Folks, Since there are many fewer pairs of eyeballs on this branch, I've completed builds across Linux, Windows, Solaris and HPUX (and trying to salvage my AIX environment that went sideways). One of my $dayjob teammates offered to jump in, so he's been able to review 2.2.32-dev plus the following STATUS proposals across all of those architectures with me today;
PATCHES PROPOSED TO BACKPORT FROM TRUNK: [ New proposals should be added at the end of the list ] *) mod_proxy: Correctly consider error response codes by the backend when processing failonstatus. PR 59869 Trunk version of patch: http://svn.apache.org/r1753592 Backport version for 2.4.x of patch: http://svn.apache.org/r1756562 Backport version for 2.2.x of patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-r1753592.patch +1: ylavic, wrowe *) mod_proxy_connect: The connect method doesn't work if the client is connecting to the apache proxy through an ssl socket. Fixed. [Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand, David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft, Rudolf Cardinal] PR: 29744 Trunk Patch: https://svn.apache.org/r813178 https://svn.apache.org/r1642857 https://svn.apache.org/r1670324 [plus patch and changes noted above] This code has evolved in trunk/2.4.x (including fixes) since the original commit (r813178 in 2009), specifically r1642857 and r1670324 from 2.4.x. 2.2.x old r813178 patch: https://bz.apache.org/bugzilla/attachment.cgi?id=30144 Delta to proposed patch: http://home.apache.org/~ylavic/patches/mod_proxy_connect-id30144_vs_r1670324.diff 2.2.x Proposed Patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-mod_proxy_connect-transfer.patch +1: wrowe, ylavic *) mod_proxy: Play/restore the TLS-SNI on new backend connections which had to be issued because the remote closed the previous/reusable one during idle (keep-alive) time. trunk patch: http://svn.apache.org/r1729826 http://svn.apache.org/r1729847 http://svn.apache.org/r1732986 http://svn.apache.org/r1733056 2.4.x patch: http://svn.apache.org/r1733474 2.2.x patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-mod_proxy-SNI_reuse.patch +1: ylavic, wrowe *) mod_proxy: Use the correct server name for SNI in case the backend SSL connection itself is established via a proxy server. PR 57139 trunk patch: http://svn.apache.org/r1634120 2.4.x patch: http://svn.apache.org/r1673941 2.2.x patch: trunk works (modulo CHANGES) +1: ylavic, wrowe The other proves too much of a moving target to chase it today. No regressions noted, everything looking good to him. I'd like to put all these lingering proxy fixes to bed, since they are in 2.4.x, but we need one more voulenteer/reviewer to make that happen. In hopes that someone might review this weekend, I'll wait until first thing Monday to tag and roll, but won't be delaying this any further. This also gives me a chance to ensure it is building on AIX, once my build environment is restored. Bill