Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-06-07 Thread Christian COMMARMOND 
tar.gz
>cd nanomsg-1.1.5/ && mkdir build && cd build && cmake
> -DCMAKE_INSTALL_PREFIX:PATH=/usr .. && make && make install
>ldconfig
>cd ../..
>wget https://www.apsis.ch/pound/Pound-3.0c.tgz
>tar -zxvf Pound-3.0c.tgz
>cd Pound-3.0c/build && cmake .. && make
>cd ../..
>Pound-3.0c/build/pound -v
>ldd Pound-3.0c/build/pound
>
> Now, I will have to copy my pound and letencrypt files and test... But
> this will be tomorrow. I will let you know how it goes (i don't have
> anything too complicated, so it should go fine...).
>
> best regards,
>
> Christian COMMARMOND
>
>
>
> Le jeu. 4 juin 2020 à 16:52, Joe Gooch  a
> écrit :
>
>> This Dockerfile works.  I started with nng but it required a newer
>> version of cmake. So I went back to nanomsg. I was unable to find nng or
>> nanomsg in Centos8 or EPEL8 or pretty much anywhere... The Fedora 33 rpm
>> wanted asciidoctor which I couldn't find for CentOS 8 either.
>> Dockerfile
>> ---
>> FROM centos:8
>>
>> RUN yum install -y
>> https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
>> RUN yum install -y dnf-plugins-core
>> RUN yum config-manager --set-enabled PowerTools
>> RUN yum install -y wget cmake make gcc nano pcre-devel libnsl2-devel
>> mbedtls-devel gcc-c++ uthash-devel libyaml-devel gperftools-devel
>> WORKDIR /usr/src
>> RUN wget https://github.com/nanomsg/nanomsg/archive/1.1.5.tar.gz
>> RUN tar -zxvf 1.1.5.tar.gz
>> RUN cd nanomsg-1.1.5/ && mkdir build && cd build && cmake
>> -DCMAKE_INSTALL_PREFIX:PATH=/usr .. && make && make install
>> RUN ldconfig
>> RUN wget https://www.apsis.ch/pound/Pound-3.0c.tgz
>> RUN tar -zxvf Pound-3.0c.tgz
>> RUN cd Pound-3.0c/build && cmake .. && make
>> RUN Pound-3.0c/build/pound -v
>> RUN ldd Pound-3.0c/build/pound
>> --
>>
>>
>> LDD output:
>> linux-vdso.so.1 (0x7ffdd0d8e000)
>> libyaml-0.so.2 => /lib64/libyaml-0.so.2 (0x7fbc88417000)
>> libnanomsg.so.5 => /lib64/libnanomsg.so.5 (0x7fbc881c3000)
>> libpthread.so.0 => /lib64/libpthread.so.0 (0x7fbc87fa3000)
>> libpcreposix.so.0 => /lib64/libpcreposix.so.0 (0x7fbc87da)
>> libtcmalloc.so.4 => /lib64/libtcmalloc.so.4 (0x7fbc879a4000)
>> libmbedcrypto.so.3 => /lib64/libmbedcrypto.so.3
>> (0x7fbc8774)
>> libmbedx509.so.0 => /lib64/libmbedx509.so.0 (0x7fbc8752)
>> libmbedtls.so.12 => /lib64/libmbedtls.so.12 (0x7fbc872f1000)
>> libc.so.6 => /lib64/libc.so.6 (0x7fbc86f2e000)
>> libanl.so.1 => /lib64/libanl.so.1 (0x7fbc86d2a000)
>> librt.so.1 => /lib64/librt.so.1 (0x7fbc86b21000)
>> libnsl.so.2 => /lib64/libnsl.so.2 (0x7fbc86907000)
>> /lib64/ld-linux-x86-64.so.2 (0x7fbc88637000)
>> libpcre.so.1 => /lib64/libpcre.so.1 (0x7fbc86696000)
>> libunwind.so.8 => /lib64/libunwind.so.8 (0x7fbc8647e000)
>> libstdc++.so.6 => /lib64/libstdc++.so.6 (0x7fbc860e9000)
>> libm.so.6 => /lib64/libm.so.6 (0x7fbc85d67000)
>> libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x7fbc85b4f000)
>> libpkcs11-helper.so.1 => /lib64/libpkcs11-helper.so.1
>> (0x7fbc85932000)
>> libz.so.1 => /lib64/libz.so.1 (0x7fbc8571b000)
>> libtirpc.so.3 => /lib64/libtirpc.so.3 (0x7fbc854e8000)
>> libdl.so.2 => /lib64/libdl.so.2 (0x7fbc852e4000)
>> libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x7fbc84e05000)
>> libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2
>> (0x7fbc84bb5000)
>> libkrb5.so.3 => /lib64/libkrb5.so.3 (0x7fbc848c5000)
>> libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x7fbc846a9000)
>>     libcom_err.so.2 => /lib64/libcom_err.so.2 (0x7fbc844a5000)
>> libkrb5support.so.0 => /lib64/libkrb5support.so.0
>> (0x7fbc84294000)
>> libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x7fbc8409)
>> libresolv.so.2 => /lib64/libresolv.so.2 (0x7fbc83e79000)
>> libselinux.so.1 => /lib64/libselinux.so.1 (0x7fbc83c4e000)
>> libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x7fbc839ca000)
>>
>>
>>
>>
>> --
>>
>>
>> Joe
>>
>>
>>
>> From: pound  on behalf of Christian COMMARM

