Re: Forbid directive in core?

2013-09-28 Thread Eric Covener
I've come back to this because I've struggled in another area with access_checker vs. access_checker_ex. I really think we need basic access control outside of Require and Satisfy. I have a copy of the Forbidden directive in mod_authz_core and I am currrently allowing ON/OFF flags. * using a

Re: [PATCH 55593] Add SSLServerInfoFile directive

2013-09-28 Thread Kaspar Brand
On 27.09.2013 20:58, Trevor Perrin wrote: On Fri, Sep 27, 2013 at 9:16 AM, Kaspar Brand httpd-dev.2...@velox.ch wrote: It could probably be handled in ssl_engine_config.c:ssl_cmd_SSLOpenSSLConfCmd(), but this would again mean adding specific code for ServerInfoFile. If we're adding specific

Re: [PATCH 55593] Add SSLServerInfoFile directive

2013-09-28 Thread Dr Stephen Henson
On 28/09/2013 14:42, Kaspar Brand wrote: If the ability to specify relative path names with SSLOpenSSLConfCmd is considered an absolutely essential feature, then OpenSSL could perhaps standardize its option names somewhat - e.g. by always naming those which take a file name argument with

Re: Add skiplist to APR 1.5 (Was: Re: event MPM (Was: Re: Planning for 2.4.7 in Oct))

2013-09-28 Thread Graham Leggett
On 26 Sep 2013, at 15:44, Jim Jagielski j...@jagunet.com wrote: Like I said, I think that skiplist fits better in APR; in fact there are a few other things in httpd that would be better in APR, but APR and httpd are 2 sep projects and so we can't force things. In fact, I'm adding

Re: Forbid directive in core?

2013-09-28 Thread Tim Bannister
On 28 Sep 2013, at 14:19, Eric Covener cove...@gmail.com wrote: I've come back to this because I've struggled in another area with access_checker vs. access_checker_ex. I really think we need basic access control outside of Require and Satisfy. I have a copy of the Forbidden directive in

Re: [PATCH 55593] Add SSLServerInfoFile directive

2013-09-28 Thread Dr Stephen Henson
On 28/09/2013 14:56, Dr Stephen Henson wrote: On 28/09/2013 14:42, Kaspar Brand wrote: If the ability to specify relative path names with SSLOpenSSLConfCmd is considered an absolutely essential feature, then OpenSSL could perhaps standardize its option names somewhat - e.g. by always naming

Re: Forbid directive in core?

2013-09-28 Thread Reindl Harald
Am 28.09.2013 18:21, schrieb Tim Bannister: On 28 Sep 2013, at 14:19, Eric Covener cove...@gmail.com wrote: I've come back to this because I've struggled in another area with access_checker vs. access_checker_ex. I really think we need basic access control outside of Require and Satisfy.

Re: svn commit: r1526666 - in /httpd/httpd/trunk: CHANGES docs/log-message-tags/next-number server/mpm/winnt/child.c server/mpm/winnt/mpm_winnt.c server/mpm/winnt/mpm_winnt.h

2013-09-28 Thread Jeff Trawick
On Fri, Sep 27, 2013 at 4:09 AM, Ivan Zhakov i...@visualsvn.com wrote: On 27 September 2013 00:08, traw...@apache.org wrote: Author: trawick Date: Thu Sep 26 20:08:33 2013 New Revision: 152 URL: http://svn.apache.org/r152 Log: WinNT MPM: Exit the child if the parent