Bug#777546: Please don't grant localhost unconditional access to mod_status

2016-01-31 Thread Jean-Michel Vourgère
For the record, this issue was slashdoted yesterday:

http://apache.slashdot.org/story/16/01/30/1825256/sensitive-information-can-be-revealed-from-tor-hidden-services-on-apache



Bug#736763: bugs.debian.org: apache2 not removed after purging smokeping

2015-08-11 Thread Jean-Michel Vourgère
Control: reassign -1 apt

I can't see anything wrong in apache2 dependencies, nor in smokeping ones.

When installing smokeping, then uninstalling it, some recommended
packages are left, such as javascript-common in my case.

Moreover, if I uninstall javascript-common, aptitude propose me to
uninstall apache2 next time I run it.
apt-get autoremove does not propose that.

I guess this is an issue with apt. Reassigning.

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55c9cb2d.5030...@debian.org



Re: Debian GNU/Linux 8.1 (jessie), Apache2, userdir, LoadModule missing in userdir.load

2015-08-10 Thread Jean-Michel Vourgère
Hello Manuel

Manuel Dräger wrote:
 The line to load the module is missing from the file
 /etc/apache2/mods-available/userdir.load.
 Please add the following line as the first line of the file
   LoadModule userdir_module /usr/lib/apache2/modules/mod_userdir.so

I don't know how you came to have that line removed, but the line is
present in jessie:

https://anonscm.debian.org/cgit/pkg-apache/apache2.git/tree/debian/config-dir/mods-available/userdir.load?h=jessie

I guess you or one the the program you used removed it.

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55c8818b.8000...@debian.org



Bug#793862: apache2: purging deletes directory co-owned by apache2-bin: /var/lib/apache2/

2015-07-28 Thread Jean-Michel Vourgère
Control: reassign -1 apache2 2.4.12-2

The problem is not in apache2.2-common that doesn't exists any more, at
least not in that version, but in apache2.postrm that basically does on
purge:
rm -rf /var/lib/apache2

while apache2-bin.postrm does:
rm -f /var/lib/apache2/deferred_actions

Both packages have /var/lib/apache2 in their .dirs file.

One solution would be to have apache2.postrm purge only remove these
sub-directories:
/var/lib/apache2/conf
/var/lib/apache2/module
/var/lib/apache2/site

On the other hand, apache2 package contains the
apache2-maintscript-helper, the a2enmod-like helpers, the init.d
scripts, so I'm not sure it make sense to have any thing in
/var/lib/apache2 handled by apache2-bin. Maybe the deferred_actions
handling should be fully done by apache2, and /var/lib/apache2 removed
from package apache2-bin.dirs.
The deferred_actions are processed by apache2 any ways, not by apache2-bin.

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55b7ff9e.2040...@debian.org



Bug#789914: apache2: fails to install: ERROR: Module mpm_event is enabled - cannot proceed due to conflicts. It needs to be disabled first!

2015-07-20 Thread Jean-Michel Vourgère
Control: tags -1 pending

Stefan Fritsch wrote:
 On Thursday 25 June 2015 10:27:59, Andreas Beckmann wrote:
   Enabling conf serve-cgi-bin.
   Enabling site 000-default.
   info: mpm_prefork: No action required

 This is wrong. There seems to be a ! that does not belong there in
 the postinst at

   elif [ ! -e /etc/apache2/mods-enabled/$MPM.load ] ; then
   msg info $MPM: No action required


Good catch. Fixed in git.

There was an additional problem however:
 Setting up apache2-bin (2.4.12-3) ...
 Setting up apache2-data (2.4.12-3) ...
 Setting up apache2 (2.4.12-3) ...
 Installing new version of config file 
 /etc/apache2/conf-available/security.conf ...
 info: Switch to mpm_prefork for package libapache2-mpm-itk
 Module mpm_event disabled.
 ERROR: Module mpm_mpm_prefork does not exist!
 error: Switching to mpm_prefork failed
 info: Executing deferred 'a2enmod mpm_itk' for package libapache2-mpm-itk
 Enabling module mpm_prefork.
 Enabling module mpm_itk.


I took the liberty to change the value of $MPM to not include mpm_
prefix, so that is match CUR_MPM behavior. It looked more readable to me.

https://anonscm.debian.org/cgit/pkg-apache/apache2.git/commit/?id=60dfe3d656aaecad281288e77d45e0fee9b3d919

We want to backport that to jessie, don't we? I mean a minimal fix.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55acf890.60...@debian.org



apache2 still not migrating to stretch

2015-07-09 Thread Jean-Michel Vourgère
Dear apache2 maintainers

You might have notice that apache2 2.4.12 is still stuck in unstable.

Here's an extract from a discussion I had on IRC on Monday:
--- 8 
(14:30:14) nirgal: Hi there. After no longer building some Jessie
transitional packages, we filled a RM request in unstable (#787923
resolved yesterday at 18:32). I now have a Valid candidate, but
apache2 still isn't migrating to testing with some more excuses. dak
should have run 2 or 3 times since then. Am I just too impatient or is
there something to do here? https://packages.qa.debian.org/apache2
(14:30:18) zwiebelbot: (notice) Debian#787923: RM: apache2 -- NBS; ROM;
Remove obsolete transitional packages - https://bugs.debian.org/787923
(14:37:22) adsb: the britney log says
(14:37:25) adsb: * amd64: apache2-mpm-prefork, apache2-mpm-worker,
apache2-suexec
(14:37:34) adsb: which means they're not installable if apache2 migrates
(14:39:20) nirgal: adsb: These packages no longer exists in 2.4.12
(actually apache2-suexec is now virtual)
(14:40:08) adsb: yeah, not immediately sure why they're not being
dropped then
(14:40:11) adsb: nthykier: ^^
(14:44:14) adsb: oh, I see why. because they were in section oldlibs, so
britney will try and keep them around iff they have any r-deps in testing
(14:46:19) adsb: which the mpm packages don't appear to have. so I'm
back at nthykier :)
(15:42:42) nthykier: dak says:
(15:42:42) nthykier: # Broken Depends:
(15:42:42) nthykier: ikiwiki-hosting: ikiwiki-hosting-web
(15:42:45) nthykier: For testing
(15:42:54) nthykier: adsb: nirgal: ^
(15:43:05) adsb: that appears to be apache2-suexec, which is now virtual
(15:43:23) adsb: for just the mpm packages, there appear to be no r-deps
(15:44:11) nthykier: The mpm ones look weird indeed
(15:46:38) adsb: hmmm, there are alternative dependencies
(15:47:37) adsb: freedombox-setup depends on apache2|apache2-mpm-worker
and openguides depends on apache2-mpm-prefork|apache|httpd. so it
depends what smooth updates is doing with those
(15:58:31) nthykier: adsb: assumes it should keep them
(16:00:55) nirgal: adsb, nthykier: last versions of apache2-mpm-*
(transitional packages) were depending on apache2 anyways. Should
freedombox and openguides drop the alternate dependency for the
migration to happen?
(16:03:40) nthykier: nirgal: it would fix it, but we should fix Britney
regardless
(16:05:14) nirgal: Regarding ikiwiki-hosting-web that depends on
apache2-suexec that now is a virtual package, I'm don't really
understand what we should do. We could try uploading a version replacing
apache2-suexec by apache2-suexec-custom|apache2-suexec-pristine, then
back to apache2-suexec after the migration, but this is... suboptimal
(16:05:20) adsb: we could temporarily fudge things in this case by
dropping oldlibs from smooth updates. it's a fudge, but it's the
simplest thing I can think of short term
(16:09:44) nthykier: or you can force-hint it - Britney will remove them
afterwards
(17:38:48) nirgal: nthykier: adsb: Regarding apache2-suexec, as a
virtual package, it is already provided by apache2-suexec-pristine and
apache2-suexec-custom in 2.4.10 (testing=stretch), so the binary could
be removed there, FYI. Regarding the mpm-* alternate dependencies, I
opened #791594 and #791597 (plus #791595 and #791596 for recommends).
What should I do now? fix these? Open a ticker against release quoting
that conversation and work arounds?
(17:39:02) zwiebelbot: (notice) Debian#791594: Don't depend on obsolete
packages apache2-mpm-prefork|apache|httpd - https://bugs.debian.org/791594
(17:39:04) zwiebelbot: (notice) Debian#791597: Remove apache2-mpm-worker
from the depends list - https://bugs.debian.org/791597
(17:39:05) zwiebelbot: (notice) Debian#791595: Don't recommend
apache2-mpm-prefork - https://bugs.debian.org/791595
(17:39:05) zwiebelbot: (notice) Debian#791596: Don't recommends
inexistant package apache2-mpm-worker - https://bugs.debian.org/791596
(18:45:18) The account has disconnected and you are no longer in this chat.
--- 8 

If I understand correctly, the main problem is in dak, but it's now been
some time that apache2 hasn't been updated in testing.

I plan to NMU #791594 and #791597 next week (packages popcon
respectively are 7 and 2...)

I don't quite know what to do about apache2-suexec. We could NMU
ikiwiki, or reintroduce the package through the NEW queue, or fix dak,
or open a bugreport against release to ask for help in the migration.
Any idea?


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/559e7f2a.10...@debian.org



Re: apache2 still not migrating to stretch

2015-07-09 Thread Jean-Michel Vourgère
Ops, actually, the message changed, and #789914 now seems to be the
source of the migration blockade.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/559e86a5.1090...@debian.org



Bug#788638: RM: mod-auth-mysql -- RoQA; Obsolete

2015-06-13 Thread Jean-Michel Vourgère
Package: ftp.debian.org
Severity: normal

Dear ftp master

Please remove package mod-auth-mysql from unstable.

apache2 now provides authentication against mysql out of the box.

Moreover, mod-auth-mysql isn't part of stable, hasn't seen a maintainer upload 
for 5 years, and has been broken for 2 years.

This is the last package that use obsolete apache2-threaded-dev in its 
build-dependency. See apache2 decruft request as #787923.

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150613175716.5869.14676.reportbug@deimos



Bug#763582: Apache2 cannot run CGI scripts in jessie

2015-06-07 Thread Jean-Michel Vourgère
Control: tags -1 moreinfo

You wrote:
 Feel free to take a look at fletchergeek.homelinux.net.  So now what?

I just did, and obviously you found what was wrong. :)

Is that ok if I close this report, or do you have a specific problem
with one of the directive that did not work as documented?


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5574c9e2.3000...@debian.org



Bug#786657: apache2.4 in jessie/stable missing mod_imagemap

2015-06-07 Thread Jean-Michel Vourgère
Control: tags -1 moreinfo

On May 24th 2015, Steven Sumichrast wrote:
 In Wheezy 7.8 mod_imagemap was shipped with the apache2.2-bin package (
 https://packages.debian.org/wheezy/amd64/apache2.2-bin/filelist).  It
 appears that in the new stable system, apache2.4-bin is missing
 mod_imagemap (https://packages.debian.org/jessie/amd64/apache2-bin/filelist).
 I'm not aware of the module being renamed.
 
 Additionally the module is not available for install via a standalone
 package.

Hello

Upstream decided to disable this module by default.

The main argument, as far as I can tell, is that the client side image
maps have been added in HTML 2.0 (Netscape version 1.4, circa 1992) and
this is totally obsolete on the server side.

The module code is still available upstream, it was just disabled, and
it is theoretically possible to add it back in Debian. But isn't it best
to stick to upstream decisions?

Do you really need that module or was that just a configuration error on
upgrade?

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/557410d4.1040...@debian.org



Re: Configuring Apache to Permit CGI Debian Jessie Apache2 2.4

2015-06-06 Thread Jean-Michel Vourgère
Hello

Your script looks good.
Permissions too.

Please have a look at the documentation at /usr/share/doc/apache2/

For example, README.Debian.gz describes how to enable extra modules,
like cgi support.

Cheers

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5572ba26.50...@debian.org



apache2.2 cleanup more

2015-06-06 Thread Jean-Michel Vourgère
Hi

Now that the transitional packages are gone, I did some cleanup in the
(pre|post)(rm|inst):
- Removed the configuration file hacks to move them around between packages.
- Removed the /etc/apache2/.apache2_mpm_selected handling.
I hope this is ok. Fell free to tell me if I'm doing too much.

Last week, I also made the build reproducible. I used the date from the
change log rather than __DATE__. Despite some research, I was unable to
have a space in the macros, so I used a T between the date and the time.

Also, lintian was complaining about etc/bash_completion.d being
obsolete, so I moved the scripts to the new location
/usr/share/bash-completion/completions, and added required links there
since the file name must match the command name.

Tonight, I did a little more cleaning (d/clean was still containing
debian/apache2-mpm-event.postinst and stuff), and I also removed some
2.2 related commands from the *.maintscript.
I did not report that in the changelog, this looks too small to mention,
and we already talked about these packages disapearing. Do ping me if
you fell I should be more verbose there.


I am unsure how far you'd like to go in the clean up:

We remove everything up to Jessie in the postinsts, since it is required
to upgrade there first, right? So that leaves a few --compare-versions
le 2.4.6-1~ and 2.4.1-4 to remove... Ok?