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-06-04 Thread Christian COMMARMOND 
gt; libresolv.so.2 => /lib64/libresolv.so.2 (0x7fbc83e79000)
>     libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fbc83c4e000)
> libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x7fbc839ca000)
>
>
>
>
> --
>
>
> Joe
>
>
>
> From: pound  on behalf of Christian COMMARMOND <
> christian.commarm...@gmail.com>
> Reply-To: reverse proxy and load balancer 
> Date: Thursday, June 4, 2020 at 10:02 AM
> To: reverse proxy and load balancer 
> Subject: Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer -
> v3.0c
>
> Hi,
>
> First, I want to thank you for pound. I use it for several years now, but
> since I had recently compatibility problems, I try to install pound 3 on
> Centos 8.1. But without success so far.
>
> I am confused by website that states that :
> nanomsg This project has largely been superceded by the
> https://github.com/nanomsg/nng project. Users are encouraged to use nng
> if they are able.   1.1.5, released on October 15, 2018. So I downloaded
> nanomsg 1.1.5
> mbedSSL is in fact mbedTLS. At least, the provided link goes on this one...
> tcmalloc is still in gperftools-libs and I did not find it anywhere else.
> pcreposix looks like part of pcre, but impossible to find pcreposix.h in a
> repository (and I found a 2010 book stating it is replaced by ap_regex.h
> ???)
>
> But after installation of all the listed packages (but what I listed
> before), I get this:
>
> [root@Cent8Pound build]# cmake ..
> -- The C compiler identification is GNU 8.3.1
> -- Check for working C compiler: /usr/bin/cc
> -- Check for working C compiler: /usr/bin/cc -- works
> -- Detecting C compiler ABI info
> -- Detecting C compiler ABI info - done
> -- Detecting C compile features
> -- Detecting C compile features - done
> -- Looking for pthread.h
> -- Looking for pthread.h - found
> -- Looking for pthread_create
> -- Looking for pthread_create - not found
> -- Check if compiler accepts -pthread
> -- Check if compiler accepts -pthread - yes
> -- Found Threads: TRUE
> -- Looking for 33 include files stdio.h, ..., mbedtls/error.h
> -- Looking for 33 include files stdio.h, ..., mbedtls/error.h - found
> -- Looking for include file pcreposix.h
> -- Looking for include file pcreposix.h - not found
> -- Looking for include file pcre/pcreposix.h
> -- Looking for include file pcre/pcreposix.h - not found
> -- Looking for include file regex.h
> -- Looking for include file regex.h - found
> -- Looking for include file stdarg.h
> -- Looking for include file stdarg.h - found
> -- Configuring done
> -- Generating done
> -- Build files have been written to: /root/Pound-3.0c/build
>
>
> [root@Cent8Pound build]# make
> Scanning dependencies of target pound
> [ 16%] Building C object CMakeFiles/pound.dir/src/backend.c.o
> [ 33%] Building C object CMakeFiles/pound.dir/src/config.c.o
> [ 50%] Building C object CMakeFiles/pound.dir/src/http.c.o
> [ 66%] Building C object CMakeFiles/pound.dir/src/pound.c.o
> [ 83%] Building C object CMakeFiles/pound.dir/src/util.c.o
> [100%] Linking C executable pound
> CMakeFiles/pound.dir/src/config.c.o: In function `get_ciphers':
> config.c:(.text+0x1dcd): undefined reference to
> `mbedtls_ssl_get_ciphersuite_id'
> config.c:(.text+0x1f8c): undefined reference to
> `mbedtls_ssl_get_ciphersuite_id'
> CMakeFiles/pound.dir/src/config.c.o: In function `get_one':
> config.c:(.text+0x22d0): undefined reference to `mbedtls_x509_crt_init'
> config.c:(.text+0x22e6): undefined reference to
> `mbedtls_x509_crt_parse_file'
> config.c:(.text+0x2315): undefined reference to `mbedtls_pk_init'
> config.c:(.text+0x2337): undefined reference to `mbedtls_pk_parse_keyfile'
> config.c:(.text+0x23e6): undefined reference to `mbedtls_pk_check_pair'
> CMakeFiles/pound.dir/src/config.c.o: In function `get_https':
> config.c:(.text+0x30f1): undefined reference to `mbedtls_ssl_config_init'
> config.c:(.text+0x30ff): undefined reference to `mbedtls_ctr_drbg_random'
> config.c:(.text+0x3107): undefined reference to `mbedtls_ssl_conf_rng'
> config.c:(.text+0x3122): undefined reference to
> `mbedtls_ssl_config_defaults'
> config.c:(.text+0x3133): undefined reference to
> `mbedtls_ssl_conf_alpn_protocols'
> config.c:(.text+0x3144): undefined reference to `mbedtls_ssl_conf_authmode'
> config.c:(.text+0x369e): undefined reference to
> `mbedtls_ssl_conf_ciphersuites'
> config.c:(.text+0x36dd): undefined reference to `mbedtls_ssl_conf_sni'
> config.c:(.text+0x3704): undefined reference to `mbedtls_ssl_conf_own_cert'
> config.c:(.text+0x3739): undefined reference to `mbedtls_ssl_conf_ca_chain'
> config.c:(.text+0x374f): undefined reference to
> `mbedtls_ssl_conf_read_timeout'
>

