP signatures, SHA* and MD5 OK.

Note, this new warning with gcc 4.7.2, 4.9.2 and 6.3.0:
util.c: In function ‘ap_parse_form_data’:
util.c:2667:10: warning: ‘escaped_char[0]’ may be used uninitialized
in this function [-Wmaybe-uninitialized]
 char escaped_char[2];
  ^~~~
Looks very much like a spurious warning, but it's also hard for the
compiler to figure out.


Thanks for releasing, Jim.

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-14 Thread Gregg Smith 

On 6/13/2017 10:33 AM, Jim Jagielski wrote:

The pre-release test tarballs for Apache httpd
version 2.4.26 can be found at the usual place:

http://httpd.apache.org/dev/dist/

I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

[ ] +1: Good to go
[ ] +0: meh
[ ] -1: Danger Will Robinson. And why.


+1 on Windows

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-14 Thread Reindl Harald 



Am 13.06.2017 um 19:33 schrieb Jim Jagielski:

The pre-release test tarballs for Apache httpd
version 2.4.26 can be found at the usual place:

http://httpd.apache.org/dev/dist/

I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

[ ] +1: Good to go
[ ] +0: meh
[ ] -1: Danger Will Robinson. And why.

Vote will last the normal 72 hrs.

NOTE: The *-deps are only there for convenience


looks good so far with apr 1.5 on Fedora 25 because somebody should fix 
https://www.apache.org/dist/apr/ and when you look closer you see 1.6.x 
below


APR 1.5.2 is the latest available version
APR-util 1.5.4 is the latest available version
APR-iconv 1.2.1 is the latest available version
APR 0.9.20 is also available
APR-util 0.9.19 is also available
APR-iconv 0.9.7 is also available

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-14 Thread Noel Butler 
On 14/06/2017 03:33, Jim Jagielski wrote:

> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!

+1 Slackware with included apr 1.6.2 and apr-util 1.6.0

-- 
Kind Regards, 

Noel Butler 

This Email, including any attachments, may contain legally 
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
--
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument

signature.asc
Description: OpenPGP digital signature

Re: [VOTE] Release Apache httpd 2.4.26 as GA

2017-06-13 Thread Eric Covener 
+1 AIX/xlc/ppc64

I have two quirks to record, both are openssl / openssl 1.1 related
but given the state of my AIX system I am still +1 on the release.

 - proxy/ssl.t almost totally fails with handhsake errors between
client and origin
[Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
SSL Library Error: error:14171105:SSL
routines:tls_process_server_hello:wrong cipher returned

- There is some kind of atexit()-like issue with unloaded openssl-1.1
that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
related to signal handling thing)
.() at 0x0
exit(??) at 0x90550c0
destroy_and_exit_process(process = 0x00011001eb28,
process_exit_value = 0), line 266 in "main.c"
main(argc = 4, argv = 0x07c8), line 685 in "main.c"