Should we remove migrate-sites.pl too?

And what about the d/control that still contains the
replace/conflicts/breaks on transitional packages  2.3 ? And about
the apache2-prefork-dev and similar?

Cheers

-- 
Nirgal


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55739956.7030...@debian.org



Re: dak decruft / NBS ? NMUs?

2015-05-31 Thread Jean-Michel Vourgère
Hello

I did a few NMUs, and I think we are ready to ask the ftp team for a
decruft, so that 2.4.12 makes it to testing. :)


Here's the detail
--- 8 --
ssh mirror.ftp-master.debian.org dak rm -s unstable -Rbn
apache2-mpm-event apache2-mpm-itk apache2-mpm-prefork apache2-mpm-worker
apache2-suexec apache2.2-bin apache2.2-common libapache2-mod-macro
libapache2-mod-proxy-html

Checking reverse dependencies...
# Broken Depends:
ikiwiki-hosting: ikiwiki-hosting-web
libapache-mod-log-sql: libapache2-mod-log-sql [kfreebsd-amd64 kfreebsd-i386]
mate-user-share: mate-user-share [kfreebsd-amd64 kfreebsd-i386]
mod-auth-mysql: libapache2-mod-auth-mysql [amd64 armel armhf hurd-i386
i386 kfreebsd-amd64 kfreebsd-i386 mips mipsel powerpc s390x sparc]
openjpeg: openjpip-server [kfreebsd-amd64 kfreebsd-i386]
openjpeg2: libopenjpip-server [kfreebsd-amd64 kfreebsd-i386]

# Broken Build-Depends:
389-admin: apache2-mpm-worker
--- 8 --

ikiwiki-hosting depends on apache2-suexec which is still provided as a
transitional package. No real problem there.

libapache-mod-log-sql, mate-user-share, openjpeg, openjpeg2, and
389-admin only shows in the cruft-report-daily because they temporarily
FTBFS on kfreebsd.

The only real trouble left is mod-auth-mysql, but it is already removed
from testing since 2013, and it's probably obsoleted by upstream
mod_authn_dbd. I wrote to the maintainer suggesting a RM and pointing at
the Ubuntu work around if he prefers.

Is it time to send a RM: apache2 -- RoM; NBS; 9 binaries?
Who sends the request?

-- 
Nirgal



signature.asc
Description: OpenPGP digital signature


dak decruft / NBS ? NMUs?

2015-05-20 Thread Jean-Michel Vourgère
Hi

apache2.4 is still not moving to testing, because of packages having
dependencies on removed transitionnal packages.
The daily cruft-repport [1] lists the problems:

* 389-admin Build-Depends on apache2-mpm-worker
- Filled #785706

* webgui depends on apache2-mpm-prefork or apache2-mpm-worker
It already had a apache24 transition bug. It also already had 2 other RC
bugs and is not is testing.
- Raised severity of #669802 to serious

* openjpip-server depends on apache2.2-bin
/!\ popcon of libopenjpeg5 is over 50,000
- Filled #786332

* libopenjpip-server depends on apache2.2-bin
popcon of libopenjp2-7 is about 4,000
- Filled #786333

* libapache2-mod-auth-mysql depends on apache2.2-common.
Was already removed from jessie because of apache2.4 bug
See #666826.

* libapache2-mod-log-sql depends on apache2-mpm-prefork | apache2-mpm-itk
- Raised severity of #717472

* ikiwiki-hosting-web depends on apache2-suexec:
Both apache2-suexec-pristine and apache2-suexec-custom still provide it,
so this is not an issue.
- Do nothing (?)

* mate-user-share depends on apache2.2-bin
- Raised severity of #785224



[1] https://ftp-master.debian.org/cruft-report-daily.txt


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/555cdceb.5010...@debian.org



Bug#741350: a2enconf confusion - .conf extension?

2014-03-14 Thread Jean-Michel Vourgère
Hello Daniel

Just a few hints:

On Friday 14 March 2014 08:35:55 Daniel Pocock wrote:
 a) if my postinst or postrm calls apache2_invoke from inside a function,
 then it fails badly
 
 b) some of my postinst and postrm code is based on examples I saw in
 other packages, they test -x /usr/sbin/apache2 and it turns out this is
 not a great idea as if somebody does
 
dpkg --remove apache2 loganalyzer
dpkg --purge loganalyzer
 
 then at the moment the loganalyzer postrm runs with the purge
 argument, there is no /usr/sbin/apache2 and so it does not remove the
 symlink
 
 Also, the check for /usr/share/apache2/apache2-maintscript-helper would
 also fail if apache2 had been removed - it is OK for the postrm to just
 proceed without calling apache2_invoke at all if it is no longer there
 or should the postm complain?

Please have another look at the wiki: apache2_invoke disconf must be
called both at purge *and* at simple removal. So that should take care of
your question b.

Actually, source apache2-maintscript-helper is using the scripts arguments
- like postrm purge - in oder to know what it should do. So it must be called
from the script top level, and not from a function where that environment
changed.

If you really need to call the helpers from a function, I guess you need
if [ -e /usr/share/apache2/apache2-maintscript-helper ] ; then
. /usr/share/apache2/apache2-maintscript-helper
fi
at top level, where $1 == 'configure' or whatever.
Then you should be able to call apache2_invoke from a function, providing
you wrap it in a [ -e /usr/share/apache2/apache2-maintscript-helper ] too
of course. I did not test that.

Regarding your question b again, if you try dh_apache2, you'll see that
deconfiguration is done at prerm time too, so that simultaneous removal
of apache and your package should work, no matter the order in wich it
occurs. And the bonus: If there's a bug in (pre|post)(inst|rm), you have
someone else to blame, isn't that nice? ;-)

-- Nirgal


signature.asc
Description: This is a digitally signed message part.


Bug#741350: a2enconf confusion - .conf extension?

2014-03-11 Thread Jean-Michel Vourgère
Hello Daniel

Please read apache2 debian news ( /usr/share/doc/apache2/NEWS.Debian.gz )
 Moreover, the configuration mechanism in Debian has changed. All
 configurations in sites-enabled and conf-enabled need a .conf suffix now.

This mechanism enable packages to deploy their configuration directly in
conf-available without symlinks, while NOT enabling .dpkg-new and similar
files by default. :)

Regarding the wiki, assuming you do not want to use dh_apache2,
I can read:
 Install the configuration file to 
 /etc/apache2/conf-available/yourapplication.conf.

You do need a .conf extension.

Also, the wiki is quite explicit about the fact that you should use
apache2_invoke enconf and *not* a2enconf directly.

apache2_invoke enconf calls a2enconf with special flags like -m to enable
modules in maintainer mode. If you use a2enconf directly, and an administrator
then issue a2disconf, dpkg-reconfigure (or simple package upgrade) would
recreate the symlink in conf-enabled/, thus overiding the admin decision to
disable it, in violation of /etc preservation policy (RC bug).
Do use apache2_invoke enconf as described in the wiki pages.


You can use a symlink to another location such as /etc/loganalyzer/ if you so
prefer. The use of symlinks in conf-available is beyond the scope of apache2
help, IMHO. I don't know about any restriction about them regarding conf files.




On Tuesday 11 March 2014 15:32:05 Daniel Pocock wrote:
 Package: apache2
 
 
 
 My package fails piuparts with Apache 2.4:
 
   https://piuparts.debian.org/sid/fail/loganalyzer_3.6.5+dfsg-2.log
 
 Looking at that log, I notice:
 
   Setting up loganalyzer (3.6.5+dfsg-2) ...
   Module php5 already enabled
   Enabling module cgi.
   To activate the new configuration, you need to run:
 service apache2 restart
   ERROR: Conf loganalyzer does not exist!
 
 
 0m37.5s ERROR: WARN: Broken symlinks:
   /etc/apache2/conf-available/loganalyzer - /etc/loganalyzer/apache.conf
 
 
 
 
 So, it appears that
 
 a) the config file does exist, it is a symlink called 
 /etc/apache2/conf-available/loganalyzer
 
 b) the command a2enconf loganalyzer fails
 
 
 Looking at some notes I found elsewhere, it appears that maybe my
 symlink should have a .conf extension or maybe it is not working at all
 because it is a symlink.
 
 The man page for a2enconf doesn't explain if a particular extension like
 .conf is needed and doesn't explain whether symlinks are supported
 
 This wiki also doesn't give exact details:
 
https://wiki.debian.org/Apache/PackagingFor24
 
 Could you please clarify these things in the man page and the wiki?
 
 
 


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201403111717.55352.jmv_...@nirgal.com



Bug#732930: apache2: upgrade squeeze-wheezy fails if httpd.conf file is missing in /etc/apache2 (was not in Squeeze)

2014-03-08 Thread Jean-Michel Vourgère
Actually, in squeeze, apache2.2-common.postinst contains:
[ -f /etc/apache2/httpd.conf ] || touch /etc/apache2/httpd.conf

So the file is generated in squeeze, during apache2.2-common configuration.


But if it's not empty, it's moved in /etc/apache2/conf.d/ during wheezy
upgrade, and the main apache2.conf file is *not* modified to remove the
Include htpd.conf line.


signature.asc
Description: This is a digitally signed message part.


Bug#722648: Alias statement in configuration file does not work

2014-03-07 Thread Jean-Michel Vourgère
Hello Adrian

You wrote:
 Alias statements gave error messages or are simply not honored (then gives
 error in browser window)

I think this is the normal behavior:

You configuration file has:
49: Alias / /var/www/base/adrian/immanuelk/
50: Alias /conglom-o/ /var/www/base/adrian/conglom-o/website/v3/
51: Alias /one/ /var/www/base/adrian
(...)

And you get these warnings:
AH00671: The Alias directive in ... at line 51 will probably never match 
because it overlaps a previous Alias.

This is the expected behavior.

Please re-read the Alias directive documentation at 
https://httpd.apache.org/docs/2.4/mod/mod_alias.html
including the Order of Processing paragraph.

You probably have to reorder your alias directives.

Additionnally, it's uncommon to alias /. I guess changing your DocumentRoot
would make more sense.

I believe that is not a bug an will close your repport unless you can give us
more details about non-fuctionnal Alias.

-- Jean-Michel Vourgère


signature.asc
Description: This is a digitally signed message part.


Bug#737404: override: libapache2-mod-macro:oldlibs/extra

2014-02-02 Thread Jean-Michel Vourgère
Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: debian-apache@lists.debian.org

Hello

libapache2-mod-macro [1] is now included in core functionnalities of apache2,
and is just a transitionnal package to apache2-bin.

Please adjust the override accordingly.

Thank you

-- Jean-Michel Vourgère

[1] http://packages.debian.org/unstable/libapache2-mod-macro


signature.asc
Description: This is a digitally signed message part.


Bug#721272: apache2: logrotate script should not call /etc/init.d/apache2 directly

2013-08-29 Thread Jean-Michel Vourgère
Package: apache2
Version: 2.4.6-3
Severity: minor

This is almost all in the subject.

I think invoke-rc.d would make sure local policy is properly enforced.

The culprit is in source file debian/apache2.logrotate



-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2 depends on:
ii  apache2-bin   2.4.6-3
ii  apache2-data  2.4.6-3
ii  lsb-base  4.1+Debian12
ii  mime-support  3.54
ii  perl  5.14.2-21
ii  procps1:3.3.4-2

Versions of packages apache2 recommends:
ii  ssl-cert  1.0.33

Versions of packages apache2 suggests:
pn  apache2-doc  none
pn  apache2-suexec-pristine | apache2-suexec-custom  none
pn  apache2-utilsnone
ii  iceweasel [www-browser]  17.0.8esr-2
ii  w3m [www-browser]0.5.3-11

Versions of packages apache2-bin depends on:
ii  libapr1  1.4.8-1
ii  libaprutil1  1.5.2-1
ii  libaprutil1-dbd-sqlite3  1.5.2-1
ii  libaprutil1-ldap 1.5.2-1
ii  libc62.17-92
ii  libcap2  1:2.22-1.2
ii  libldap-2.4-22.4.31-1+nmu2
ii  liblua5.1-0  5.1.5-5
ii  libpcre3 1:8.31-2
ii  libssl1.0.0  1.0.1e-3
ii  libxml2  2.9.1+dfsg1-3
ii  perl 5.14.2-21
ii  zlib1g   1:1.2.8.dfsg-1

Versions of packages apache2-bin suggests:
pn  apache2-doc  none
pn  apache2-suexec-pristine | apache2-suexec-custom  none
ii  iceweasel [www-browser]  17.0.8esr-2
ii  w3m [www-browser]0.5.3-11

Versions of packages apache2 is related to:
ii  apache2  2.4.6-3
ii  apache2-bin  2.4.6-3


signature.asc
Description: This is a digitally signed message part.


