Re: Review of 2.2.x security patch sought.

2015-06-10 Thread William A Rowe Jr
Just a quick /nag that I'm happy to roll 2.2.30 in conjunction with 2.4.14, so that we present both to the community at the same time, and simplify the announcement. This patch still needs a third +1 to be adopted (it is already in trunk, and in the 2.4.14 Jim will be tagging & rolling shortly).

Re: httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread William A Rowe Jr
On Wed, Jun 10, 2015 at 4:12 PM, Andy Wang wrote: > I can reproduce the first case with the installer, pretty much ondemand > using our installer stuff. I've tried reproducing it by ripping out the > actions that do the Runtime.exec() to call httpd.exe into a separate > standalone program, and t

Notice: Intent to T&R 2.4.14 June 11 (Thurs)

2015-06-10 Thread Jim Jagielski
Subj sez it all.

Re: httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread Andy Wang
I can reproduce the first case with the installer, pretty much ondemand using our installer stuff. I've tried reproducing it by ripping out the actions that do the Runtime.exec() to call httpd.exe into a separate standalone program, and the problem doesn't occur there. Go figure. But when thi

Re: httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread William A Rowe Jr
Can you reproduce using the real network driver? The loopback/localhost interface is famously junk. On Jun 10, 2015 11:22 AM, "Andy Wang" wrote: > Yeah, that much I more or less get. > > What I really don't understand is what can a client do (IE11) that would > regularly cause httpd.exe to hang

Re: httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread Andy Wang
Yeah, that much I more or less get. What I really don't understand is what can a client do (IE11) that would regularly cause httpd.exe to hang with AcceptEx. This is reproducible on every single machine I've ever tried, including completely vanilla virtual machines, or pretty straightforward

Re: SNI Host: header mismatch

2015-06-10 Thread Yann Ylavic
On Wed, Jun 10, 2015 at 5:48 PM, Yann Ylavic wrote: > On Wed, Jun 10, 2015 at 5:30 PM, Yann Ylavic wrote: >> On Wed, Jun 10, 2015 at 4:41 PM, Stefan Eissing >> wrote: >>> Today I had the second user which got "400 Bad Request" when using mod_h2 >>> with a wildcard certificate. So, I was thinkin

Re: httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread William A Rowe Jr
It turns off all advanced socket mechanics for accepting connections. That means it won't pre-fetch data. Because of how cobbled-together the WinSock network stack drivers (third parties, included) were, there are many things that break sendfile (disable sendfile) or socket reuse (disable advance

Re: SNI Host: header mismatch

2015-06-10 Thread Yann Ylavic
On Wed, Jun 10, 2015 at 5:30 PM, Yann Ylavic wrote: > On Wed, Jun 10, 2015 at 4:41 PM, Stefan Eissing > wrote: >> Today I had the second user which got "400 Bad Request" when using mod_h2 >> with a wildcard certificate. So, I was thinking how to possibly fix the code >> in mod_ssl. >> >> The mo

httpd 2.4 and windows "hangs" and AcceptFilter solution

2015-06-10 Thread Andy Wang
I originally asked this on user@httpd and didn't get a response, so thought I'd redirect to dev and see if anyone can explain why this would occur if you have time. I have to admit, it's a curiosity to me, that I just don't want to let go until I understand it and what research I've done into

Re: SNI Host: header mismatch

2015-06-10 Thread Yann Ylavic
On Wed, Jun 10, 2015 at 4:41 PM, Stefan Eissing wrote: > Today I had the second user which got "400 Bad Request" when using mod_h2 > with a wildcard certificate. So, I was thinking how to possibly fix the code > in mod_ssl. > > The mostly harmless approach is the addition of a configuration dire

SNI Host: header mismatch

2015-06-10 Thread Stefan Eissing
Today I had the second user which got "400 Bad Request" when using mod_h2 with a wildcard certificate. So, I was thinking how to possibly fix the code in mod_ssl. The mostly harmless approach is the addition of a configuration directive that admins may use to explicitly allow multiple host requ

Re: RFC 7540 (HTTP/2) wrt reusable connections and SNI

2015-06-10 Thread Daniel Kahn Gillmor
On Tue 2015-06-09 13:43:59 -0400, Roy T. Fielding wrote: > WRT renegotiation, it is fair to say that the WG punted on the idea > due to lack of time. If someone figures out a way to safely > renegotiate an h2 connection (and all of its streams), then go ahead > and implement it, describe it in an