Re: error log providers, multiple vhosts, mod_syslog

2013-11-17 Thread Stefan Fritsch
Am Dienstag, 12. November 2013, 13:33:23 schrieb Jan Kaluža: I think LDAPLibraryDebug is one user of stderr going to the error log. As the logging is done by the ldap library, there is really no way to change it. But I guess it would be acceptable if that works only if logging to a file

triggering a process recreation of a child process

2013-11-17 Thread jean-frederic clere
Hi, Is there a way to trigger a clean recreation of a child from a module? Cheers Jean-Frederic

Re: svn commit: r1542615 - /httpd/httpd/trunk/build/config-stubs

2013-11-17 Thread Rainer Jung
Hi Stefan, On 17.11.2013 00:49, s...@apache.org wrote: Author: sf Date: Sat Nov 16 23:49:04 2013 New Revision: 1542615 URL: http://svn.apache.org/r1542615 Log: Explicitly list in which directories to look for config*.m4 files. If some distributor patches a config*.m4 file with quilt,

Re: Deprecating (and eventually removing) encrypted private key support in mod_ssl? (was: Re: [PATCH 55593] Add SSLServerInfoFile directive)

2013-11-17 Thread Dr Stephen Henson
On 13/11/2013 14:06, Kaspar Brand wrote: I'm not proposing to drop support for encrypted private keys from 2.4.x (yet), to be clear - I guess we need to keep this for quite some while for backwards compatibility. I suggest, however, to only support unencrypted private keys with the

Re: Deprecating (and eventually removing) encrypted private key support in mod_ssl?

2013-11-17 Thread Kaspar Brand
On 14.11.2013 12:54, Joe Orton wrote: I've also always been a sceptic of this (mis)feature, so I hate to be one to defend it. But demand comes from: a) people who want the ability to do filesystem backups without exposing private keys to the set of admins who can read such backups; or

Re: Deprecating (and eventually removing) encrypted private key support in mod_ssl?

2013-11-17 Thread Kaspar Brand
On 17.11.2013 15:43, Dr Stephen Henson wrote: On 13/11/2013 14:06, Kaspar Brand wrote: - only supporting unencrypted private keys with SSLOpenSSLConfCmd PrivateKey ... Just to clarify that. Do you mean that SSLOpenSSLConfCmd shouldn't work with encrypted private keys at all (e.g. return

Bugz 53996

2013-11-17 Thread Jim Jagielski
When using SYSV-based shmem in APR (shmget, et.al.), APR uses the standard ftok() call to generate a key. The issue is that it always uses the constant 1 which can lead to key collisions. To work around that, 1.5.1 and 2.0-dev have been updated to instead use an APR hash of the filename as the

Re: Deprecating (and eventually removing) encrypted private key support in mod_ssl?

2013-11-17 Thread Dr Stephen Henson
On 17/11/2013 15:01, Kaspar Brand wrote: One issue I'm facing with the current implementation is that when relying on SSL_CTX_use_certificate_file/ SSL_CTX_use_certificate_chain_file to configure the cert, there's no way to get at the X509 * which really got configured for the SSL_CTX

Re: Intent to TR 2.4.7

2013-11-17 Thread Reindl Harald
Am 13.11.2013 17:39, schrieb Jim Jagielski: Now that APR 1.5 is soon-to-be released, we are good for a release of 2.4.7. I propose a TR next week (I'll RM) and would request that people look thru STATUS for some remaining backports is this one considered to be included in 2.4.7

Re: svn commit: r1542557 - in /httpd/httpd/branches/2.4.x: ./ include/ server/ server/mpm/event/ server/mpm/worker/

2013-11-17 Thread Christophe JAILLET
Le 16/11/2013 20:24, minf...@apache.org a écrit : Author: minfrin Date: Sat Nov 16 19:24:53 2013 New Revision: 1542557 URL: http://svn.apache.org/r1542557 Log: mpm_unix: Add ap_mpm_podx_* implementation to avoid code duplication and align w/ trunk. trunk patch:

[Patch] non blocking writes in core

2013-11-17 Thread Graham Leggett
Hi all, Continuing on from the discussion about how we might support write completion in mod_ssl, I have come up with the following patch below. I started by changing the event MPM to call all protocol filters instead of just the hard coded write filter: rv =

Re: triggering a process recreation of a child process

2013-11-17 Thread Graham Dumpleton
On 17 November 2013 22:05, jean-frederic clere jfcl...@gmail.com wrote: Hi, Is there a way to trigger a clean recreation of a child from a module? See the apr_proc_other_child_*() family of functions. For an example, go look at the implementation of mod_cgid. Graham