Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-05-04 Thread Eric Covener 
vote passes with the following PMC binding votes:

+1: covener, jorton, steffenAL, rjung, jblond, thumbs, jailletc36


On Tue, Apr 28, 2026 at 2:17 PM Eric Covener  wrote:
>
> Hi all,
>
> Please find below the proposed release tarball and signatures:
>
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release
> this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
> *httpd-2.4.67-rc2.tar.gz
> sha512: 
> 5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
> *httpd-2.4.67-rc2.tar.gz
>
> The candidate source is found at
> 
> and at .
>
> --
> Eric Covener
> [email protected]



-- 
Eric Covener
[email protected]

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-05-02 Thread Christophe JAILLET 

Le 28/04/2026 à 20:17, Eric Covener a écrit :

Hi all,

Please find below the proposed release tarball and signatures:

https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release
this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
[X] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
*httpd-2.4.67-rc2.tar.gz
sha512: 
5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
*httpd-2.4.67-rc2.tar.gz

The candidate source is found at

and at .



Hi,

[X] +1: It's not just good, it's good enough!


Linux fedora 6.19.12-200.fc43.x86_64 #1 SMP PREEMPT_DYNAMIC Sun Apr 12 
15:26:33 UTC 2026 x86_64 GNU/Linux

gcc (GCC) 15.2.1 20260123 (Red Hat 15.2.1-7)
OpenSSL 3.5.4 30 Sep 2025 (Library: OpenSSL 3.5.4 30 Sep 2025)
openssl:3.5.4
brotli: 1.2.0
jansson:2.14
nghttp2:1.66.0
pcre2:  10.47
lua:5.4.8
systemd:258.7
openldap:   2.6.13
expat:  2.7.3
xml2:   2.12.10
curl:   8.15.0

CJ

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-05-01 Thread Mario Brandt 
+1 Debian 13 x64

On Apr. 28 2026, at 8:17 pm, Eric Covener  wrote:
> Hi all,
>
> Please find below the proposed release tarball and signatures:
> https://dist.apache.org/repos/dist/dev/httpd/
> I would like to call a VOTE over the next few days to release
> this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
> *httpd-2.4.67-rc2.tar.gz
> sha512: 
> 5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
> *httpd-2.4.67-rc2.tar.gz
>
> The candidate source is found at
> 
> and at .
>
> --
> Eric Covener
> [email protected]
>

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-30 Thread Rainer Jung 

Am 28.04.26 um 20:17 schrieb Eric Covener:

Hi all,

Please find below the proposed release tarball and signatures:

https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release
this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
[ ] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
*httpd-2.4.67-rc2.tar.gz
sha512: 
5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
*httpd-2.4.67-rc2.tar.gz

The candidate source is found at

and at .


+1 for release and thanks for RM!

- Sigs and hashes OK
- contents of tarballs identical
- contents of tag and tarballs identical
  except for expected deltas

Built on

- SLES 12+15 (64 Bits)
- RHEL 7+8+9+10 (64 Bits)
- Solaris 10 Sparc

For all platforms built

- with default (shared) modules
- with module set reallyall
- using --enable-load-all-modules

- using libraries
  - APR/APU
- bundled deps tarball
- 1.7.5/1.6.3
- 1.6.x(HEAD=r1923080)/1.6.x(HEAD=r1923080)
- trunk(HEAD=r1923080) with libxml2
- trunk(HEAD=r1923080) with expat
  - OpenSSL 3.4.0, 3.3.2, 3.2.3, 3.1.7, 3.0.15, 1.1.1w,
and for all except RHEL 9 also 1.1.1
Not all APR/APU combinations with every OpenSSL
  - expat 2.8.0
  - pcre 10.47
  - lua 5.5.0 (compiled with LUA_COMPAT_MODULE)
  - libxml2 2.15.3
  - sqlite 3.53.0
  - libnghttp2 1.69.0
  - brotli 1.2.0
  - curl 8.19.0
  - jansson 2.15.0
  - libldap 2.6.13
also with platform ldap on Solaris)

- in total 14 builds per platform (18 for Solaris)

- Tool chain:
- platform gcc on Linux, gcc 9.5 on Solaris 10
- CFLAGS: -O2 -g -Wall -fno-strict-aliasing

All builds succeeded.

- compiler warnings: see below "A)"

Perl tests run with OpenSSL client versions 3.6.0, 3.5.0, 3.0.15, 1.1.1w 
and  1.0.2u (for RHEL 10 with 3.6.0 3.5.4 3.0.18 1.1.1w) against every 
server build. MPMs tested event, worker, prefork.


  - No failures in 1218 test runs on Linux

  - Sporadic failures on test runs on Solaris. Only parts of the 
combinations tested there, but the result seems already valid.


Details of Solaris perl test failures see below "B)".

Also pytest checked against one specific server version on every Linux 
variant tested, using clients with OpenSSL 4.0.0, 3.6.2, 3.5.6 and 
3.0.20 and against every MPM.


Only 2 runs out of 66 had a single (sporadic) failure.

Details of Linux pytest failures see below "C)".