Bug#717666: apache2: Internal Server Error when using an option that doesn't change anything

2013-08-29 Thread Jean-Michel Vourgère
Control: retitle -1 apache2: Please allow htaccess directives forbidden by 
AllowOverride when they change nothing
Control: tags -1 +upstream
Control: severity -1 wishlist

Hello Vincent

On Thursday 29 August 2013 21:08:06 you wrote:
 On 2013-08-28 22:43:38 +, Jean-Michel Vourgère wrote:
  I believe this is the expected behavior:
  
  I suppose your error.log contains something like :
  /home/xxx/public_html/.htaccess: Option MultiViews not allowed here
  
  Tuning Multiview option is forbidden inside an .htaccess unless you 
  explicitly
  allow it.
 
 But my point is that this rule is too strict because MultiViews was
 already enabled in the userdir config file under /etc.
 
  This can be fixed by changing:
  AllowOverride FileInfo AuthConfig Limit Indexes
  into
  AllowOverride FileInfo AuthConfig Limit Indexes Options=MultiViews
 
 IMHO, Options=MultiViews should just mean that the user is allowed
 to change the MultiViews status. But if the user doesn't change it,
 Options=MultiViews shouldn't be needed. Indeed there's no harm if
 the user uses an option that has no effect (because already set
 in the same context under /etc).

Actually, apache2.4 introduce a new feature:

You can ignore forbidden overrides by replacing
 AllowOverride FileInfo AuthConfig Limit Indexes
by
 AllowOverride FileInfo AuthConfig Limit Indexes Nonfatal=Override

This is described at:
https://httpd.apache.org/docs/2.4/mod/core.html#allowoverride

I know this is not exactly what you ask.


Regarding your report, I feel apache is behaving according to its
documentation. But this is a possible enhancement indeed.


signature.asc
Description: This is a digitally signed message part.


Bug#714329: Apache2 Basic Authentication on Ldap

2013-08-28 Thread Jean-Michel Vourgère
Hello Ricardo

On Friday 28 June 2013 00:04:35 Ricardo Barioni wrote:
 Apache is not authenticating on Ldap.
 The same authentication directives works fine at Debian 5 and 6.

Ldap is now enforcing authority validation by default.

Can you try with TLS_REQCERT never, please?

(See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578566#20 )


signature.asc
Description: This is a digitally signed message part.


Bug#717666: apache2: Internal Server Error when using an option that doesn't change anything

2013-08-28 Thread Jean-Michel Vourgère
Hello Vincent

On Tuesday 23 July 2013 15:51:55 Vincent Lefevre wrote:
 (...)
   Directory /home/*/public_html
 AllowOverride FileInfo AuthConfig Limit Indexes
 (...)
 My ~/public_html/.htaccess file has:
 Options +MultiViews

 (...)
   Internal Server Error

 (...) with MultiViews already enabled. So, there's no reason to
 issue an error.

I believe this is the expected behavior:

I suppose your error.log contains something like :
/home/xxx/public_html/.htaccess: Option MultiViews not allowed here

Tuning Multiview option is forbidden inside an .htaccess unless you explicitly
allow it.


This can be fixed by changing:
AllowOverride FileInfo AuthConfig Limit Indexes
into
AllowOverride FileInfo AuthConfig Limit Indexes Options=MultiViews

See documentation:
https://httpd.apache.org/docs/2.4/mod/core.html#allowoverride

This will fix your error.

Does that make sense?


You should also probably note the Multiview setting restrictions:
https://httpd.apache.org/docs/2.4/mod/core.html#options


signature.asc
Description: This is a digitally signed message part.


Bug#720131: apache2.2-common: ssl cert gerneration instructions don't work

2013-08-28 Thread Jean-Michel Vourgère
Control: tags -1 +moreinfo

Hello Jasen

On Monday 19 August 2013 03:31:06 ja...@crackle.treshna.com wrote:
 generating self-signed certs as described in 
 /usr/share/doc/apache2.2-common/README.Debian.gz
 does not work:
 
 root@crackle:/etc/apache2/ssl# make-ssl-cert /usr/share/ssl-cert/ssleay.cnf 
 /etc/apache2/ssl/example.com.cert
 Could not create certificate. Openssl output was:
 Error Loading extension section v3_req
 8780:error:2207507C:X509 V3 routines:v2i_GENERAL_NAME_ex:missing 
 value:v3_alt.c:433:
 8780:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in 
 extension:v3_conf.c:93:name=subjectAltName, value=www.example.com

It looks like you entered an invalid value for altName www.example.com.

This is the question:

Please enter any additional names to use in the SSL certificate.
 It will become the 
'subjectAltName' field of the generated SSL certificate.
 
Multiple alternative names should be delimited with comma and no spaces. For a 
web server with multiple DNS names this could look like:
DNS:www.example.com,DNS:images.example.com  
 A more complex example 
including a hostname, a WebID, an email address, and an IPv4 address:   
  
DNS:example.com,URI:http://example.com/joe#me,email:m...@example.com,IP:192.168.7.3


So please try with DNS:www.example.com rather than www.example.com.


signature.asc
Description: This is a digitally signed message part.


Bug#721071: apache2: Upgrade breaks configuration

2013-08-27 Thread Jean-Michel Vourgère
Control: tags -1 + moreinfo

Hello Jason

On Tuesday 27 August 2013 15:38:13 Jason Williams wrote:
 When upgrading from package version 2.2.22-13, installs new config files 
 without asking, and the new config seems to ignore the config in 
 sites-enabled/

Did you read /usr/share/doc/apache2/NEWS.Debian.gz ?

Many changes occured in the way conf files are handled (new location, .conf
extension required, and so on...). Could that explain why your conf files
are ignored?

Which new config files were installed that you did not expect?
Or do you mean your previous changed files were overwritten?

Please give us details, there is no way we can help you with that 1 line bug
report.

Did you purge your apache2.2-common at the same time you upgraded?
(See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=716880 )


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201308271710.55529.jmv_...@nirgal.com



Bug#710934: apache2: After upgrading to version 2.4.6-3, The requested URL bla bla bla was not found on this server

2013-08-26 Thread Jean-Michel Vourgère
Control: forcemerge -1 720747

See suggestion at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720747#15


signature.asc
Description: This is a digitally signed message part.


Bug#720747: Migrate known configuration files

2013-08-26 Thread Jean-Michel Vourgère
On Sunday 25 August 2013 19:18:33 Kingsley G. Morse Jr. wrote:
 The upgrade tries to migrate known configuration
   files from /etc/apache2/conf.d/ to
   /etc/apache2/conf-available/
 
 I wonder if something went wrong with migrating my configuration file (...)

Actually, known means supported by Debian, like built-in ones.

For your information, apache2 will take care of these conffiles:
/etc/apache2/conf.d/charset - /etc/apache2/conf-available/charset.conf
/etc/apache2/conf.d/localized-error-pages - 
/etc/apache2/conf-available/localized-error-pages.conf
/etc/apache2/conf.d/other-vhosts-access-log - 
/etc/apache2/conf-available/other-vhosts-access-log.conf
/etc/apache2/conf.d/security - /etc/apache2/conf-available/security.conf

And hopefully all packages will do the same for their own files.

If you have home made configuration files, they are not known and *not*
migrated automatically.

I'm now merging this request with #710934.


signature.asc
Description: This is a digitally signed message part.


Bug#720748: Report 404 (Not Found) errors in /var/log/apache2/error.log

2013-08-26 Thread Jean-Michel Vourgère
Control: tags -1 + moreinfo

On Sunday 25 August 2013 05:32:12 Kingsley G. Morse Jr. wrote:
 I happened to notice that a 404 (Not Found) error
 was reported in access.log instead of error.log.

access.log is repporting all requests.

File not found error is properly logged here, but with severity info.

Default error.log filtering is to display only messages with severity warning
or above.
You can change that in apache2.conf, on the LogLevel line.

Can you try it, please?

Logging all informative messages would result in too big files, so that
important information is difficult to find inside. That's why it's not the
default. But you are free to change that settings if you prefer it.

-- Nirgal


signature.asc
Description: This is a digitally signed message part.


Bug#630888: ssl renegotiation hangs with long ca lists

2013-08-20 Thread Jean-Michel Vourgère
Control: forwarded -1 https://issues.apache.org/bugzilla/show_bug.cgi?id=46952
Control: retitle -1 ssl renegotiation hangs with long ca lists

Hello Matteo

Do you still have that bug?

Can you provide additionnal information, as required on
https://issues.apache.org/bugzilla/show_bug.cgi?id=46952
please?


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201308200743.34738.jmv_...@nirgal.com



Bug#719266: apache2_invoke enconf ignores dependencies disabled by admin

2013-08-15 Thread Jean-Michel Vourgère
Hi Stefan

I think there is some confusion:

 Think about this situation:
 - admin needs proxy, enables it
 - admin no longer needs proxy, disables it again
 - admin installs package that needs proxy
 So, having a wait to prevent modules from being autmatically enabled
 would be nice, but it would have to be an explicit setting and not the
 default behavior.

I kinda agree. But that was not my not point:

When a module is explicitly disabled by site administrator, then a
package tries to enable it back, he's getting an error like:
# apache2_invoke enmod proxy
apache2_invoke proxy: no action - module was disabled by maintainer

But when a package tries to enable a module that depends on the one explicitly
disabled, both are enabled with no error.

My report was about that inconsistency.

Should that report be split to clarify the explicitly disabled part?
Or do you have an idea about what explicitly disabled means, so that the
so called inconsistency is irrelevent?


signature.asc
Description: This is a digitally signed message part.


Bug#719280: Error/warn: Config variable .... is not defined - Invalid Mutex directory in argument file:${APACHE_LOCK_DIR}

2013-08-15 Thread Jean-Michel Vourgère
Hi André

Do you still have problems with apache2 not starting?

What is the output of:
service apache2 start
?


signature.asc
Description: This is a digitally signed message part.


Bug#296493: apache2ctl -t should warn about non-initial #

2013-08-04 Thread Jean-Michel Vourgère
Kevin Bullock wrote:
 (...) I therefore
 suggest that 'apache2ctl -t' warn the user about the mid-line comment which
 could be an error. (...)

Stefan Fritsch wrote:
 The documentation states: Comments may not be included on a line 
 after a configuration directive. 

 '#' signs are considered normal characters inside a directive, so a 
 warning would not be appropriate either. But I agree that 
 DirectoryIndex is not behaving correctly here.

It's actually used in default configuration:
$ grep -e '^[[:space:]]*[^#[:space:]].*#' /etc/apache2/*/*
/etc/apache2/mods-available/autoindex.conf: IndexIgnore .??* *~ *# RCS CVS 
*,v *,t
/etc/apache2/mods-enabled/autoindex.conf:   IndexIgnore .??* *~ *# RCS CVS 
*,v *,t


Would checking only in DirectoryIndex for a local-url starting by # make sense?
Should that bug be tagged wontfix? Or retitled as suggested?
The original request doesn't make much sense, as it would always generate false
positives.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201308041150.39391.jmv_...@nirgal.com



Bug#711493: No default site enabled after fresh install if /etc/apache2 exists

2013-08-03 Thread Jean-Michel Vourgère
Control: tags -1 + patch

Attached is a patch for that problem.

I believe it's important because there is a lot of packages that does not
depend on apache2, meaning they can be installed first, but that will install
some conffiles in /etc/apache/*-available/ as requested.

Note that cut will eat the error code, in the patch.
$ dpkg-query -f '${Package}\t${Status}\n'  -W 'apache2-mpm-*' 2/dev/null | 
grep XXX | cut -f1  echo cut eats errors
cut eats errors

Also tested ok if dpkg-query fails, when there is no 'apache2-mpm-*' packages 
for jessie upgrades.
diff --git a/debian/apache2.preinst b/debian/apache2.preinst
index c3e49c9..b8d8805 100644
--- a/debian/apache2.preinst
+++ b/debian/apache2.preinst
@@ -105,9 +105,8 @@ case $1 in
 
 	# 1) an apache2-mpm package exists
 	if [ -d /etc/apache2/ ] ; then
-		mpm=$(dpkg-query -f '${Package}\t${Status}\n'  -W 'apache2-mpm-*' 2/dev/null) || true
-		if [ $? -eq 0 ] ; then
-			mpm=$(echo $mpm | grep install ok | cut -f1)
+		mpm=$(dpkg-query -f '${Package}\t${Status}\n'  -W 'apache2-mpm-*' 2/dev/null | grep install ok | cut -f1)
+		if [ -n $mpm ] ; then
 			if [ ! -f /etc/apache2/.apache2_mpm_selected ] ; then
 echo # automatically created during upgrade  /etc/apache2/.apache2_mpm_selected
 echo # it can be safely removed anytime  /etc/apache2/.apache2_mpm_selected


Bug#710934: apache2: please include a way to automatically move conf.d files to conf-available

2013-08-02 Thread Jean-Michel Vourgère
 To ease the transition to apache 2.4, could you have a script that
 automatically copies files in /etc/apache2/conf.d to
 /etc/apache2/conf-available?

