Re: oauth 2 for authorization ?

2012-06-11 Thread David Robinson
Thanks for the updates/info. Apache Amber has some sort of OAuth 2 server as does Apache Shindig (and of course Spring). I wasn't aware of the OpenID pointer...thank you. Not sure when time will free up to look in more detail, but the pointers / info helped. On Mon, Jun 11, 2012 at 4:52 PM, Nic

Re: oauth 2 for authorization ?

2012-06-11 Thread Nick Kew
On Mon, 11 Jun 2012 21:04:05 +0200 Graham Leggett wrote: > On 11 Jun 2012, at 8:56 PM, David Robinson wrote: > > > I am wondering if there are any plans to add OAuth 2 capabilities into the > > base authorization capabilities of the http server ? > > When I wrote mod_auth_form, I made introdu

Re: oauth 2 for authorization ?

2012-06-11 Thread Graham Leggett
On 11 Jun 2012, at 8:56 PM, David Robinson wrote: > I am wondering if there are any plans to add OAuth 2 capabilities into the > base authorization capabilities of the http server ? When I wrote mod_auth_form, I made introductory plans to support OpenID, but wasn't able to continue with it due

Re: svn commit: r1348656 - in /httpd/httpd/trunk/modules/ssl: ssl_engine_config.c ssl_engine_init.c ssl_private.h

2012-06-11 Thread Kaspar Brand
On 10.06.2012 22:21, s...@apache.org wrote: > Author: sf > Date: Sun Jun 10 20:21:38 2012 > New Revision: 1348656 > > URL: http://svn.apache.org/viewvc?rev=1348656&view=rev > Log: > If OPENSSL_NO_COMP is defined, omit merging the compression flag. > Also make some code more compact, as suggested b

Re: svn commit: r1347980 - in /httpd/httpd/trunk: ./ docs/conf/extra/ docs/log-message-tags/ docs/manual/mod/ docs/manual/ssl/ modules/ssl/

2012-06-11 Thread Kaspar Brand
On 10.06.2012 21:58, Stefan Fritsch wrote: > On Sunday 10 June 2012, Kaspar Brand wrote: >> As a matter of style / documentation "policy", I would prefer if >> the setup instructions in the reference documentation >> (mod_ssl.xml) are self-contained, i.e. people should not have to >> look at the FA

Re: post-CVE-2011-4317 (rewrite proxy unintended interpolation) rewrite PR's

2012-06-11 Thread Joe Orton
On Fri, Jun 08, 2012 at 08:19:22AM -0400, Jeff Trawick wrote: > On Fri, Jun 8, 2012 at 4:58 AM, Joe Orton wrote: > > Yes, but that was exactly the previous state: the security implication > > of doing crazy stuff with rewrite rules really is totally unknown.  I > > wouldn't say "infrequently used