Regards,

Rainer

A) Compiler warnings


- compiler warnings httpd sources:

  - all builds (I use recent libxml2)

modules/filters/mod_xml2enc.c:608:5: warning: 'xmlAddEncodingAlias' is 
deprecated: See 
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html 
[-Wdeprecated-declarations]


modules/filters/mod_proxy_html.c:342:5: warning: 'htmlTagLookup' is 
deprecated: See 
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html 
[-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:390:5: warning: 'htmlTagLookup' is 
deprecated: See 
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html 
[-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:425:5: warning: 'attrs_req' is 
deprecated [-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:426:9: warning: 'attrs_req' is 
deprecated [-Wdeprecated-declarations]
modules/filters/mod_proxy_html.c:433:17: warning: 'htmlAttrAllowed' is 
deprecated: See 
https://gnome.pages.gitlab.gnome.org/libxml2/html/deprecated.html 
[-Wdeprecated-declarations]


- compiler warnings bundled apr-util (from deps tarball):

  - only on RHEL 10 due to newest gcc

srclib/apr-util/dbm/sdbm/sdbm_pair.c:234:1: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:21:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:22:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:23:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:24:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:25:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:26:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:27:17: warning: old-style function 
definition [-Wold-style-definition]
srclib/apr-util/dbm/sdbm/sdbm_pair.h:28:17: warning: old-style function 
definition [-Wold-style-definition]


  - all builds, both OpenSSL versions

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-30 Thread Joe Orton 
Infra unblocked the pipes and we have a successful CI run here too for 
the rc2 tag:

https://github.com/apache/httpd/actions/runs/25163955182

Regards, Joe

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-30 Thread SteffenAL

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-29 Thread Frank Gingras 
On Wed, Apr 29, 2026 at 8:34 AM Joe Orton  wrote:

> On Tue, Apr 28, 2026 at 02:17:51PM -0400, Eric Covener wrote:
> > Hi all,
> >
> > Please find below the proposed release tarball and signatures:
> >
> > https://dist.apache.org/repos/dist/dev/httpd/
> >
> > I would like to call a VOTE over the next few days to release
> > this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
> > [X] +1: It's not just good, it's good enough!
> > [ ] +0: Let's have a talk.
> > [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> Thanks a lot for for RMing twice!
>
> Annoying the github mirroring seems to be broken [1] since the last RC
> so we don't have CI results, but from manual testing +1 for release,
> tests pass on RHEL8/9/10 and Fedora 43.
>
> Regards, Joe
>
> [1] https://issues.apache.org/jira/browse/INFRA-27865
>
>
This fixes the aformentioned issues in the previous thread, so +1 for me on
Slackware 15.

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-29 Thread Joe Orton 
On Tue, Apr 28, 2026 at 02:17:51PM -0400, Eric Covener wrote:
> Hi all,
> 
> Please find below the proposed release tarball and signatures:
> 
> https://dist.apache.org/repos/dist/dev/httpd/
> 
> I would like to call a VOTE over the next few days to release
> this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
> [X] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.

Thanks a lot for for RMing twice!

Annoying the github mirroring seems to be broken [1] since the last RC 
so we don't have CI results, but from manual testing +1 for release, 
tests pass on RHEL8/9/10 and Fedora 43.

Regards, Joe

[1] https://issues.apache.org/jira/browse/INFRA-27865

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-28 Thread Jeff McKenna 

On 2026-04-28 3:17 p.m., Eric Covener wrote:

Hi all,

Please find below the proposed release tarball and signatures:

https://dist.apache.org/repos/dist/dev/httpd/

I would like to call a VOTE over the next few days to release
this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
[ ] +1: It's not just good, it's good enough!
[ ] +0: Let's have a talk.
[ ] -1: There's trouble in paradise. Here's what's wrong.

The computed digests of the tarball up for vote are:
sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
*httpd-2.4.67-rc2.tar.gz
sha512: 
5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
*httpd-2.4.67-rc2.tar.gz

The candidate source is found at

and at .



+1 (Windows / Visual Studio)

thanks!

-jeff



--
Jeff McKenna
GatewayGeo: Developers of MS4W, & offering MapServer Consulting/Dev
co-founder of FOSS4G
http://gatewaygeo.com/

Re: [VOTE] Release httpd-2.4.67-rc2 as httpd-2.4.67

2026-04-28 Thread Eric Covener 
On Tue, Apr 28, 2026 at 2:17 PM Eric Covener  wrote:
>
> Hi all,
>
> Please find below the proposed release tarball and signatures:
>
> https://dist.apache.org/repos/dist/dev/httpd/
>
> I would like to call a VOTE over the next few days to release
> this candidate tarball httpd-2.4.67-rc2 as 2.4.67:
> [ ] +1: It's not just good, it's good enough!
> [ ] +0: Let's have a talk.
> [ ] -1: There's trouble in paradise. Here's what's wrong.
>
> The computed digests of the tarball up for vote are:
> sha256: 10a578d199c3930250534fac629995f34ef7571709a7c88c45239e1fdc88cf77
> *httpd-2.4.67-rc2.tar.gz
> sha512: 
> 5538ccf1e555d94c7be6e48021d7a4568d6fd86841fe75f78adfd9ace1a4874893b8522ef535a8858a114a9839bde7be6dbddef229e3e1a1ef12bdf3e7bca848
> *httpd-2.4.67-rc2.tar.gz
>
> The candidate source is found at
> 
> and at .
>

my +1 aix/xlc/ppc64