I advise caution if this is implemented, because it might break unrelated
software.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718318
is an exemple of someone who, I believe, moved its conf.d/javascript-common
into conf-available/javascript-common.conf

The consequence is that the package can't be upgraded anymore (a2enconf fails):
That file was a link, now broken, that is not overridden on upgrade.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201308022202.46432.jmv_...@nirgal.com



Bug#684050: SuppressHTMLPreamble also discards data in the directory listing

2013-07-30 Thread Jean-Michel Vourgère
Control: tags -1 + unreproducible

Hello

I tried to reproduce your problem on apache 2.2.22, but I could not.

Are you sure you did not forget the + ?

Using
IndexOptions SuppressHTMLPreamble
gives excatly the problem you repported.

But
IndexOptions +SuppressHTMLPreamble
works as expected.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307302117.58551.jmv_...@nirgal.com



Bug#698787: apache2-mpm-worker multiarch install problem on Debian Wheezy amd64

2013-07-30 Thread Jean-Michel Vourgère
reassign 698787 ssl-cert
retitle 698787 ssl-cert: Please mark Multi-Arch: foreign
thanks

It looks to me that this is more a problem with mime-support and ssl-cert
packages that were not flaged as supporting multi-arch. [1]

mime-support package was fixed in version 3.53. [2]

So I'm reassigning to ssl-cert.


Regarding your problem with the hungarian mirror, I suppose it was transiant.
If you have that kind of problem again, just use another mirror. [3]


[1] 
https://wiki.ubuntu.com/MultiarchSpec#Dependencies_involving_Architecture:_all_packages
[2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695357
[3] http://www.debian.org/mirror/list


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307302334.02625.jmv_...@nirgal.com



Bug#718387: apache2-data: Please mark Multi-Arch: foreign

2013-07-30 Thread Jean-Michel Vourgère
Package: apache2-data
Version: 2.4.6-2

Dear Maintainer,

Please mark apache2-data as Multi-Arch: foreign

This is preventing the cross-installation of apache2.


Step to reproduce from an i386 arch:

# dpkg --add-architecture amd64
# apt-get update
# apt-get install apache2:amd64
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 apache2:amd64 : Depends: perl:amd64 but it is not going to be installed
 Depends: apache2-bin:amd64 (= 2.4.6-2) but it is not going to 
be installed
 Depends: apache2-data:amd64 (= 2.4.6-2) but it is not 
installable
 Recommends: ssl-cert:amd64 but it is not installable
E: Unable to correct problems, you have held broken packages.


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Foreign Architectures: amd64

Kernel: Linux 3.9-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307302358.22009.jmv_...@nirgal.com



Bug#711454: libapache2-mod-php5: MPM prefork not found ... == ... Syntax error on line 9 of /etc/apache2/mods-enabled/php5.conf: Invalid command 'Order'

2013-07-29 Thread Jean-Michel Vourgère
reassign 711454 libapache2-mod-php5
found 711454 5.5.0~rc2+dfsg-2
thanks

The problem is that apache2 is not configured before libapache2-mod-php5.

apache2_switch_mpm prefork fails, because conffiles from apache2 are not yet
there, including mods-available/mpm_prefork.load.

Is a Pre-Depends really necessary? I think a regular Depends should be enough
to ensure apache2 is configued before libapache2-mod-php5. You don't switch
mpm in preinst as far as I know. Debian policy 3.5 and 7.2 strongly encourage
people to avoid these.

Looking at libapache2-mod-php5 5.5.0~rc2+dfsg-2, I can see in the control file
Depends: apache2-api-20120211 but that is provided by apache2-bin, not
apache2. Logs show that apache2-bin is properly configured before
libapache2-mod-php5 as you requested. But what you really need is apache2
(no -bin) with its mods-available/ directory.

Sorry for the ping pong, but I'm reassigning back to libapache2-mod-php5
because I think this is a simple missing Depends: there.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307292151.12122.jmv_...@nirgal.com



Bug#711493: No default site enabled after fresh (re)install

2013-07-29 Thread Jean-Michel Vourgère
Control: found -1 2.4.6-2

Looks like apache2.preinst is always creating /etc/apache2/.apache2_mpm_selected
because if [ $? -eq 0 ] on line 109 is always true.

This results in we_are_upgrading_from_wheezy in apache2.postinst to succeed
where it shouln't.

Attached is a log of apache2 maintainer scripts execution, with a set -x
# dpkg -i /home/nirgal/apache2_2.4.6-2_i386.deb 
Selecting previously unselected package apache2.
(Reading database ... 32799 files and directories currently installed.)
Unpacking apache2 (from .../apache2_2.4.6-2_i386.deb) ...
+ OBSOLETE_CONFFILES='/etc/apache2/mods-available/authz_default.load
/etc/apache2/mods-available/authn_default.load
/etc/apache2/mods-available/mem_cache.load
/etc/apache2/mods-available/mem_cache.conf
/etc/apache2/mods-available/authn_alias.load
/etc/apache2/mods-available/cern_meta.load
/etc/apache2/mods-available/disk_cache.load
/etc/apache2/mods-available/disk_cache.conf
/etc/apache2/mods-available/ident.load
/etc/apache2/mods-available/imagemap.load
/etc/apache2/mods-available/version.load'
+ MOVED_CONFFILES='/etc/bash_completion.d/apache2.2-common:/etc/bash_completion.d/apache2
/etc/apache2/sites-available/default:/etc/apache2/sites-available/000-default.conf
/etc/apache2/sites-available/default-ssl:/etc/apache2/sites-available/default-ssl.conf
/etc/apache2/conf.d/charset:/etc/apache2/conf-available/charset.conf
/etc/apache2/conf.d/localized-error-pages:/etc/apache2/conf-available/localized-error-pages.conf
/etc/apache2/conf.d/other-vhosts-access-log:/etc/apache2/conf-available/other-vhosts-access-log.conf
/etc/apache2/conf.d/security:/etc/apache2/conf-available/security.conf'
+ case $1 in
+ '[' -d /etc/apache2/ ']'
++ dpkg-query -f '${Package}\t${Status}\n' -W 'apache2-mpm-*'
+ mpm='apache2-mpm-event	unknown ok not-installed
apache2-mpm-itk	unknown ok not-installed
apache2-mpm-prefork	unknown ok not-installed
apache2-mpm-worker	unknown ok not-installed'
+ '[' 0 -eq 0 ']'
++ cut -f1
++ grep 'install ok'
++ echo 'apache2-mpm-event	unknown ok not-installed
apache2-mpm-itk	unknown ok not-installed
apache2-mpm-prefork	unknown ok not-installed
apache2-mpm-worker	unknown ok not-installed'
+ mpm=
+ '[' '!' -f /etc/apache2/.apache2_mpm_selected ']'
+ echo '# automatically created during upgrade'
+ echo '# it can be safely removed anytime'
+ echo ''
+ '[' -n '' ']'
+ obsolete_conffile_exists
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/authz_default.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/authn_default.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/mem_cache.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/mem_cache.conf ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/authn_alias.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/cern_meta.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/disk_cache.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/disk_cache.conf ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/ident.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/imagemap.load ']'
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/version.load ']'
+ return 1
+ exit 0
Setting up apache2 (2.4.6-2) ...
+ OBSOLETE_CONFFILES='/etc/apache2/mods-available/authz_default.load
/etc/apache2/mods-available/authn_default.load
/etc/apache2/mods-available/mem_cache.load
/etc/apache2/mods-available/mem_cache.conf
/etc/apache2/mods-available/authn_alias.load
/etc/apache2/mods-available/cern_meta.load
/etc/apache2/mods-available/disk_cache.load
/etc/apache2/mods-available/disk_cache.conf
/etc/apache2/mods-available/ident.load
/etc/apache2/mods-available/imagemap.load
/etc/apache2/mods-available/version.load'
+ MOVED_CONFFILES='/etc/bash_completion.d/apache2.2-common:/etc/bash_completion.d/apache2
/etc/apache2/sites-available/default:/etc/apache2/sites-available/000-default.conf
/etc/apache2/sites-available/default-ssl:/etc/apache2/sites-available/default-ssl.conf
/etc/apache2/conf.d/charset:/etc/apache2/conf-available/charset.conf
/etc/apache2/conf.d/localized-error-pages:/etc/apache2/conf-available/localized-error-pages.conf
/etc/apache2/conf.d/other-vhosts-access-log:/etc/apache2/conf-available/other-vhosts-access-log.conf
/etc/apache2/conf.d/security:/etc/apache2/conf-available/security.conf'
+ WHEEZY_UPGRADE=0
+ case $1 in
+ remove_conffiles configure
+ we_are_upgrading_from_wheezy configure
+ '[' -n '' ']'
+ '[' -n '' ']'
+ '[' -e /etc/apache2/.apache2_mpm_selected ']'
+ WHEEZY_UPGRADE=1
+ return 0
+ for CONFFILE in '$OBSOLETE_CONFFILES'
+ '[' -e /etc/apache2/mods-available/authz_default.load.dpkg-backup ']'
+ '[' -e /etc/apache2/mods-available/authz_default.load.dpkg-remove ']'
+ for 

Bug#718166: a2disconf fails on purge when conf already gone

2013-07-28 Thread Jean-Michel Vourgère
I spent some time on that issue, and could not find a reasonable aswner:

I noticed that dh_apache2 generates snipets with:
apache2_invoke enconf phppgadmin || exit $?
Adding the || exit $? really does help (I could not believe it at first).

This may somehow be linked to the fact that that apache2-maintscript-helper:415
calls that specific a2disconf in a subshell (see comment there).

Just my 2 cents... This is way too subtile for me.
I agree a2disconf --purge return code is surprising.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307281037.05785.jmv_...@nirgal.com



Bug#717476: updates lost Alias modules

2013-07-28 Thread Jean-Michel Vourgère
This is probably a duplicate of
bugs.debian.org/cgi-bin/bugreport.cgi?bug=711925

Can you check if you auto-purge packages on updates?


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307281721.06541.jmv_...@nirgal.com



[patch] Small updates to man pages

2013-07-21 Thread Jean-Michel Vourgère
Hello

Attached is a proposal.

:)
commit 486c816ef4443914886c83967224df302f2ff517
Author: Jean-Michel Vourgère jmv_...@nirgal.com
Date:   Sun Jul 21 23:51:06 2013 +0200

Update a2(en|dis)* man pages

* Added --maintmode --purge [--force] in synopsis.
* Documents --force for a2dismod.
* Sanitize the see also sections.

