Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
With 7 +1 votes and no objections, the vote has PASSED. Thank you all who took the time to test this! I will start the release work. Kind Regards, Stefan > Am 19.12.2021 um 17:56 schrieb Steffen : > > +1 for Windows release. > > Cheers, Steffen > >> Op 16 dec. 2021 om 15:03 heeft Stefan Eissing het >> volgende geschreven: >> >> Hi all, >> >> Please find below the proposed release tarball and signatures: >> >> https://dist.apache.org/repos/dist/dev/httpd/ >> >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz >> >> The SVN candidate source is found at tags/candidate-2.4.52-rc1. >> >> Kind Regards, >> Stefan >
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
+1 for Windows release. Cheers, Steffen > Op 16 dec. 2021 om 15:03 heeft Stefan Eissing het > volgende geschreven: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.52-rc1. > > Kind Regards, > Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Thu, Dec 16, 2021 at 3:03 PM Stefan Eissing wrote: > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! All good on Debian 10, 11 & 12. buildconf and configure.in will probably need an update to please latest autotools from Debian 12, not for this release though. Also gcc-11 warns about the usage of APR_RINGs in apr-util-1.7.x brigades, possibly something to look at for the next APR(s) releases. Thanks Stefan and all the team for this release!
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. +1 to release and thanks a bunch for RM! I didn't have time to do the full range of my usual builds and tests. Nevertheless: ! KEYS maybe missing (see other mail) - Sigs and hashes OK - contents of tarballs identical - contents of tag and tarballs identical except for expected deltas Built on - Solaris 10 Sparc as 32 Bit Binaries - SLES 11+12+15 (64 Bits) - RHEL 6+7+8 (64 Bits) For all platforms built - with module set all plus proxy_fdpass plus proxy_http2 - using APR/APU from the 2.4.51 deps tarball (see separate message, why for me the 2.4.52 tarball didn't work) - OpenSSL linked statically - using external libraries - expat 2.4.1 - pcre 8.45 - lua 5.4.3 (compiled with LUA_COMPAT_MODULE) - libxml2 2.9.12 - libnghttp2 1.46.0 - brotli 1.0.9 - curl 7.80.0 - jansson 2.14 - libldap 2.6.0 - openssl 1.1.1m - Tool chain: - platform gcc except on Solaris (gcc 9.3.0 Solaris 10) - CFLAGS: -O2 -g -Wall -fno-strict-aliasing - on Solaris additionally -mpcu=v9, -D_XOPEN_SOURCE, -D_XOPEN_SOURCE_EXTENDED=1, -D__EXTENSIONS__ and -D_XPG6 Tested for - SLES 11+12+15 - RHEL 6+7+8 - Solaris 10 Sparc - MPMs prefork, worker, event - log level trace8 - Perl client bundle build against OpenSSL 1.1.1g plus patches, ´3.0.0, 1.1.0l, 1.0.2u and 0.9.8zh All of these tests passed. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Le 16/12/2021 à 15:03, Stefan Eissing a écrit : Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [X] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan +1 ; Tested only with event. Tested with: Linux pop-os 5.15.5 gcc (Ubuntu 10.3.0-1ubuntu1) 10.3.0 OpenSSL 1.1.1j 16 Feb 2021 libssl-dev 1.1.1j libbrotli-dev 1.0.9 libjansson-dev 2.13.1 libnghttp2-dev 1.43.0 libpcre2-dev 10.36 liblua5.3-dev 5.3.3 libsystemd-dev 247.3 libldap2-dev 2.4.57+dfsg libxml2-dev 2.9.10+dfsg libcurl4-openssl-dev 7.74.0 Thx a lot Stefan for RM. CJ
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
+1 CentOS 6 CentOS 7 AlmaLinux 8 Ubuntu 20.04 Regards, Cory McIntire PO – cPanel Security Team Release Manager – EasyApache cPanel / WebPros From: Stefan Eissing Date: Thursday, December 16, 2021 at 8:03 AM To: dev@httpd.apache.org Subject: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52 Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Am 17.12.2021 um 16:45 schrieb Stefan Eissing: Am 17.12.2021 um 16:22 schrieb Rainer Jung : At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error for APR from the deps tarball due to that configure being created with autoconf 2.70 instead of 2.69 used for 2.4.51: configure: error: could not determine the string function for int64_t It comes from defining some things once in conftest.c and again in the included confdefs.h. The problem seems to be known and at least some changes were added to the 1.7.x APR branch, but we didn't have a release there for a long time ... :( Some pointers: https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html https://github.com/apache/apr/pull/25 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 fixes this, or whether the httpd part of configure runs into the same problem. Thanks Rainer. There are problems with the APR build on macOS as well. A new release would be welcome. Since we do not release the -dep tarballs as part of Apache httpd, this should not be a stopper. There were historically added for convenience on the voting. I think we should change our release scripts to no longer include them, unless we are sure they run correctly everywhere. Kind Regards, Stefan Agreed. After replacing APR/APU with the ones from the 51 deps tarball, configure goes through. So for me there's no configure problem in the main tarball, at least not on Linux. Regards, Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
