Re: PHP5.3.6

2011-04-17 Thread Pierre Joye
On Sat, Apr 16, 2011 at 8:54 PM, Akins, Brian brian.ak...@turner.com wrote: On 4/15/11 6:11 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 15.04.2011 23:01, schrieb Jeff Trawick: FastCGI is a way to get us out of all sorts of dark alleys; let's be sure to keep it in mind as one of the

RE: Cannot build httpd on Win 7 + VS2010

2011-04-17 Thread bswen
I also tried the method suggested by http://www.blackdot.be/?inc=apache/knowledge/tutorials/x64 that uses perl cvtdsp.pl -2005 to first make VS2005 project files, but all the *.vcproj files cannot converted to VS2010. Does anybody know the reason? (VS2008 had no problem, though.)

Re: SSL related DoS

2011-04-17 Thread Stefan Fritsch
On Sat, 16 Apr 2011, Eric Covener wrote: would mod_reqtimeout step in after too many renegotiations had eaten too much wall time? Whenever mod_ssl reads data from the client, mod_reqtimeout will check the configured timeouts. It is possible that the data sent during reneg may prevent the

Re: SSL related DoS

2011-04-17 Thread Jeff Trawick
On Sat, Apr 16, 2011 at 3:39 PM, Daniel Ruggeri drugg...@primary.net wrote: On 4/16/2011 11:52 AM, Chris Hill wrote: Dear Apache httpd dev list, ... The reason why I insist in this is that the world has come to depend on HTTP/SOAP over SSL (and Apache/OpenSSL are probably the most popular

[PATCH] check_forensic re tweak

2011-04-17 Thread Joe Schaefer
With mod_unique_id installed there's the possibility of having a - in the forensic id, so here's a minor patch to ensure check_forensic does the right thing. Index: support/check_forensic === --- support/check_forensic(revision

mod_fcgid can kill all the services on the server via kill -15 -1

2011-04-17 Thread Igor Seletskiy
Hello, There is a very interesting, and quite a rare bug in mod_fcgid. It is easy to reproduce if you can cause fork to fail (which can be done with CloudLinux -- if anyone wants to replicate it). *Here is how it works: * mod_fcgid tries to spawn a new process (proc_spawn_process in

Is this a test framework bug?

2011-04-17 Thread Torsten Förtsch
Hi, t/modules/proxy.t of the test framework contains at line 32 the following 2 tests: $r = GET(/reverse/modules/cgi/nph-102.pl); ok t_cmp($r-code, 200, reverse proxy to nph-102); ok t_cmp($r-content, this is nph-stdout, reverse proxy 102 response); The test fails here and I think the

httpd-framework: a few forgotten need_module()s

2011-04-17 Thread Torsten Förtsch
Hi, t/apache/if_sections.t needs the proxy module, t/modules/filter.t needs mod_case_filter. Torsten Förtsch -- Need professional modperl support? Hire me! (http://foertsch.name) Like fantasy? http://kabatinte.net Index: t/apache/if_sections.t

Re: ap_read_config in 2.3.11

2011-04-17 Thread Torsten Förtsch
On Tuesday, April 12, 2011 18:24:28 William A. Rowe Jr. wrote: Suggestion - an EXEC_ON_READ 'DynamicModulesMax' directive, which would let us conf_vector_length = total_modules + dyn_modules_max; after the read_config, and finally lock down conf_vector_length = total_modules; at the end of

Re: SSL related DoS

2011-04-17 Thread Chris Hill
Yes, disabled by default now. My point was just make sure it did not come back again, at least not without a config parameter to easily disable/enable. On Sun, Apr 17, 2011 at 8:41 AM, Jeff Trawick traw...@gmail.com wrote: On Sat, Apr 16, 2011 at 3:39 PM, Daniel Ruggeri drugg...@primary.net

Re: SSL related DoS

2011-04-17 Thread Chris Hill
Bill, that is already good, but then the question still remains of whether there is something that can be done disable/control/detect too many handshakes from any given client (new or renegotiated). I'd love to understand whether this is even a reasonable thing discuss, as I do not have knowledge

Re: svn commit: r1094174 - in /httpd/httpd: branches/2.2.x/CHANGES branches/2.2.x/STATUS branches/2.2.x/modules/arch/win32/mod_win32.c trunk/CHANGES

2011-04-17 Thread Guenter Knauf
Am 17.04.2011 18:38, schrieb fua...@apache.org: Author: fuankg Date: Sun Apr 17 16:38:42 2011 New Revision: 1094174 URL: http://svn.apache.org/viewvc?rev=1094174view=rev Log: Added shebang check for '! so that .vbs scripts can work as CGI. Backport of r1054347 from trunk; reviewed by wrowe,

[PATCH] Add TLS-SRP (RFC 5054) support to mod_ssl

2011-04-17 Thread Quinn Slack
Posted at: https://issues.apache.org/bugzilla/show_bug.cgi?id=51075 TLS-SRP (RFC 5054)[1] is an implementation of the Secure Remote Password (SRP)[2] protocol as a key exchange method for TLS. It uses a shared secret derived from a user's password to supplement or replace third-party certificates

Re: [PATCH] Add TLS-SRP (RFC 5054) support to mod_ssl

2011-04-17 Thread Andrew Oliver
This is excellent news! On Apr 17, 2011 5:48 PM, Quinn Slack s...@cs.stanford.edu wrote: Posted at: https://issues.apache.org/bugzilla/show_bug.cgi?id=51075 TLS-SRP (RFC 5054)[1] is an implementation of the Secure Remote Password (SRP)[2] protocol as a key exchange method for TLS. It uses a

Re: mod_fcgid can kill all the services on the server via kill -15 -1

2011-04-17 Thread pqf
Hi, all Another question, does proc_wait_process() should update procnode-proc_id to 0 too? or else mod_fcgid may send a signal to another irrelevant process while apache is shutting down? I don't follow up mod_fcgid for a while, I just took a glance, maybe it's updated somewhere else? By the