diff --git a/debian/manpages/a2enconf.8 b/debian/manpages/a2enconf.8
index 8106ab7..80a00e6 100644
--- a/debian/manpages/a2enconf.8
+++ b/debian/manpages/a2enconf.8
@@ -19,12 +19,14 @@
 a2enconf, a2disconf \- enable or disable an apache2 configuration file
 .SH SYNOPSIS
 .B a2enconf
-[ [\-q|\-\-quiet]
-.IR configuration ]
+[\-q|\-\-quiet] [ \-m|\-\-maintmode ] [
+.IR configuration
+]
 .PP
 .B a2disconf
-[ [\-q|\-\-quiet]
-.IR configuration ]
+[\-q|\-\-quiet] [ \-m|\-\-maintmode ] [\-p|\-\-purge] [
+.IR configuration
+]
 .SH DESCRIPTION
 This manual page documents briefly the
 .B a2enconf
@@ -56,6 +58,7 @@ Don't show informative messages.
 Enables the maintainer mode, that is the program invocation is effectuated
 automatically by a maintainer script. This switch should not be used by end
 users.
+.TP
 .B \-p, \-\-purge
 When disabling a module, purge all traces of the module in the internal state
 data base.
@@ -90,7 +93,9 @@ for enabled configuration files.
 .SH SEE ALSO
 .BR apache2ctl (8),
 .BR a2enmod (8),
-.BR a2dismod (8).
+.BR a2dismod (8),
+.BR a2ensite (8),
+.BR a2dissite (8).
 .SH AUTHOR
 This manual page was written by Arno Toell deb...@toell.net for the Debian
 GNU/Linux distribution, as it is a Debian-specific script with the package.
diff --git a/debian/manpages/a2enmod.8 b/debian/manpages/a2enmod.8
index 4e35c84..c98733a 100644
--- a/debian/manpages/a2enmod.8
+++ b/debian/manpages/a2enmod.8
@@ -19,12 +19,14 @@
 a2enmod, a2dismod \- enable or disable an apache2 module
 .SH SYNOPSIS
 .B a2enmod
-[ [\-q|\-\-quiet]
-.IR module ]
+[\-q|\-\-quiet] [ \-m|\-\-maintmode ] [
+.IR module
+]
 .PP
 .B a2dismod
-[ [\-q|\-\-quiet]
-.IR module ]
+[\-q|\-\-quiet] [\-f|\-\-force] [ \-m|\-\-maintmode ] [\-p|\-\-purge] [
+.IR module
+]
 .SH DESCRIPTION
 This manual page documents briefly the
 .B a2enmod
@@ -52,10 +54,14 @@ directives in the .conf file as directives into the main 
server context of
 .B \-q, \-\-quiet
 Don't show informative messages.
 .TP
+.B \-f, \-\-force
+When disabling a module, also cascade disables all modules that depends on it.
+.TP
 .B \-m, \-\-maintmode
 Enables the maintainer mode, that is the program invocation is effectuated
 automatically by a maintainer script. This switch should not be used by end
 users.
+.TP
 .B \-p, \-\-purge
 When disabling a module, purge all traces of the module in the internal state
 data base.
@@ -90,7 +96,9 @@ for enabled modules.
 .SH SEE ALSO
 .BR apache2ctl (8),
 .BR a2enconf (8),
-.BR a2disconf (8).
+.BR a2disconf (8),
+.BR a2ensite (8),
+.BR a2dissite (8).
 .SH AUTHOR
 This manual page was written by Daniel Stone dan...@sfarc.net for the Debian
 GNU/Linux distribution, as it is a Debian-specific script with the package.
diff --git a/debian/manpages/a2ensite.8 b/debian/manpages/a2ensite.8
index c2e21d0..7e2c815 100644
--- a/debian/manpages/a2ensite.8
+++ b/debian/manpages/a2ensite.8
@@ -19,12 +19,14 @@
 a2ensite, a2dissite \- enable or disable an apache2 site / virtual host
 .SH SYNOPSIS
 .B a2ensite
-[ [\-q|\-\-quiet]
-.IR site ]
+[\-q|\-\-quiet] [ \-m|\-\-maintmode ] [
+.IR site
+]
 .PP
 .B a2dissite
-[ [\-q|\-\-quiet]
-.IR site ]
+[\-q|\-\-quiet] [ \-m|\-\-maintmode ] [\-p|\-\-purge] [
+.IR site
+]
 .SH DESCRIPTION
 This manual page documents briefly the
 .B a2ensite
@@ -56,6 +58,7 @@ Don't show informative messages.
 Enables the maintainer mode, that is the program invocation is effectuated
 automatically by a maintainer script. This switch should not be used by end
 users.
+.TP
 .B \-p, \-\-purge
 When disabling a module, purge all traces of the module in the internal state
 data base.
@@ -84,7 +87,11 @@ Directory with links to the files in
 .B sites-available
 for enabled sites.
 .SH SEE ALSO
-.BR apache2ctl (8).
+.BR apache2ctl (8),
+.BR a2enmod (8),
+.BR a2dismod (8),
+.BR a2enconf (8),
+.BR a2disconf (8).
 .SH AUTHOR
 This manual page was written by Stefan Fritsch s...@debian.org (based on the 
a2enmod manual
 page by Daniel Stone dan...@sfarc.net) for the Debian GNU/Linux distribution.


Bug#708288: apache2: htpasswd uses crypt and not md5 as default enc

2013-07-20 Thread Jean-Michel Vourgère
I re-tested a few versions:
Found in 2.2.16-6
Fixed in 2.2.22-13

That bug was very probably repported on a different system from the one it was
found.

First Debian version it was fixed was 2.2.19-1 :
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539246#30

If nobody objects, I'll merge with previous reports #539246 and #606958.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307202209.22449.jmv_...@nirgal.com



Bug#717448: apache2: Invalid command 'AuthType'

2013-07-20 Thread Jean-Michel Vourgère
Which version of phpmyadmin are you installing?

Try
  $ a2enmod authn_core
It fixes the same problem here.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307210159.24593.jmv_...@nirgal.com



Bug#717299: apache2-dev: dh_apache2 ignores alternative httpd on conf files

2013-07-18 Thread Jean-Michel Vourgère
Package: apache2-dev
Version: 2.4.4-6
Severity: normal

Dear Maintainer,

I'm using a debian/apache2 file like this:
conf javascript-common.conf lighttpd

I expected to get a control file with:
Recommends: apache2 (= 2.4.4~) | lighttpd | httpd

But I only get:
Recommends: apache2 (= 2.4.4~) | httpd

On line 386 of /usr/bin/dh_apache2, changing if ($#arguments  0) by if (1)
fixes my problem.

Regards

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.9-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2-dev depends on:
ii  debhelper9.20130630
ii  libapr1-dev  1.4.8-1
ii  libaprutil1-dev  1.5.2-1
ii  openssl  1.0.1e-3
ii  perl 5.14.2-21

apache2-dev recommends no packages.

apache2-dev suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201307190203.54498.jmv_...@nirgal.com



Bug#708288: htpasswd uses crypt and not md5 as default enc

2013-06-28 Thread Jean-Michel Vourgère
htpassword man page says about MD5:
On Windows, Netware and TPF, this is the default.

And about crypt:
The default on all platforms but Windows, Netware and TPF.

So I see no problem there.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201306282153.17120.jmv_...@nirgal.com



apache2-suexec conflicts/replaces apache2-suexec-custom

2013-01-09 Thread Jean-Michel Vourgère
Hello

Maybe you saw that lintian error:
http://lintian.debian.org/maintainer/debian-apa...@lists.debian.org.html#apache2
about apache2-suexec.lintian-overrides

Now we have apache2-suexec-custom conflicts/replaces apache2-suexec
And apache2-suexec conflicts/replaces apache2-suexec.

First I supposed last one should conflicts/replaces apache2-suexec-custom
rather than apache2-suexec and it was a simple typo.
But with the override, I'm not so sure...

Any idea anyone?


signature.asc
Description: This is a digitally signed message part.


Bug#697465: apache2.2-common: initial install fails: Could not read /etc/apache2/envvars

2013-01-07 Thread Jean-Michel Vourgère
On Sunday 06 January 2013 11:29:55 Arno Töll wrote:
 (...)
  Seems that error comes from a2ensite call, so I suspect the cause might
  be some dependency of that script has not yet been configured.
 
 a2ensite does not call a shell to read /etc/apache2/envvars. Your output
 makes me suspect this is rather coming from the init script which is
 invoked from postinst. What makes you think a2ensite is the problem?

Arno:
a2ensite reads /etc/apache2/envvars in function read_env_file on line 331:
env - sh -c '. /etc/apache2/envvars  env'

Jonas:
What does the command line above yield?
What is the result code ? ($?)
What shell do you use? dash? (ls -l /bin/sh)
Can you send us your envvars file?


signature.asc
Description: This is a digitally signed message part.


Bug#695835: apache2: ServerName and some IPv6 adresses problems

2012-12-15 Thread Jean-Michel Vourgère
Hello Thomas

Documentation of ServerName [1] shows that it takes a fully qualified domain
name, not an IP address. I tried [2a01:4f8:d12:2200::3] but I could not make
it work either, using testing version 2.2.22-12.

IP addresses must be put in the parameter of a VirtualHost directive. Then,
depending of your needs, you may have to play with the order of the vhosts.

Please read virtual host configuration directives documentation. [2] [3]

So I don't think this is a bug. What is your opinion?


[1] https://httpd.apache.org/docs/2.2/mod/core.html#servername
[2] https://httpd.apache.org/docs/2.4/bind.html
[3] https://httpd.apache.org/docs/2.4/vhosts/


signature.asc
Description: This is a digitally signed message part.


Bug#668858: doesn't use UTF-8 by default

2012-12-02 Thread Jean-Michel Vourgère
tags 668858 +wontfix
thanks

Assuming the report is about adding default charset UTF-8 to requests,
this will yield incorrect charset information for many files in the
archive. Stefan shown that.

Default is now not to send any charset in headers. It's up to the browser
to choose one. Browsers sometimes fail to detect UTF-8, that's true. But this
is a problem in the browser. Sending sometimes wrong information might help,
but this is not the proper way to fix things.

I'm now tagging your bug wontfix.

Please report a bug against your browser if unicode auto detection does not
work. In iceweasel 10, this might be related to Default Character Encoding
(Preferences/Content/Font  Colours (!)/Advanced/Character encoding); or
make sure UTF-8 is first choice in View / Character Encoding / Customize list.

If you whish to reopen that bug, please give details about expected behavior.


-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201212021253.49539.jmv_...@nirgal.com



Bug#663530: Spurious warning NameVirtualHost *:80 has no VirtualHosts in cron/logrotate output

2012-12-01 Thread Jean-Michel Vourgère
Hello

Do you still have the bug repported at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663530
?

What is the content of your /etc/apache2/ports.conf file?


signature.asc
Description: This is a digitally signed message part.


Bug#691365: apache2: invoke-rc.d apache2 status fails

2012-10-24 Thread Jean-Michel Vourgère
Package: apache2
Version: 2.4.3-1
Severity: normal
Tags: patch

After a complex and wrong upgrade to latest debian git snapshot of apache2, I
ended up with old 2.2 apache2-mpm-worker in broken state. I purge it and had to
kill -9 the processes.
http://paste.debian.net/203339/

Anyways, after that operation I found myself with /etc/init.d/apache2 status
not working.

I traced the problem to a call of
status_of_proc apache2 apache2 -p /var/run/apache2/apache2.pid
that calls
pidofproc apache2
that find an obsolete file /var/run/apache2.pid (instead of
/var/run/apache2/apache2.pid).

The thing is
status_of_proc -p /var/run/apache2/apache2.pid apache2 apache2
yields
[ ok ] apache2 is running, while
status_of_proc apache2 apache2 -p /var/run/apache2/apache2.pid
yields
[FAIL] apache2 is not running ... failed!

So the -p parameter position need to be inverted in init.d/apache2

The problem will only show if you have a stale pid file in obsolete file
/var/run/apache2.pid

Patch attached.

-- Package-specific info:
Enabled MPM: worker
List of enabled modules:
  env (enabled by unknown)
   autoindex (enabled by unknown)
   status (enabled by unknown)
   authn_file (enabled by unknown)
   authz_groupfile (enabled by unknown)
   authz_host (enabled by unknown)
   filter (enabled by maintainer script)
   auth_basic (enabled by unknown)
   mpm_worker (enabled by site administrator)
   cgid (enabled by unknown)
   access_compat (enabled by maintainer script)
   deflate (enabled by unknown)
   reqtimeout (enabled by unknown)
   authz_user (enabled by unknown)
   setenvif (enabled by unknown)
   authz_core (enabled by maintainer script)
   dir (enabled by unknown)
   negotiation (enabled by unknown)
   mime (enabled by unknown)
   alias (enabled by unknown)
List of enabled configurations:
  security.conf (enabled by unknown)
   localized-error-pages.conf (enabled by unknown)
   other-vhosts-access-log.conf (enabled by unknown)
   charset.conf (enabled by unknown)
   serve-cgi-bin.conf (enabled by maintainer script)

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2 depends on:
ii  apache2-bin   2.4.3-1
ii  apache2-data  2.4.3-1
ii  lsb-base  4.1+Debian7
ii  mime-support  3.52-1
ii  perl  5.14.2-14
ii  procps1:3.3.3-2

Versions of packages apache2 recommends:
ii  ssl-cert  1.0.32

Versions of packages apache2 suggests:
ii  apache2-doc  2.4.1-1
pn  apache2-suexec-pristine | apache2-suexec-custom  none
pn  apache2-utilsnone
ii  chromium [www-browser]   21.0.1180.89~r154005-1
ii  iceweasel [www-browser]  10.0.9esr-1
ii  lynx-cur [www-browser]   2.8.8dev.12-2
ii  w3m [www-browser]0.5.3-8

Versions of packages apache2-bin depends on:
ii  libapr1  1.4.6-3
ii  libaprutil1  1.4.1-3
ii  libaprutil1-dbd-sqlite3  1.4.1-3
ii  libaprutil1-ldap 1.4.1-3
ii  libc62.13-35
ii  libldap-2.4-22.4.31-1
ii  liblua5.1-0  5.1.5-4
ii  libpcre3 1:8.30-5
ii  libssl1.0.0  1.0.1c-4
ii  libxml2  2.8.0+dfsg1-6
ii  perl 5.14.2-14
ii  zlib1g   1:1.2.7.dfsg-13

Versions of packages apache2-bin suggests:
ii  apache2-doc  2.4.1-1
pn  apache2-suexec-pristine | apache2-suexec-custom  none
ii  chromium [www-browser]   21.0.1180.89~r154005-1
ii  iceweasel [www-browser]  10.0.9esr-1
ii  lynx-cur [www-browser]   2.8.8dev.12-2
ii  w3m [www-browser]0.5.3-8

Versions of packages apache2 is related to:
ii  apache2  2.4.3-1
ii  apache2-bin  2.4.3-1

-- Configuration Files:
/etc/init.d/apache2 changed [not included]

-- no debconf information
--- debian/apache2.init	2012-10-24 18:06:26.0 +0200
+++ /etc/init.d/apache2	2012-10-24 21:24:49.0 +0200
@@ -79,7 +79,7 @@
 apache_wait_stop() {
 local STATUS=$1
 
-PIDTMP=$(pidofproc $DAEMON -p $PIDFILE)
+PIDTMP=$(pidofproc -p $PIDFILE $DAEMON)
 if [ -n ${PIDTMP:-} ]  kill -0 ${PIDTMP:-} 2 /dev/null; then
 local i=0
 while kill -0 ${PIDTMP:-} 2 /dev/null;  do
@@ -108,7 +108,7 @@
 	#   1 if daemon was already running
 	#   2 if daemon could not be started
 
-	if pidofproc $DAEMON -p $PIDFILE  /dev/null 21 ; then
+	if pidofproc -p $PIDFILE $DAEMON  /dev/null 21 ; then
 return 1
 fi
 
@@ -180,7 +180,7 @@
 #
 do_reload() {
 if $APACHE2CTL configtest  /dev/null 21; then
-	if ! 