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-06-04 Thread Joe Gooch 
This Dockerfile works.  I started with nng but it required a newer version of 
cmake. So I went back to nanomsg. I was unable to find nng or nanomsg in 
Centos8 or EPEL8 or pretty much anywhere... The Fedora 33 rpm wanted 
asciidoctor which I couldn't find for CentOS 8 either.
Dockerfile
---
FROM centos:8

RUN yum install -y 
https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
RUN yum install -y dnf-plugins-core
RUN yum config-manager --set-enabled PowerTools
RUN yum install -y wget cmake make gcc nano pcre-devel libnsl2-devel 
mbedtls-devel gcc-c++ uthash-devel libyaml-devel gperftools-devel
WORKDIR /usr/src
RUN wget https://github.com/nanomsg/nanomsg/archive/1.1.5.tar.gz
RUN tar -zxvf 1.1.5.tar.gz
RUN cd nanomsg-1.1.5/ && mkdir build && cd build && cmake 
-DCMAKE_INSTALL_PREFIX:PATH=/usr .. && make && make install
RUN ldconfig
RUN wget https://www.apsis.ch/pound/Pound-3.0c.tgz
RUN tar -zxvf Pound-3.0c.tgz
RUN cd Pound-3.0c/build && cmake .. && make
RUN Pound-3.0c/build/pound -v
RUN ldd Pound-3.0c/build/pound
--


