Re: PATCH mod_fcgid compile fails

2011-10-06 Thread stefan novak
sorry for my noise. just cleaned up my build tree and tried from the beginning. no more compile errors. thx for your help Stefan

Re: Improving SSL config

2011-10-06 Thread Rainer Jung
Hi Bill, On 02.10.2011 09:07, William A. Rowe Jr. wrote: > On 9/29/2011 9:31 AM, Rainer Jung wrote: >> In light of the TLS 1.0 CBC attack (aka BEAST, CVE-2011-3389) I suggest >> we update our SSL configuration analogous to what's in trunk. >> >> - Choose a better default SSLCipherSuite >> - Add SS

Re: Improving SSL config

2011-10-06 Thread Rainer Jung
On 06.10.2011 10:58, Rainer Jung wrote: > Hi Bill, > > On 02.10.2011 09:07, William A. Rowe Jr. wrote: >> On 9/29/2011 9:31 AM, Rainer Jung wrote: >>> In light of the TLS 1.0 CBC attack (aka BEAST, CVE-2011-3389) I suggest >>> we update our SSL configuration analogous to what's in trunk. >>> >>> -

2.0.65

2011-10-06 Thread Jim Jagielski
Would like to T&R this week… we have 2 showstoppers awaiting just 1 vote each to be backport-able.

Re: Change loglevel of "File does not exist" messages

2011-10-06 Thread Jim Jagielski
On Oct 5, 2011, at 7:07 PM, Daniel Ruggeri wrote: > On 10/5/2011 4:18 PM, Stefan Fritsch wrote: >> True. But a generic apparatus for even more fine-grained log >> configuration won't happen in time for 2.4. > > I have toyed with the idea of this... do you have suggestions on how > this might be

Re: 2.0.65

2011-10-06 Thread William A. Rowe Jr.
On 10/6/2011 8:08 AM, Jim Jagielski wrote: > Would like to T&R this week… we have 2 showstoppers awaiting > just 1 vote each to be backport-able. And a third bug report at security@ (vulnerability is dubious, but it's still a bug ;-)

Caching - Generating E-Tags

2011-10-06 Thread Amila Liyanaarachchi
Hi Dev, I'm working on a caching protocol similar to HTTP on a different research. I have the following question regarding the e-tags. When does exactly apache computes the e-tag for a certain resource? Does it compute that when there is a request for that particular resource or is it computed by

Re: 2.0.65

2011-10-06 Thread Jim Jagielski
On Oct 6, 2011, at 12:49 PM, William A. Rowe Jr. wrote: > On 10/6/2011 8:08 AM, Jim Jagielski wrote: >> Would like to T&R this week… we have 2 showstoppers awaiting >> just 1 vote each to be backport-able. > > And a third bug report at security@ (vulnerability is dubious, but it's > still a bug

Re: Fwd: svn commit: r1179448 - in /httpd/httpd/trunk: include/ap_mmn.h include/mpm_common.h server/mpm_common.c

2011-10-06 Thread Stefan Fritsch
On Thu, 6 Oct 2011, Rüdiger Plüm wrote: Author: sf Date: Wed Oct 5 21:25:58 2011 New Revision: 1179448 URL: http://svn.apache.org/viewvc?rev=1179448&view=rev Log: Export ap_max_mem_free, needed by r1178079, as pointed out by Gregg L. Smith Modified: httpd/httpd/trunk/include/ap_mmn.h htt

Re: Caching - Generating E-Tags

2011-10-06 Thread Reindl Harald
Am 06.10.2011 19:03, schrieb Amila Liyanaarachchi: > Hi Dev, > > I'm working on a caching protocol similar to HTTP on a different research. I > have the following question regarding > the e-tags. > When does exactly apache computes the e-tag for a certain resource? > Does it compute that when th

Re: Change loglevel of "File does not exist" messages

2011-10-06 Thread Stefan Fritsch
On Thu, 6 Oct 2011, Jim Jagielski wrote: On Oct 5, 2011, at 7:07 PM, Daniel Ruggeri wrote: On 10/5/2011 4:18 PM, Stefan Fritsch wrote: True. But a generic apparatus for even more fine-grained log configuration won't happen in time for 2.4. I have toyed with the idea of this... do you have su

Fine grained error logging overrides [Was: Change loglevel of "File does not exist" messages]

2011-10-06 Thread William A. Rowe Jr.
I've been giving this a bunch of thought, not to 'tune' the messages, but simply localize them. The tuning of messages would be a snap. My thought is to build two reference tables, the first of replacement messages hashed by source messages, and the second of replacement messages hashed by source

Re: Fine grained error logging overrides [Was: Change loglevel of "File does not exist" messages]

2011-10-06 Thread William A. Rowe Jr.
On 10/6/2011 1:07 PM, William A. Rowe Jr. wrote: > > On startup, read an arbitrary localization file of source:replacement > error strings (corresponding to the strings scattered throughout our > sources). These obviously include any subst tokens, so the file > permissions of such a localization

Re: 2.0.65

2011-10-06 Thread William A. Rowe Jr.
On 10/6/2011 12:12 PM, Jim Jagielski wrote: > > On Oct 6, 2011, at 12:49 PM, William A. Rowe Jr. wrote: > >> On 10/6/2011 8:08 AM, Jim Jagielski wrote: >>> Would like to T&R this week… we have 2 showstoppers awaiting >>> just 1 vote each to be backport-able. >> >> And a third bug report at securi

Re: CVE-2011-3192 in 2.0

2011-10-06 Thread Ryan Suarez
Greetings, Any update to CVE-2011-3192 in 2.0? http://marc.info/?l=apache-httpd-dev&m=131548758430087 regards, Ryan

Re: CVE-2011-3192 in 2.0

2011-10-06 Thread William A. Rowe Jr.
On 10/6/2011 2:47 PM, Ryan Suarez wrote: > Greetings, > > Any update to CVE-2011-3192 in 2.0? > http://marc.info/?l=apache-httpd-dev&m=131548758430087 -- > Is there a release schedule? no

Redundant new 2.3-beta feature?

2011-10-06 Thread William A. Rowe Jr.
I believe this patch, introducing SetEnvIf OID evaluation... http://svn.apache.org/viewvc?view=revision&revision=220307 is rendered redundant, or at least should be redundant if the ap_expr engine can be made capable... by... http://svn.apache.org/viewvc?view=revision&revision=1037137 Thought

Re: Improving SSL config

2011-10-06 Thread Kaspar Brand
On 06.10.2011 10:58, Rainer Jung wrote: > On 02.10.2011 09:07, William A. Rowe Jr. wrote: >> -1 in this respect; faster is not more secure. We must default to setting >> the strictest cipher choices, with a commented-out "this is faster, but far >> less secure" alternative for those with less targ

Re: Improving SSL config

2011-10-06 Thread William A. Rowe Jr.
On 10/7/2011 12:05 AM, Kaspar Brand wrote: > On 06.10.2011 10:58, Rainer Jung wrote: >> On 02.10.2011 09:07, William A. Rowe Jr. wrote: >>> -1 in this respect; faster is not more secure. We must default to setting >>> the strictest cipher choices, with a commented-out "this is faster, but far >>>