Bug#288615: Patch file

2012-10-21 Thread Jean-Michel Vourgère
Attaching a proper patch file for the record.
Description: Parent languages are not ordered according to Accept-Language
 When a browser send Accept-Language only with dialects - which it should not
 do - apache does not match any langague and accept all parents language with
 a 0.001 priority.
 .
 For exemple, when accepting fr-fr,en-us;q=0.3, and having choice fr and en,
 en will be served according to LanguagePriority.
 .
 This patch improves the behaviour by using some of the original dialect weight
 when choosing a parent variant.
 .
 See original bug repport for details.
Author: Richard Atterer atte...@debian.org
Origin: http://bugs.debian.org/288615
Bug: https://issues.apache.org/bugzilla/show_bug.cgi?id=54033
Bug-Debian: http://bugs.debian.org/288615
Reviewed-By: Jean-Michel Vourgère jmv_...@nirgal.com
Last-Update: 2006-11-25

Index: apache2-2.2.22/modules/mappers/mod_negotiation.c
===
--- apache2-2.2.22.orig/modules/mappers/mod_negotiation.c
+++ apache2-2.2.22/modules/mappers/mod_negotiation.c
@@ -1654,7 +1654,7 @@
 int plen = p - accs[i].name;
 
 if (!strncmp(lang, accs[i].name, plen)) {
-fiddle_q = 0.001f;
+fiddle_q = 0.001f * accs[i].quality;
 }
 }
 }


signature.asc
Description: This is a digitally signed message part.


Bug#288615: apache2: Issue with language negotiation exceptions

2012-10-20 Thread Jean-Michel Vourgère
tags 288615 + patch
thank you

I could reproduce the problem.
The proposed patch fixes it. :)


signature.asc
Description: This is a digitally signed message part.


Bug#663971: apache2.2-common: /etc/init.d/apache2 requires facility $named, causing failed install/upgrade

2012-10-19 Thread Jean-Michel Vourgère
It seems to me this is exactly what the little known Should-Start: from LSB 
is for.

https://wiki.debian.org/LSBInitScripts


signature.asc
Description: This is a digitally signed message part.


Patches clean up

2012-02-25 Thread Jean-Michel Vourgère
Here's a new bunch of patch:

0001-Add-apxs2.1-manual-link-to-apxs.1 quiets lintian a bit
0002-Added-Close-657492-in-changelogjust a missing Closes:
0003-Drop-patch-004.patch   obsolete patch
0004-Drop-patch-009.patch   obsolete patch
0005-Refresh-patches-to-use-DEP-3.-Reactivated-patches.patch
From d0d9f8d903a07c352345aa545c8e38a914c7c6b2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jean-Michel=20Vourg=C3=A8re?= jmv_...@nirgal.com
Date: Sat, 25 Feb 2012 11:19:18 +0100
Subject: [PATCH 1/5] Add apxs2.1 manual: link to apxs.1

Thanks lintian
---
 debian/apache2-dev.manpages |1 +
 debian/manpages/apxs2.1 |1 +
 2 files changed, 2 insertions(+), 0 deletions(-)
 create mode 100644 debian/manpages/apxs2.1

diff --git a/debian/apache2-dev.manpages b/debian/apache2-dev.manpages
index 6293760..a626a72 100644
--- a/debian/apache2-dev.manpages
+++ b/debian/apache2-dev.manpages
@@ -1 +1,2 @@
 debian/tmp/usr/share/man/man1/apxs.1
+debian/manpages/apxs2.1
diff --git a/debian/manpages/apxs2.1 b/debian/manpages/apxs2.1
new file mode 100644
index 000..e41678b
--- /dev/null
+++ b/debian/manpages/apxs2.1
@@ -0,0 +1 @@
+.so man1/apxs.1
-- 
1.7.9

From b437062584eef87f0026df43a4b24b006c3755bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jean-Michel=20Vourg=C3=A8re?= jmv_...@nirgal.com
Date: Sat, 25 Feb 2012 13:03:03 +0100
Subject: [PATCH 2/5] Added Close #657492 in changelog

---
 debian/changelog |3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index fd72530..5a0aef2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -109,7 +109,8 @@ apache2 (2.4.1-1) experimental; urgency=low
 
   [ Jean-Michel Vourgère ]
 
-  * Update bash completion functions to reflect the new site setup.
+  * Update bash completion functions to reflect the new site setup. (Closes:
+#657492)
 
  -- Arno Töll deb...@toell.net  Sat, 25 Feb 2012 03:07:24 +0100
 
-- 
1.7.9

From fabf7590137d1b81e1953816c5f429c946723b7f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jean-Michel=20Vourg=C3=A8re?= jmv_...@nirgal.com
Date: Sat, 25 Feb 2012 13:29:14 +0100
Subject: [PATCH 3/5] Drop patch 004

Source file no longer calls /usr/local/bin/perl
---
 debian/patches/004_usr_bin_perl_0wnz_j00 |   15 ---
 debian/patches/series|1 -
 2 files changed, 0 insertions(+), 16 deletions(-)
 delete mode 100755 debian/patches/004_usr_bin_perl_0wnz_j00

diff --git a/debian/patches/004_usr_bin_perl_0wnz_j00 b/debian/patches/004_usr_bin_perl_0wnz_j00
deleted file mode 100755
index ffabf4c..000
--- a/debian/patches/004_usr_bin_perl_0wnz_j00
+++ /dev/null
@@ -1,15 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 004_usr_bin_perl_0wnz_j00 by Adam Conrad adcon...@0c3.net
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: Call /usr/bin/perl in printenv, not /usr/local/bin/perl
-
-@DPATCH@
 a/docs/cgi-examples/printenv
-+++ b/docs/cgi-examples/printenv
-@@ -1,4 +1,4 @@
--#!/usr/local/bin/perl
-+#!/usr/bin/perl
- ##
- ##  printenv -- demo CGI program which just prints its environment
- ##
diff --git a/debian/patches/series b/debian/patches/series
index e21cd2c..c4ba807 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,4 +1,3 @@
-#004_usr_bin_perl_0wnz_j00
 #008_make_include_safe
 #009_apache2_has_dso
 010_fhs_compliance
-- 
1.7.9

From c83f48cfd3396bc43fa703fb8a2f7875921f0751 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jean-Michel=20Vourg=C3=A8re?= jmv_...@nirgal.com
Date: Sat, 25 Feb 2012 14:17:08 +0100
Subject: [PATCH 4/5] Drop patch 009

Upstream is no longer testing DSO is available.
So we don't need to remove that test anymore.
---
 debian/patches/009_apache2_has_dso |   40 
 debian/patches/series  |1 -
 2 files changed, 0 insertions(+), 41 deletions(-)
 delete mode 100755 debian/patches/009_apache2_has_dso

diff --git a/debian/patches/009_apache2_has_dso b/debian/patches/009_apache2_has_dso
deleted file mode 100755
index 24b2cd3..000
--- a/debian/patches/009_apache2_has_dso
+++ /dev/null
@@ -1,40 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 009_apache2_has_dso by Adam Conrad adcon...@0c3.net
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: Make apxs usable without having apache2 installed.
-
-@DPATCH@
 a/support/apxs.in
-+++ b/support/apxs.in
-@@ -198,18 +198,19 @@
- ($httpd = $0) =~ s:support/apxs$::;
- }
- 
--unless (-x $httpd) {
--	error($httpd not found or not executable);
--	exit 1;
--}
-+#commented out for Debian GNU/Linux. We know that apache2 has dso support
-+#unless (-x $httpd) {
-+#	error($httpd not found or not executable);
-+#	exit 1;
-+#}
- 
--unless (grep /mod_so/, `. $envvars  $httpd -l`) {
--error(Sorry, no shared object support for Apache);
--error(available under your platform. Make sure);
--error(the Apache module mod_so

[patch] bash_completion

2012-02-24 Thread Jean-Michel Vourgère
Attached are 2 patches for bash_completion.
First one is from http://bugs.debian.org/657492
Second one adds support for a2(en|dis)conf

I let you handle the changelog. Note that this (Closes: #657492)

Also, bash_completion/apache2-common is listed in debian/apache2-data.install
I suggest we let dh_bashcompletion handle this, and move it to apache2 package 
where the binary is.
That means renaming debian/bash_completion/apache2-common to 
debian/apache2.bash_completion
Unless we want to be smart about old conflicting file 
/etc/bash_completion.d/apache2.2-common ...
From 318a3a473a18cb89ebdf02c93d6c3ed062a7be82 Mon Sep 17 00:00:00 2001
From: Ludovico Gardenghi gar...@debian.org
Date: Fri, 24 Feb 2012 21:58:26 +0100
Subject: [PATCH 1/2] bash_completion: a2{en,dis}site don't strip .conf

...nor .load
Fixes: #657492
---
 debian/bash_completion/apache2-common |   22 --
 1 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/debian/bash_completion/apache2-common b/debian/bash_completion/apache2-common
index c24b2e5..0204589 100644
--- a/debian/bash_completion/apache2-common
+++ b/debian/bash_completion/apache2-common
@@ -1,12 +1,22 @@
 # bash completion for Debian apache2 configuration tools
 # $Id: apache2,v 1.1 2005/03/16 22:51:19 guillaume Exp $
 
-_apache2_modsites()
+_apache2_allcomp()
 {
-   COMPREPLY=( $( compgen -W '$( command ls /etc/apache2/$1 2/dev/null \
+   command ls /etc/apache2/$1 2/dev/null
+}
+
+_apache2_mods()
+{
+   COMPREPLY=( $( compgen -W '$( _apache2_allcomp $1 \
| sed -e 's/[.]load$//' -e 's/[.]conf$//' )' -- $cur  ) )
 }
 
+_apache2_sites()
+{
+   COMPREPLY=( $( compgen -W '$( _apache2_allcomp $1 )' -- $cur  ) )
+}
+
 _a2enmod()
 {
local cur
@@ -14,7 +24,7 @@ _a2enmod()
COMPREPLY=()
cur=${COMP_WORDS[COMP_CWORD]}
 
-   _apache2_modsites mods-available
+   _apache2_mods mods-available
 }
 complete -F _a2enmod a2enmod
 
@@ -25,7 +35,7 @@ _a2ensite()
COMPREPLY=()
cur=${COMP_WORDS[COMP_CWORD]}
 
-   _apache2_modsites sites-available
+   _apache2_sites sites-available
 
 }
 complete -F _a2ensite a2ensite
@@ -37,7 +47,7 @@ _a2dismod()
COMPREPLY=()
cur=${COMP_WORDS[COMP_CWORD]}
 
-   _apache2_modsites mods-enabled
+   _apache2_mods mods-enabled
 }
 complete -F _a2dismod a2dismod
 
@@ -48,7 +58,7 @@ _a2dissite()
COMPREPLY=()
cur=${COMP_WORDS[COMP_CWORD]}
 
-   _apache2_modsites sites-enabled
+   _apache2_sites sites-enabled
 
 }
 complete -F _a2dissite a2dissite
-- 
1.7.9

From 0c3d85f6d838f2faec43fa70592ec9abbeb297da Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jean-Michel=20Vourg=C3=A8re?= jmv_...@nirgal.com
Date: Fri, 24 Feb 2012 22:02:27 +0100
Subject: [PATCH 2/2] bash_completion: Support for a2(en|dis)conf

---
 debian/bash_completion/apache2-common |   31 ---
 1 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/debian/bash_completion/apache2-common b/debian/bash_completion/apache2-common
index 0204589..e57c100 100644
--- a/debian/bash_completion/apache2-common
+++ b/debian/bash_completion/apache2-common
@@ -1,5 +1,4 @@
 # bash completion for Debian apache2 configuration tools
-# $Id: apache2,v 1.1 2005/03/16 22:51:19 guillaume Exp $
 
 _apache2_allcomp()
 {
@@ -17,6 +16,12 @@ _apache2_sites()
COMPREPLY=( $( compgen -W '$( _apache2_allcomp $1 )' -- $cur  ) )
 }
 
+_apache2_conf()
+{
+   COMPREPLY=( $( compgen -W '$( _apache2_allcomp $1 \
+   | sed -e 's/[.]conf$//' )' -- $cur  ) )
+}
+
 _a2enmod()
 {
local cur
@@ -36,10 +41,20 @@ _a2ensite()
cur=${COMP_WORDS[COMP_CWORD]}
 
_apache2_sites sites-available
-
 }
 complete -F _a2ensite a2ensite
 
+_a2enconf()
+{
+   local cur
+
+   COMPREPLY=()
+   cur=${COMP_WORDS[COMP_CWORD]}
+
+   _apache2_conf conf-available
+}
+complete -F _a2enconf a2enconf
+
 _a2dismod()
 {
local cur
@@ -59,6 +74,16 @@ _a2dissite()
cur=${COMP_WORDS[COMP_CWORD]}
 
_apache2_sites sites-enabled
-
 }
 complete -F _a2dissite a2dissite
+
+_a2disconf()
+{
+   local cur
+
+   COMPREPLY=()
+   cur=${COMP_WORDS[COMP_CWORD]}
+
+   _apache2_conf conf-enabled
+}
+complete -F _a2disconf a2disconf
-- 
1.7.9



signature.asc
Description: This is a digitally signed message part.