LDD output:
linux-vdso.so.1 (0x7ffdd0d8e000)
libyaml-0.so.2 => /lib64/libyaml-0.so.2 (0x7fbc88417000)
libnanomsg.so.5 => /lib64/libnanomsg.so.5 (0x7fbc881c3000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x7fbc87fa3000)
libpcreposix.so.0 => /lib64/libpcreposix.so.0 (0x7fbc87da)
libtcmalloc.so.4 => /lib64/libtcmalloc.so.4 (0x7fbc879a4000)
libmbedcrypto.so.3 => /lib64/libmbedcrypto.so.3 (0x7fbc8774)
libmbedx509.so.0 => /lib64/libmbedx509.so.0 (0x7fbc8752)
libmbedtls.so.12 => /lib64/libmbedtls.so.12 (0x7fbc872f1000)
libc.so.6 => /lib64/libc.so.6 (0x7fbc86f2e000)
libanl.so.1 => /lib64/libanl.so.1 (0x7fbc86d2a000)
librt.so.1 => /lib64/librt.so.1 (0x7fbc86b21000)
libnsl.so.2 => /lib64/libnsl.so.2 (0x7fbc86907000)
/lib64/ld-linux-x86-64.so.2 (0x7fbc88637000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x7fbc86696000)
libunwind.so.8 => /lib64/libunwind.so.8 (0x7fbc8647e000)
libstdc++.so.6 => /lib64/libstdc++.so.6 (0x7fbc860e9000)
libm.so.6 => /lib64/libm.so.6 (0x7fbc85d67000)
libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x7fbc85b4f000)
libpkcs11-helper.so.1 => /lib64/libpkcs11-helper.so.1 
(0x7fbc85932000)
libz.so.1 => /lib64/libz.so.1 (0x7fbc8571b000)
libtirpc.so.3 => /lib64/libtirpc.so.3 (0x7fbc854e8000)
libdl.so.2 => /lib64/libdl.so.2 (0x7fbc852e4000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x7fbc84e05000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x7fbc84bb5000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x7fbc848c5000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x7fbc846a9000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x7fbc844a5000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x7fbc84294000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x7fbc8409)
libresolv.so.2 => /lib64/libresolv.so.2 (0x7fbc83e79000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x7fbc83c4e000)
libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x7fbc839ca000)




--

 
Joe



From: pound  on behalf of Christian COMMARMOND 

Reply-To: reverse proxy and load balancer 
Date: Thursday, June 4, 2020 at 10:02 AM
To: reverse proxy and load balancer 
Subject: Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

Hi, 

First, I want to thank you for pound. I use it for several years now, but since 
I had recently compatibility problems, I try to install pound 3 on Centos 8.1. 
But without success so far.

I am confused by website that states that :
nanomsg This project has largely been superceded by the 
https://github.com/nanomsg/nng project. Users are encouraged to use nng if they 
are able.   1.1.5, released on October 15, 2018. So I downloaded nanomsg 1.1.5
mbedSSL is in fact mbedTLS. At least, the provided link goes on this one...
tcmalloc is still in gperftools-libs and I did not find it anywhere else.
pcreposix looks like part of pcre, but impossible to find pcreposix.h in a 
repository (and I found a 2010 book stating it is replaced by ap_regex.h ???) 

But after installation of all the listed packages (but what I listed before), I 
get this:

[root@Cent8Pound build]# cmake ..
-- The C compiler identification is GNU 8.3.1
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Looking for pthread.h
-- Looking for pthread.h - found
-- Looking fo

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-06-04 Thread Christian COMMARMOND 
Hi,

First, I want to thank you for pound. I use it for several years now, but
since I had recently compatibility problems, I try to install pound 3 on
Centos 8.1. But without success so far.

I am confused by website that states that :
nanomsg This project has largely been superceded by the *nng*
 project. Users are encouraged to use *nng*
if they are able.   1.1.5, released on October 15, 2018. So I downloaded
nanomsg 1.1.5
mbedSSL is in fact mbedTLS. At least, the provided link goes on this one...
tcmalloc is still in gperftools-libs and I did not find it anywhere else.
pcreposix looks like part of pcre, but impossible to find pcreposix.h in a
repository (and I found a 2010 book stating it is replaced by ap_regex.h
???)