> Am 17.12.2021 um 16:22 schrieb Rainer Jung : > > At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error > for APR from the deps tarball due to that configure being created with > autoconf 2.70 instead of 2.69 used for 2.4.51: > > configure: error: could not determine the string function for int64_t > > It comes from defining some things once in conftest.c and again in the > included confdefs.h. > > The problem seems to be known and at least some changes were added to the > 1.7.x APR branch, but we didn't have a release there for a long time ... :( > > Some pointers: > > https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html > > https://github.com/apache/apr/pull/25 > > https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 > > I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 > fixes this, or whether the httpd part of configure runs into the same problem. Thanks Rainer. There are problems with the APR build on macOS as well. A new release would be welcome. Since we do not release the -dep tarballs as part of Apache httpd, this should not be a stopper. There were historically added for convenience on the voting. I think we should change our release scripts to no longer include them, unless we are sure they run correctly everywhere. Kind Regards, Stefan > > Regards, > > Rainer > > Am 16.12.2021 um 15:03 schrieb Stefan Eissing: >> Hi all, >> Please find below the proposed release tarball and signatures: >> https://dist.apache.org/repos/dist/dev/httpd/ >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [ ] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz >> The SVN candidate source is found at tags/candidate-2.4.52-rc1. >> Kind Regards, >> Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
At least on Linux (SLES 11/12/15, RHEL 6/7/8) I run into a configure error for APR from the deps tarball due to that configure being created with autoconf 2.70 instead of 2.69 used for 2.4.51: configure: error: could not determine the string function for int64_t It comes from defining some things once in conftest.c and again in the included confdefs.h. The problem seems to be known and at least some changes were added to the 1.7.x APR branch, but we didn't have a release there for a long time ... :( Some pointers: https://www.mail-archive.com/bug-autoconf@gnu.org/msg04695.html https://github.com/apache/apr/pull/25 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97998 I will check, whether combining 2.4.52 with the deps tarball from 2.4.52 fixes this, or whether the httpd part of configure runs into the same problem. Regards, Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On 12/16/21 15:03, Stefan Eissing wrote: > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [ ] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > The SVN candidate source is found at tags/candidate-2.4.52-rc1. > > Kind Regards, > Stefan > +1 for release, works fine on Fedora 35, OpenBSD 7.0 and Debian 11. Regards Giovanni OpenPGP_signature Description: OpenPGP digital signature
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Fri, 17 Dec 2021, 10:56 Ruediger Pluem, wrote: > > > On 12/17/21 10:54 AM, Joe Orton wrote: > > On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > >> I would like to call a VOTE over the next few days to release > >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > >> [X] +1: It's not just good, it's good enough! > >> [ ] +0: Let's have a talk. > >> [ ] -1: There's trouble in paradise. Here's what's wrong. > >> > >> The computed digests of the tarball up for vote are: > >> sha256: > 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > >> sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz > > > > Thanks for RMing, Stefan. > > > > +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. > > Out of curiosity: On RHEL 9 Beta it works and passes tests against the OS > provided OpenSSL 3? > To be pedantic I am testing against a RHEL9 development snapshot rather than "Beta" though they are quite close, but, yup the tests passed. Regards, Joe >
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Thanks for the cool team effort and your work as RM! I lost track about the correct expectation but wanted to note, that https://dist.apache.org/repos/dist/dev/httpd/ does not contain a KEYS file. IMHO it did for the previous two releases, but maybe the requirements changed. Thanks! Rainer Am 16.12.2021 um 15:03 schrieb Stefan Eissing: Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On 12/17/21 10:54 AM, Joe Orton wrote: > On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: >> I would like to call a VOTE over the next few days to release >> this candidate tarball httpd-2.4.52-rc1 as 2.4.52: >> [X] +1: It's not just good, it's good enough! >> [ ] +0: Let's have a talk. >> [ ] -1: There's trouble in paradise. Here's what's wrong. >> >> The computed digests of the tarball up for vote are: >> sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f >> *httpd-2.4.52-rc1.tar.gz >> sha512: >> b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 >> *httpd-2.4.52-rc1.tar.gz > > Thanks for RMing, Stefan. > > +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. Out of curiosity: On RHEL 9 Beta it works and passes tests against the OS provided OpenSSL 3? Regards Rüdiger
Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise. Here's what's wrong. > > The computed digests of the tarball up for vote are: > sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f > *httpd-2.4.52-rc1.tar.gz > sha512: > b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 > *httpd-2.4.52-rc1.tar.gz Thanks for RMing, Stefan. +1 for release, passes test suite on Fedora 35, RHEL 8 and 9 Beta. Regards, Joe
[VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52
Hi all, Please find below the proposed release tarball and signatures: https://dist.apache.org/repos/dist/dev/httpd/ I would like to call a VOTE over the next few days to release this candidate tarball httpd-2.4.52-rc1 as 2.4.52: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ] -1: There's trouble in paradise. Here's what's wrong. The computed digests of the tarball up for vote are: sha256: 296c74a8adde1a8acd6617b21fc3d19719ff4fa39319b2bdbd898aca4d5df97f *httpd-2.4.52-rc1.tar.gz sha512: b9012096d6658f7d34a3c655eac31b39ffd439c11de6f3e6e9f309d55f4186a4fb26134eb97522e416ae8ca10ed008a14e96fa01a3e3105d9e547f72e2dc3bc2 *httpd-2.4.52-rc1.tar.gz The SVN candidate source is found at tags/candidate-2.4.52-rc1. Kind Regards, Stefan