Bug#594166: apxs2 generated Makefile command fails to restart apache

2012-02-24 Thread Jean-Michel Vourgère
found 594166 2.2.16-6+squeeze6
found 594166 2.2.22-1
thanks

Actually, you also need to load the module to reproduce:
echo LoadModule foo_module /usr/lib/apache2/modules/mod_foo.so  
/etc/apache2/mods-available/foo.load
a2enmod foo

error.log repports:
[Fri Feb 24 22:56:34 2012] [notice] SIGHUP received.  Attempting to restart
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_env.c: not found in 
module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_dir.c: not found in 
module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_deflate.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authz_svn.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_dav_svn.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_dav.c: not found in 
module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_cgi.c: not found in 
module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_autoindex.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authz_user.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authz_host.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authz_groupfile.c: 
not found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authz_default.c: 
not found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_authn_file.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_auth_basic.c: not 
found in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_alias.c: not found 
in module list
[Fri Feb 24 22:56:34 2012] [error] Cannot remove module mod_actions.c: not 
found in module list
Syntax error on line 160 of /etc/apache2/apache2.conf:
Invalid command 'Order', perhaps misspelled or defined by a module not included 
in the server configuration


signature.asc
Description: This is a digitally signed message part.


Bug#629899: ap_get_local_host is broken (can't always determine the server's FQDN)

2012-02-22 Thread Jean-Michel Vourgère
Hello Vincent

On Wednesday 22 February 2012 03:39:38 Vincent Lefevre wrote:
 I'll try to do some tests when I have the time. But there's
 no reason eth0 would be IPv6 only here (unless there's a huge
 bug in the kernel).

I'm prety sure your apache tries to start before dhclient has given
the server its IPv4. And you'll have the local link IPv6 address already.

The patch of libapr1 will fix your hostname problem:
https://issues.apache.org/bugzilla/show_bug.cgi?id=52709

Basically, all loopback IPv4 resolution is broken while dhclient is running
the first time, that is when you have IPv6 on eth0 but no IPv4 on it yet.
Then libapr1 internal function call_resolver is wrongly using AI_ADDRCONFIG
so that loopback IPv4 addresses are ignored.

That is why a manual restart (after dhclient completed) works.

I did understand your apache starts. Because you probably Listen 80 rather
than Listen 127.0.1.1:80. 127.0.1.1 resolution would fail then, just like the
resolution of ypig in your case. I tested it yesterday.

Believe me, the source of your problems are in libapr1, not in apache2 packages,
nor in the kernel.

Je te parie une bierre si tu veux! ;)


signature.asc
Description: This is a digitally signed message part.


Bug#500558: apache2.2-common: Apache fails to start on boot after upgrade Etch - Lenny

2012-02-21 Thread Jean-Michel Vourgère
severity 500558 important
found 500558 1.4.2-6+squeeze3
found 500558 1.4.5-1.1
tags 500558 + patch
thanks

Reverting severity level after return from eglibc

Patch posted upstream at
https://issues.apache.org/bugzilla/attachment.cgi?id=28360action=diff


signature.asc
Description: This is a digitally signed message part.


Bug#655435: libapr1: apr_hash vulnerable to oCert-2011-003 style DOS attacks

2012-02-21 Thread Jean-Michel Vourgère
Fixed in 1.4.6

If we need to backport in the future, the changes are located in only two files:
tables/apr_hash.c
test/testhash.c

Attached patch was taken from upstream trunk, it can also apply to previous
versions, including 1.4.2-6+squeeze3
--- tables/apr_hash.c	2012/01/17 06:45:02	1232320
+++ tables/apr_hash.c	2012/01/29 23:38:20	1237507
@@ -18,6 +18,7 @@
 
 #include apr_general.h
 #include apr_pools.h
+#include apr_time.h
 
 #include apr_hash.h
 
@@ -75,7 +76,7 @@
 apr_pool_t  *pool;
 apr_hash_entry_t   **array;
 apr_hash_index_t iterator;  /* For apr_hash_first(NULL, ...) */
-unsigned int count, max;
+unsigned int count, max, seed;
 apr_hashfunc_t   hash_func;
 apr_hash_entry_t*free;  /* List of recycled entries */
 };
@@ -95,13 +96,18 @@
 APR_DECLARE(apr_hash_t *) apr_hash_make(apr_pool_t *pool)
 {
 apr_hash_t *ht;
+apr_time_t now = apr_time_now();
+
 ht = apr_palloc(pool, sizeof(apr_hash_t));
 ht-pool = pool;
 ht-free = NULL;
 ht-count = 0;
 ht-max = INITIAL_MAX;
+ht-seed = (unsigned int)((now  32) ^ now ^ (apr_uintptr_t)pool ^
+  (apr_uintptr_t)ht ^ (apr_uintptr_t)now) - 1;
 ht-array = alloc_array(ht, ht-max);
-ht-hash_func = apr_hashfunc_default;
+ht-hash_func = NULL;
+
 return ht;
 }
 
@@ -201,10 +207,9 @@
 ht-max = new_max;
 }
 
-APR_DECLARE_NONSTD(unsigned int) apr_hashfunc_default(const char *char_key,
-  apr_ssize_t *klen)
+static unsigned int hashfunc_default(const char *char_key, apr_ssize_t *klen,
+ unsigned int hash)
 {
-unsigned int hash = 0;
 const unsigned char *key = (const unsigned char *)char_key;
 const unsigned char *p;
 apr_ssize_t i;
@@ -246,7 +251,7 @@
  *
  *  -- Ralf S. Engelschall r...@engelschall.com
  */
- 
+
 if (*klen == APR_HASH_KEY_STRING) {
 for (p = key; *p; p++) {
 hash = hash * 33 + *p;
@@ -262,6 +267,11 @@
 return hash;
 }
 
+APR_DECLARE_NONSTD(unsigned int) apr_hashfunc_default(const char *char_key,
+  apr_ssize_t *klen)
+{
+return hashfunc_default(char_key, klen, 0);
+}
 
 /*
  * This is where we keep the details of the hash function and control
@@ -280,7 +290,10 @@
 apr_hash_entry_t **hep, *he;
 unsigned int hash;
 
-hash = ht-hash_func(key, klen);
+if (ht-hash_func)
+hash = ht-hash_func(key, klen);
+else
+hash = hashfunc_default(key, klen, ht-seed);
 
 /* scan linked list */
 for (hep = ht-array[hash  ht-max], he = *hep;
@@ -322,6 +335,7 @@
 ht-free = NULL;
 ht-count = orig-count;
 ht-max = orig-max;
+ht-seed = orig-seed;
 ht-hash_func = orig-hash_func;
 ht-array = (apr_hash_entry_t **)((char *)ht + sizeof(apr_hash_t));
 
@@ -419,7 +433,7 @@
 apr_hash_entry_t *new_vals = NULL;
 apr_hash_entry_t *iter;
 apr_hash_entry_t *ent;
-unsigned int i,j,k;
+unsigned int i, j, k, hash;
 
 #if APR_POOL_DEBUG
 /* we don't copy keys and values, so it's necessary that
@@ -447,6 +461,7 @@
 if (base-count + overlay-count  res-max) {
 res-max = res-max * 2 + 1;
 }
+res-seed = base-seed;
 res-array = alloc_array(res, res-max);
 if (base-count + overlay-count) {
 new_vals = apr_palloc(p, sizeof(apr_hash_entry_t) *
@@ -468,7 +483,11 @@
 
 for (k = 0; k = overlay-max; k++) {
 for (iter = overlay-array[k]; iter; iter = iter-next) {
-i = iter-hash  res-max;
+if (res-hash_func)
+hash = res-hash_func(iter-key, iter-klen);
+else
+hash = hashfunc_default(iter-key, iter-klen, res-seed);
+i = hash  res-max;
 for (ent = res-array[i]; ent; ent = ent-next) {
 if ((ent-klen == iter-klen) 
 (memcmp(ent-key, iter-key, iter-klen) == 0)) {
@@ -486,7 +505,7 @@
 new_vals[j].klen = iter-klen;
 new_vals[j].key = iter-key;
 new_vals[j].val = iter-val;
-new_vals[j].hash = iter-hash;
+new_vals[j].hash = hash;
 new_vals[j].next = res-array[i];
 res-array[i] = new_vals[j];
 res-count++;
--- test/testhash.c	2012/01/28 03:00:40	1236967
+++ test/testhash.c	2012/01/28 03:23:11	1236970
@@ -438,6 +438,79 @@
 ABTS_STR_EQUAL(tc, #entries 5\n, StrArray[5]);
 }
 
+static void overlay_fetch(abts_case *tc, void *data)
+{
+apr_hash_t *base = NULL;
+apr_hash_t *overlay = NULL;
+apr_hash_t *result = NULL;
+int count;
+
+base = apr_hash_make(p);
+overlay = apr_hash_make(p);
+ABTS_PTR_NOTNULL(tc, base);
+ABTS_PTR_NOTNULL(tc, overlay);
+
+apr_hash_set(base, base1, APR_HASH_KEY_STRING, value1);
+apr_hash_set(base, base2, 

Bug#629899: ap_get_local_host is broken (can't always determine the server's FQDN)

2012-02-21 Thread Jean-Michel Vourgère
One can reproduce that bug by having IPv6 only on eth0 and no other interface
with IPv4 but localhost, and /etc/hosts matching `hostname` on any lo address.

Call (forward) trace:
ap_get_local_host
apr_sockaddr_info_get
find_addresses
call_resolver
getaddrinfo

... that fails since it is using AI_ADDRCONFIG flag on loopback interface

This bug is actually the same as 500558.


signature.asc
Description: This is a digitally signed message part.


Bug#604647: a2ensite should handle default-ssl specially

2012-02-20 Thread Jean-Michel Vourgère
Hello

Actually, there is a significant difference between default and default-ssl:

default defines a VirtualHost on *:80
default-ssl defines a VirtualHost on _default_:443

If I understand correctly
https://httpd.apache.org/docs/2.4/en/vhosts/examples.html#default
it means default-ssl has no reason to be loaded before others.

Am I missing something?


signature.asc
Description: This is a digitally signed message part.


[patch] A few updates to man for 2.4 (git next)

2012-02-20 Thread Jean-Michel Vourgère
Attached is a patch about a2(en|dis)(mod|site|conf) man pages