But after installation of all the listed packages (but what I listed
before), I get this:

[root@Cent8Pound build]# cmake ..
-- The C compiler identification is GNU 8.3.1
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Looking for pthread.h
-- Looking for pthread.h - found
-- Looking for pthread_create
-- Looking for pthread_create - not found
-- Check if compiler accepts -pthread
-- Check if compiler accepts -pthread - yes
-- Found Threads: TRUE
-- Looking for 33 include files stdio.h, ..., mbedtls/error.h
-- Looking for 33 include files stdio.h, ..., mbedtls/error.h - found
-- Looking for include file pcreposix.h
-- Looking for include file pcreposix.h - not found
-- Looking for include file pcre/pcreposix.h
-- Looking for include file pcre/pcreposix.h - not found
-- Looking for include file regex.h
-- Looking for include file regex.h - found
-- Looking for include file stdarg.h
-- Looking for include file stdarg.h - found
-- Configuring done
-- Generating done
-- Build files have been written to: /root/Pound-3.0c/build


[root@Cent8Pound build]# make
Scanning dependencies of target pound
[ 16%] Building C object CMakeFiles/pound.dir/src/backend.c.o
[ 33%] Building C object CMakeFiles/pound.dir/src/config.c.o
[ 50%] Building C object CMakeFiles/pound.dir/src/http.c.o
[ 66%] Building C object CMakeFiles/pound.dir/src/pound.c.o
[ 83%] Building C object CMakeFiles/pound.dir/src/util.c.o
[100%] Linking C executable pound
CMakeFiles/pound.dir/src/config.c.o: In function `get_ciphers':
config.c:(.text+0x1dcd): undefined reference to
`mbedtls_ssl_get_ciphersuite_id'
config.c:(.text+0x1f8c): undefined reference to
`mbedtls_ssl_get_ciphersuite_id'
CMakeFiles/pound.dir/src/config.c.o: In function `get_one':
config.c:(.text+0x22d0): undefined reference to `mbedtls_x509_crt_init'
config.c:(.text+0x22e6): undefined reference to
`mbedtls_x509_crt_parse_file'
config.c:(.text+0x2315): undefined reference to `mbedtls_pk_init'
config.c:(.text+0x2337): undefined reference to `mbedtls_pk_parse_keyfile'
config.c:(.text+0x23e6): undefined reference to `mbedtls_pk_check_pair'
CMakeFiles/pound.dir/src/config.c.o: In function `get_https':
config.c:(.text+0x30f1): undefined reference to `mbedtls_ssl_config_init'
config.c:(.text+0x30ff): undefined reference to `mbedtls_ctr_drbg_random'
config.c:(.text+0x3107): undefined reference to `mbedtls_ssl_conf_rng'
config.c:(.text+0x3122): undefined reference to
`mbedtls_ssl_config_defaults'
config.c:(.text+0x3133): undefined reference to
`mbedtls_ssl_conf_alpn_protocols'
config.c:(.text+0x3144): undefined reference to `mbedtls_ssl_conf_authmode'
config.c:(.text+0x369e): undefined reference to
`mbedtls_ssl_conf_ciphersuites'
config.c:(.text+0x36dd): undefined reference to `mbedtls_ssl_conf_sni'
config.c:(.text+0x3704): undefined reference to `mbedtls_ssl_conf_own_cert'
config.c:(.text+0x3739): undefined reference to `mbedtls_ssl_conf_ca_chain'
config.c:(.text+0x374f): undefined reference to
`mbedtls_ssl_conf_read_timeout'
CMakeFiles/pound.dir/src/http.c.o: In function `c_read':
http.c:(.text+0x1d35): undefined reference to `mbedtls_ssl_read'
CMakeFiles/pound.dir/src/http.c.o: In function `c_write':
http.c:(.text+0x1f52): undefined reference to `mbedtls_ssl_write'
CMakeFiles/pound.dir/src/http.c.o: In function `c_close':
http.c:(.text+0x1fd5): undefined reference to `mbedtls_ssl_write'
http.c:(.text+0x1fe4): undefined reference to `mbedtls_ssl_close_notify'
http.c:(.text+0x2005): undefined reference to `mbedtls_ssl_free'
http.c:(.text+0x2011): undefined reference to `mbedtls_net_free'
CMakeFiles/pound.dir/src/http.c.o: In function `thr_http':
http.c:(.text+0x21da): undefined reference to `mbedtls_net_init'
http.c:(.text+0x21f5): undefined reference to `mbedtls_ssl_init'
http.c:(.text+0x220f): undefined reference to `mbedtls_ssl_setup'
http.c:(.text+0x2223): undefined reference to `mbedtls_net_recv_timeout'
http.c:(.text+0x222d): undefined reference to `mbedtls_net_send'
http.c:(.text+0x2235): undefined reference to `mbedtls_ssl_set_bio'

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-05-05 Thread Carsten Leonhardt 
Hi Robert,

I found more things to report:

The setuid call needs to come after the setgid call, otherwise the right
to change gid is lost when the uid is changed away from root. So the
lines 117-121 and 122-126 need to be switched in src/pound.c.


