Re: TLS neverbleed design

Considering this from the most extreme example, a hosting service where co-parties to using the server container are in contention to steal one anothers' identities, it seems the right answer is... Entirely isolate the network transport to the specific physical or SNI-based vhost in a distinct pro

Re: mpm event assertion failures

On 25 Jan 2022, at 14:11, Stefan Eissing wrote: > Also, while running the http2 test suite, I get repeated assert failures in > event.c:1230 > > if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { > -> AP_DEBUG_ASSERT(0); >TO_QUEUE_REMOVE(cs->sc->wc_q, cs); >apr_thread_mutex_unlock(t

Re: trunk test failure, SSL handshake

Stefan, On Tue, Jan 25, 2022 at 12:58 PM Stefan Eissing wrote: > > Failure in https://app.travis-ci.com/github/apache/httpd/jobs/556778281 > indicates that the SSL handshake timeout no longer is working. > Also logs mpm:error several times. > > The test opens a socket and sends one byte, then wai

Re: trunk test failure, SSL handshake

On Tue, Jan 25, 2022 at 8:18 PM Graham Leggett wrote: > > On 25 Jan 2022, at 13:57, Stefan Eissing wrote: > > > Failure in https://app.travis-ci.com/github/apache/httpd/jobs/556778281 > > indicates that the SSL handshake timeout no longer is working. > > Also logs mpm:error several times. > > > >

Re: trunk test failure, SSL handshake

On 25 Jan 2022, at 13:57, Stefan Eissing wrote: > Failure in https://app.travis-ci.com/github/apache/httpd/jobs/556778281 > indicates that the SSL handshake timeout no longer is working. > Also logs mpm:error several times. > > The test opens a socket and sends one byte, then waits for > the con

Re: http and http/1.x separation

On 24 Jan 2022, at 16:53, Stefan Eissing wrote: > Yes, it's 0 length like ERROR and has a struct as that holds: > - int status, opt 0 > - const char *reason, opt NULL > - apr_table_t *headers > - apr_table_t *notes > > on responses, shallow copied from the request_rec, etc. > > The nice thing

Re: http and http/1.x separation

> Am 25.01.2022 um 17:42 schrieb Roy T. Fielding : > >> On Jan 24, 2022, at 6:53 AM, Stefan Eissing wrote: >> >> >> >>> Am 24.01.2022 um 15:40 schrieb Yann Ylavic : >>> >>> On Mon, Jan 24, 2022 at 3:28 PM Stefan Eissing wrote: FYI: I am busy hacking away at the separation betwe

Re: mpm event assertion failures

On Tue, Jan 25, 2022 at 1:12 PM Stefan Eissing wrote: > > Also, while running the http2 test suite, I get repeated assert failures in > event.c:1230 > > if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { > -> AP_DEBUG_ASSERT(0); > TO_QUEUE_REMOVE(cs->sc->wc_q, cs); > apr_thread_mutex_

Re: http and http/1.x separation

> On Jan 24, 2022, at 6:53 AM, Stefan Eissing wrote: > > > >> Am 24.01.2022 um 15:40 schrieb Yann Ylavic > >: >> >> On Mon, Jan 24, 2022 at 3:28 PM Stefan Eissing > > wrote: >>> >>> FYI: I am busy hacking away at the separation between o

mpm event assertion failures

Also, while running the http2 test suite, I get repeated assert failures in event.c:1230 if (rv != APR_SUCCESS && !APR_STATUS_IS_EEXIST(rv)) { -> AP_DEBUG_ASSERT(0); TO_QUEUE_REMOVE(cs->sc->wc_q, cs); apr_thread_mutex_unlock(timeout_mutex); ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_

trunk test failure, SSL handshake

Failure in https://app.travis-ci.com/github/apache/httpd/jobs/556778281 indicates that the SSL handshake timeout no longer is working. Also logs mpm:error several times. The test opens a socket and sends one byte, then waits for the connection to close with the configured timeout. Run locally wit