* make a2disconf.8 a link to a2enconf.8, just like a2dismod.8 and a2dissite.8

* documented -q option

* documented exit codes

* added see also between a2(en|dis)mod.8 and a2(en|dis)conf.8

* fixed a few typos
diff --git a/debian/manpages/a2disconf.8 b/debian/manpages/a2disconf.8
index a349380..0423e86 100644
--- a/debian/manpages/a2disconf.8
+++ b/debian/manpages/a2disconf.8
@@ -1,74 +1 @@
-.\  Hey, EMACS: -*- nroff -*-
-.\ First parameter, NAME, should be all caps
-.\ Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\ other parameters are allowed: see man(7), man(1)
-.TH A2ENCONF 8 14 February 2012
-.\ Please adjust this date whenever revising the manpage.
-.\
-.\ Some roff macros, for reference:
-.\ .nhdisable hyphenation
-.\ .hyenable hyphenation
-.\ .ad l  left justify
-.\ .ad b  justify to both left and right margins
-.\ .nfdisable filling
-.\ .fienable filling
-.\ .brinsert line break
-.\ .sp ninsert n+1 empty lines
-.\ for manpage-specific macros, see man(7)
-.SH NAME
-a2enconf, a2disconf \- enable or disable an apache2 module
-.SH SYNOPSIS
-.B a2enmod
-.RI [ configuration ]
-.PP
-.B a2dismod
-.RI [ configuration ]
-.SH DESCRIPTION
-This manual page documents briefly the
-.B a2enconf
-and
-.B a2disconf
-commands.
-.PP
-.B a2enmod
-is a script that enables the specified configuration file within the
-.B apache2
-configuration.  It does this by creating symlinks within
-.BR /etc/apache2/conf-enabled .
-Likewise,
-.B a2disconf
-disables a specific configuration part by removing those symlinks.  It is not an
-error to enable a module which is already enabled, or to disable one which is
-already disabled.
-.PP
-Note that many configuration file may have a dependency to specific modules.
-Unlike module dependencies, these are not resolved automatically. Configuration
-fragments stored in the conf-available directory are considered non-essential or
-being installed and manged by reverse dependencies (e.g. web scripts).
-.B apache2
-.SH EXAMPLES
-.RS
-.B a2enmod security
-.br
-.B a2dismod charset
-.RE
-.PP
-Enables Apache security directives stored in the
-.B security
-configuration files, and disables the
-.B charset
-configuration.
-.SH FILES
-.TP
-.B /etc/apache2/conf-available
-Directory with files giving information on available configuration files.
-.TP
-.B /etc/apache2/conf-enabled
-Directory with links to the files in
-.B conf-available
-for enabled modules.
-.SH SEE ALSO
-.BR apache2ctl (8).
-.SH AUTHOR
-This manual page was written by Arno Toell deb...@toell.net for the Debian
-GNU/Linux distribution, as it is a Debian-specific script with the package.
+.so man8/a2enconf.8
diff --git a/debian/manpages/a2enconf.8 b/debian/manpages/a2enconf.8
index a349380..d3ff413 100644
--- a/debian/manpages/a2enconf.8
+++ b/debian/manpages/a2enconf.8
@@ -16,13 +16,15 @@
 .\ .sp ninsert n+1 empty lines
 .\ for manpage-specific macros, see man(7)
 .SH NAME
-a2enconf, a2disconf \- enable or disable an apache2 module
+a2enconf, a2disconf \- enable or disable an apache2 configuration file
 .SH SYNOPSIS
-.B a2enmod
-.RI [ configuration ]
+.B a2enconf
+[ [\-q|\-\-quiet]
+.IR configuration ]
 .PP
-.B a2dismod
-.RI [ configuration ]
+.B a2disconf
+[ [\-q|\-\-quiet]
+.IR configuration ]
 .SH DESCRIPTION
 This manual page documents briefly the
 .B a2enconf
@@ -30,7 +32,7 @@ and
 .B a2disconf
 commands.
 .PP
-.B a2enmod
+.B a2enconf
 is a script that enables the specified configuration file within the
 .B apache2
 configuration.  It does this by creating symlinks within
@@ -38,19 +40,29 @@ configuration.  It does this by creating symlinks within
 Likewise,
 .B a2disconf
 disables a specific configuration part by removing those symlinks.  It is not an
-error to enable a module which is already enabled, or to disable one which is
+error to enable a configuration which is already enabled, or to disable one which is
 already disabled.
 .PP
 Note that many configuration file may have a dependency to specific modules.
 Unlike module dependencies, these are not resolved automatically. Configuration
 fragments stored in the conf-available directory are considered non-essential or
 being installed and manged by reverse dependencies (e.g. web scripts).
-.B apache2
+.SH OPTIONS
+.TP
+.B \-q, \-\-quiet
+Don't show informative messages.
+.SH EXIT STATUS
+.B a2enconf
+and
+.B a2disconf
+exit with status 0 if all
+.IR configuration s
+are processed successfully, 1 if errors occur, 2 if an invalid option was used.
 .SH EXAMPLES
 .RS
-.B a2enmod security
+.B a2enconf security
 .br
-.B a2dismod charset
+.B a2disconf charset
 .RE
 .PP
 Enables Apache security directives stored in the
@@ -66,9 +78,11 @@ Directory with files giving information on available configuration files.
 .B /etc/apache2/conf-enabled
 Directory with links to the files in
 .B conf-available
-for enabled 

Bug#629899: ap_get_local_host is broken

2012-02-19 Thread Jean-Michel Vourgère
tags 629899 + moreinfo
thanks

On Sunday 19 February 2012 11:22:42 Vincent Lefevre wrote:
 Does the bug is still there if you set up a static ip address in
 /etc/network/interfaces for your eth0 interface? 
 I haven't tried. In any case, there's no reason to use eth0 (some
 machines do not even have an Ethernet card).

I know it sounds stupid, but try it, please.

The libapr1 resolver is known to fail for 127.0.0.1 if you have only
ipv6 on eth0, like when dhclient hasn't finished yet. Race problem on
boot.
See http://bugs.debian.org/500558


signature.asc
Description: This is a digitally signed message part.


Bug#208831: apache2 - mod_action forgets authenticated user

2012-02-19 Thread Jean-Michel Vourgère
tags 208831 + unreproducible + moreinfo
thanks

Hello Bastian

I tried to reproduce that 9 year old bug, but could not.

My settings:
AddType nirgal/test .nirgal
Action nirgal/test /cgi-bin/echo
Location /
AuthType Basic
AuthName By Invitation Only
AuthUserFile /htpasswd
Require valid-user
/Location

My CGI:
#!/usr/bin/python3
import os
print(Content-Type: text/plain)
print()
print(os.environ)

I can see REMOTE_USER in the CGI environment.

Could you give us more information on that problem?


signature.asc
Description: This is a digitally signed message part.


Bug#632884: apache2 upgrade does not upgrade libapr1

2012-02-19 Thread Jean-Michel Vourgère
This is very likely related to fixed bug 591286.

I almost merged it. However, the report is about a missing dependency.

2.2.29 can only be testing or newer. And nowodays, testing depends on libapr1 
1.4.2.

Since 591286 was fixed on libapr1 1.4.2-4 I suggest we force Depends: libapr1 
= 1.4.2-4


signature.asc
Description: This is a digitally signed message part.


Bug#629899: ap_get_local_host is broken

2012-02-18 Thread Jean-Michel Vourgère
Hello

I recently found some strange behavior in dns resolution at boot time, when
eth0 has no ipv4 yet. (#500558)

Do you use DHCP for your other interface (eth0)?

What is the result of `grep CONCURRENCY /etc/init.d/rc' ?

Does the bug is still there if you set up a static ip address in
/etc/network/interfaces for your eth0 interface? Like
auto eth0
iface eth0 inet static address 192.168.0.1 netmask 255.255.255.0 gateway 
192.168.0.1


signature.asc
Description: This is a digitally signed message part.


Bug#500558: Can't listen to 127.0.0.1 if eth0 has IPv6 only

2012-02-17 Thread Jean-Michel Vourgère
reassign 500558 libapr1
tags 500558 + upstream
thanks

I traced back that problem to a call in libapr1, in call_resolver()
getaddrinfo(127.0.0.1, NULL, hints, ...) that returns -9
because hints contains AI_ADDRCONFIG

Without that hint, it works.

Extract from call_resolver:
if (family == APR_UNSPEC) {
/* By default, only look up addresses using address types for
 * which a local interface is configured, i.e. no IPv6 if no
 * IPv6 interfaces configured. */
hints.ai_flags = AI_ADDRCONFIG;
}

Documentation from getaddrinfo(3):
   If  hints.ai_flags includes the AI_ADDRCONFIG flag, then IPv4 addresses
   are returned in the list pointed to by res only if the local system has
   at  least  one  IPv4  address  configured,  and IPv6 addresses are only
   returned if the local system has at least one IPv6 address configured.

But obviously, having an IPv6 on eth0, and both an IPv4 and IPv6 in lo, is not
enough to enable IPv4 resolution.

Attached is a tiny test case.
#include stdlib.h
#include stdio.h
#include string.h
#include sys/types.h
#include sys/socket.h
#include netdb.h


int main(int argc, char**argv) {
struct addrinfo hints, *ai_list;
int error;

memset(hints, 0, sizeof(hints));
hints.ai_family = AF_UNSPEC;
hints.ai_socktype = SOCK_STREAM;
hints.ai_flags = AI_ADDRCONFIG;

	error = getaddrinfo(127.0.0.1, NULL, hints, ai_list);
	printf(error=%d flags=%d\n, error, hints.ai_flags);

hints.ai_flags = 0;
	error = getaddrinfo(127.0.0.1, NULL, hints, ai_list);
	printf(error=%d flags=%d\n, error, hints.ai_flags);

	return 0;
}



signature.asc
Description: This is a digitally signed message part.


[help] apache2-prefork-dev should Provides: apache2-dev

2012-02-16 Thread Jean-Michel Vourgère
Hello

I've been triaging a few apache2 bugs. I found one that requires maintainer 
input:
http://bugs.debian.org/428095

A few hints:
apache2-prefork-dev and apache2-threaded-dev provides the same files but for 2:
/usr/include/apache2/fdqueue.h and /usr/include/apache2/pod.h are only in 
apache2-threaded-dev.



Option 1: add the requested provides: into apache2-prefork-dev.

Option 2: flag as won't fix and remove provides: from apache2-threaded-dev.  
There is currently no reverse dependency on apache2-dev as far as I can tell.

Any other idea?


signature.asc
Description: This is a digitally signed message part.


Bug #620347 fixed in next git branch

2012-02-16 Thread Jean-Michel Vourgère
Looking at Debian git next branch changelog on Alioth, in [Stefan Fritsch]
section:
* Only include conf.d/*.conf, not conf.d/*.
You might want to add (Closes: #620347) on that line.

See http://bugs.debian.org/620347

Cheers


signature.asc
Description: This is a digitally signed message part.


2.3.16 closes #400881

2012-02-16 Thread Jean-Michel Vourgère
I suppose next branch changelog might also close http://bugs.debian.org/400881

Cheers


signature.asc
Description: This is a digitally signed message part.


Bug #350285 fixed upstream by 2.3.16

2012-02-16 Thread Jean-Michel Vourgère
You might want to close that one in next branch changelog too.
It is done in 2.3.16 but not in 2.2.22.

http://bugs.debian.org/350285

Cheers


signature.asc
Description: This is a digitally signed message part.


2.3.16 fixes bug #601033

2012-02-16 Thread Jean-Michel Vourgère
next branch changelog should Closes: #601033 too.

http://bugs.debian.org/601033

AddOutputFilterByType is undeprecated since 2.3.7 :)


signature.asc
Description: This is a digitally signed message part.


Bug#444048: We won't get details

2012-02-05 Thread Jean-Michel Vourgère
Bug repporter email address is invalid.

SMTP error from remote mail server after RCPT TO:npr...@q-cat.com:
 host mail.q-cat.com [64.247.176.135]: 550 5.1.1 sorry, no mailbox here by that 
name (chkuser)

Original bug repport uses:
 CustomLog /home/nick/access_log combined
 ScriptLog /home/nick/script_log
so that I think comment #88 about problems in mod_log_sql is not related.



-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201202051552.30225.jmv_...@nirgal.com



Bug#645874: We won't get details

2012-02-05 Thread Jean-Michel Vourgère
Bug repporter email address is invalid.

SMTP error from remote mail server after RCPT TO:j.ku...@leonit.nl:
  host mail.leonit.nl [93.186.180.174]: 550 sorry, no mailbox here by that 
name. (#5.7.17)



-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201202051553.52994.jmv_...@nirgal.com



Bug#630888: ssl renegotiation hangs with long ca lists

2012-02-05 Thread Jean-Michel Vourgère
Please, can you provide the information required at
https://issues.apache.org/bugzilla/show_bug.cgi?id=46952#c24



-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201202051618.27571.jmv_...@nirgal.com



Bug#631230: apache2 startup fails with missing log directory

2012-02-05 Thread Jean-Michel Vourgère
While I agree there is a problem with missing log directory repporting - see 
https://issues.apache.org/bugzilla/show_bug.cgi?id=29941 - I don't think 
creating this directory automatically would be wise.

For exemple, if your directory is not mounted yet, you'll end up writing in / 
partition and then loosing log data when the mount is finally done.

Therefore, I would either tag that bug wontfix, or alter it so that we push for 
upstream approach, about the error not being verbose enough and hard to 
diagnose.
Do that make sense?



-- 
To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201202051711.31306.jmv_...@nirgal.com



Bug#564722: htdigest -c should bail if the target digest file exists

2012-02-03 Thread Jean-Michel Vourgère
man page says:
-c Create  the  passwdfile.  If  passwdfile  already  exists, it is
  deleted first.

And from older version, one can guess file was effectively truncated: 
fopen(w).
https://svn.apache.org/viewvc/httpd/httpd/trunk/support/htdigest.c?r1=85063r2=85064
(That was 11 years ago...)

So I suggest we just to add APR_TRUNCATE to apr_file_open(APR_WRITE | 
APR_CREATE) to keep the documented behavior.

On the other hand, bailing out really makes sense to me.

Issue should be discussed upstream.

I'm attaching a fix for the inconsistent behaviour bug.
--- support/htdigest.c	2012-02-03 16:18:17.0 +0100
+++ /home/nirgal/htdigest.c	2012-02-03 16:16:42.0 +0100
@@ -212,7 +212,7 @@
 if (argc == 5) {
 if (strcmp(argv[1], -c))
 usage();
-rv = apr_file_open(f, argv[2], APR_WRITE | APR_CREATE,
+rv = apr_file_open(f, argv[2], APR_WRITE | APR_CREATE | APR_TRUNCATE,
APR_OS_DEFAULT, cntxt);
 if (rv != APR_SUCCESS) {
 char errmsg[120];