With the configuration below, pound doesn't answer requests but uses
100% CPU. http://localhost:80 works, but http://localhost:8080 doesn't.

Regards,

Carsten

--8<-8<--8<--
Global:
  User: "_pound"
  Group:"_pound"

Backends:
  - 
Address: 127.0.0.1
Port: 80

HTTPListeners:
  - Address: 127.0.0.1
Port: 8080
Services:
  - Backends:
- *be

HTTPSListeners:
--8<-8<--8<--

-- 
pound mailing list
pound@apsis.ch
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-05-04 Thread Robert Segall 
Hallo Carsten

Many thanks for the feedback. We'll fix the various typos in the next
release.

As to HTTPSListeners: the section is indeed required, but it my be
empty. Not much of a hardship I think.

On Mon, 2020-05-04 at 16:11 +0200, Carsten Leonhardt wrote:
> Hi,
> 
> sorry, the previous mail wasn't finished...
> 
> Two more things:
> 
> 
> With a simple config file without HTTPSListeners pound refuses to
> start with message "Missing HTTPSListeners section".
> 
> 
> The following part in the manpage seems to be missing a negation:
> 
> "the private key should probably be password-protected, as Pound
> starts
> as a daemon and cannot ask for the password at start-up time"
> 
> Shouldn't that be "... should probably _not_ be password-protected
> ..."?
> 
> Regards,
> 
> Carsten
> 
-- 
Robert Segall
Apsis GmbH
Postfach, Uetikon am See, CH-8707
Tel: +41-32-512 30 19


-- 
pound mailing list
pound@apsis.ch
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-05-04 Thread Carsten Leonhardt 
Hi,

sorry, the previous mail wasn't finished...

Two more things:


With a simple config file without HTTPSListeners pound refuses to
start with message "Missing HTTPSListeners section".


The following part in the manpage seems to be missing a negation:

"the private key should probably be password-protected, as Pound starts
as a daemon and cannot ask for the password at start-up time"

Shouldn't that be "... should probably _not_ be password-protected ..."?

Regards,

Carsten

-- 
pound mailing list
pound@apsis.ch
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-05-04 Thread Carsten Leonhardt 
Hi,

two more things:

with a simple config file without HTTPSListeners

> Regards,
>
> Carsten

-- 
pound mailing list
pound@apsis.ch
https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch

Re: [pound] ANNOUNCE: Pound - reverse proxy and load balancer - v3.0c

2020-05-04 Thread Carsten Leonhardt 
Hi Robert,

here's some things I noticed while doing initial work on packaging pound
v3 for Debian:

Compiling without libpcre fails at the linker stage, the mbedtls
libraries aren't passed on the command line. See attached log.

The man page references pound.cfg and has a typo, fix:

s/pound.cfg/pound.yaml/
s/negociation/negotiation/

Is there a reason why you include uthash in the tarball instead of going
the usual route, like with all other dependencies?

Regards,

Carsten

cd build && cmake ..
Re-run cmake no build system arguments
-- The C compiler identification is GNU 9.3.0
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Looking for pthread.h
-- Looking for pthread.h - found
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Failed
-- Check if compiler accepts -pthread
-- Check if compiler accepts -pthread - yes
-- Found Threads: TRUE  
-- Looking for 33 include files stdio.h, ..., mbedtls/error.h
-- Looking for 33 include files stdio.h, ..., mbedtls/error.h - found
-- Looking for include file pcreposix.h
-- Looking for include file pcreposix.h - not found
-- Looking for include file pcre/pcreposix.h
-- Looking for include file pcre/pcreposix.h - not found
-- Looking for include file regex.h
-- Looking for include file regex.h - found
-- Looking for include file stdarg.h
-- Looking for include file stdarg.h - found
-- Configuring done
-- Generating done
-- Build files have been written to: /build/pound-3.0~c/build
make[1]: Leaving directory '/build/pound-3.0~c'
   debian/rules override_dh_auto_build
make[1]: Entering directory '/build/pound-3.0~c'
cd build && make
make[2]: Entering directory '/build/pound-3.0~c/build'
/usr/bin/cmake -S"/build/pound-3.0~c" -B"/build/pound-3.0~c/build" 
--check-build-system CMakeFiles/Makefile.cmake 0
/usr/bin/cmake -E cmake_progress_start "/build/pound-3.0~c/build/CMakeFiles" 
"/build/pound-3.0~c/build/CMakeFiles/progress.marks"
make -f CMakeFiles/Makefile2 all
make[3]: Entering directory '/build/pound-3.0~c/build'
make -f CMakeFiles/pound.dir/build.make CMakeFiles/pound.dir/depend
make[4]: Entering directory '/build/pound-3.0~c/build'
cd "/build/pound-3.0~c/build" && /usr/bin/cmake -E cmake_depends "Unix 
Makefiles" "/build/pound-3.0~c" "/build/pound-3.0~c" "/build/pound-3.0~c/build" 
"/build/pound-3.0~c/build" 
"/build/pound-3.0~c/build/CMakeFiles/pound.dir/DependInfo.cmake" --color=
Dependee "/build/pound-3.0~c/build/CMakeFiles/pound.dir/DependInfo.cmake" is 
newer than depender 
"/build/pound-3.0~c/build/CMakeFiles/pound.dir/depend.internal".
Dependee "/build/pound-3.0~c/build/CMakeFiles/CMakeDirectoryInformation.cmake" 
is newer than depender 
"/build/pound-3.0~c/build/CMakeFiles/pound.dir/depend.internal".
Scanning dependencies of target pound
make[4]: Leaving directory '/build/pound-3.0~c/build'
make -f CMakeFiles/pound.dir/build.make CMakeFiles/pound.dir/build
make[4]: Entering directory '/build/pound-3.0~c/build'
[ 16%] Building C object CMakeFiles/pound.dir/src/backend.c.o
/usr/bin/cc  -I"/build/pound-3.0~c/include"  -g -O2 
-fdebug-prefix-map=/build/pound-3.0~c=. -fstack-protector-strong -Wformat 
-Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-unused-result 
-Wno-cast-qual -Wno-discarded-qualifiers -D_GNU_SOURCE   -pthread -o 
CMakeFiles/pound.dir/src/backend.c.o   -c "/build/pound-3.0~c/src/backend.c"
[ 33%] Building C object CMakeFiles/pound.dir/src/config.c.o
/usr/bin/cc  -I"/build/pound-3.0~c/include"  -g -O2 
-fdebug-prefix-map=/build/pound-3.0~c=. -fstack-protector-strong -Wformat 
-Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-unused-result 
-Wno-cast-qual -Wno-discarded-qualifiers -D_GNU_SOURCE   -pthread -o 
CMakeFiles/pound.dir/src/config.c.o   -c "/build/pound-3.0~c/src/config.c"
[ 50%] Building C object CMakeFiles/pound.dir/src/http.c.o
/usr/bin/cc  -I"/build/pound-3.0~c/include"  -g -O2 
-fdebug-prefix-map=/build/pound-3.0~c=. -fstack-protector-strong -Wformat 
-Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-unused-result 
-Wno-cast-qual -Wno-discarded-qualifiers -D_GNU_SOURCE   -pthread -o 
CMakeFiles/pound.dir/src/http.c.o   -c "/build/pound-3.0~c/src/http.c"
[ 66%] Building C object CMakeFiles/pound.dir/src/pound.c.o
/usr/bin/cc  -I"/build/pound-3.0~c/include"  -g -O2 
-fdebug-prefix-map=/build/pound-3.0~c=. -fstack-protector-strong -Wformat 
-Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-unused-result 
-Wno-cast-qual -Wno-discarded-qualifiers -D_GNU_SOURCE   -pthread -o 
CMakeFiles/pound.dir/src/pound.c.o   -c "/build/pound-3.0~c/src/pound.c"
[ 83%] Building C object CMakeFiles/pound.dir/src/util.c.o
/usr/bin/cc  -I"/build/pound-3.0~c/include"  -g -O2 
-fdebug-prefix-map=/build/pound-3.0~c=. -fstack-protector-strong -Wformat 
-Werror=format-security