Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-16 Thread olli hauer
On 2015-06-16 13:39, Yann Ylavic wrote: > On Mon, Jun 15, 2015 at 7:24 PM, olli hauer wrote: >> >> As a side note, even I've read the Release Notes I was thankful to see my >> console was trashed with the deprecation warning ;) >> >> What I miss is a section on httpd.apache.org/docs/2.4/ with a l

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-16 Thread Yann Ylavic
On Mon, Jun 15, 2015 at 7:24 PM, olli hauer wrote: > > As a side note, even I've read the Release Notes I was thankful to see my > console was trashed with the deprecation warning ;) > > What I miss is a section on httpd.apache.org/docs/2.4/ with a link list what > has changed since which releas

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Tim Bannister
On 15 June 2015 14:12:27 UTC+01:00, Eric Covener wrote: >Anyone else inclined to just remove the message? It's a deprecation >that didn't happen on a release boundary. AFAICT there's no reason to change >how you run your server unless you use two different cert chains and then >you'd find the info

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-15 Thread olli hauer
On 2015-06-15 03:36, Gregg Smith wrote: > On 6/14/2015 6:14 PM, Gregg Smith wrote: >> On 6/14/2015 2:56 PM, Yann Ylavic wrote: >>> On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff >>> I'm fine with this appro

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Jeff Trawick
On Mon, Jun 15, 2015 at 11:10 AM, Jeff Trawick wrote: > On Mon, Jun 15, 2015 at 10:54 AM, William A Rowe Jr > wrote: > >> On Mon, Jun 15, 2015 at 8:12 AM, Eric Covener wrote: >> >>> Anyone else inclined to just remove the message? It's a deprecation that >>> didn't happen on a release boundary.

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Jeff Trawick
On Mon, Jun 15, 2015 at 10:54 AM, William A Rowe Jr wrote: > On Mon, Jun 15, 2015 at 8:12 AM, Eric Covener wrote: > >> Anyone else inclined to just remove the message? It's a deprecation that >> didn't happen on a release boundary. AFAICT there's no reason to change how >> you run your server un

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread William A Rowe Jr
On Mon, Jun 15, 2015 at 8:12 AM, Eric Covener wrote: > Anyone else inclined to just remove the message? It's a deprecation that > didn't happen on a release boundary. AFAICT there's no reason to change how > you run your server unless you use two different cert chains and then you'd > find the in

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Jim Jagielski
> On Jun 15, 2015, at 9:12 AM, Eric Covener wrote: > > Anyone else inclined to just remove the message? I'm +1 for that.

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Eric Covener
Anyone else inclined to just remove the message? It's a deprecation that didn't happen on a release boundary. AFAICT there's no reason to change how you run your server unless you use two different cert chains and then you'd find the info in the manual. On Mon, Jun 15, 2015 at 8:57 AM Jim Jagielsk

Re: SSLCertificateChainFile deprecation, still

2015-06-15 Thread Jim Jagielski
Well, we have time now to Do This Right in 2.4.15, so > On Jun 14, 2015, at 9:43 PM, Noel Butler wrote: > > On 15/06/2015 07:56, Yann Ylavic wrote: > >> On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: >>> >>> http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise

Re: SSLCertificateChainFile deprecation, still

2015-06-14 Thread Noel Butler
On 15/06/2015 07:56, Yann Ylavic wrote: > On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: > >> http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff >> [1] > > I'm fine with this approach too. > We have to decide whether a single [warn] is acceptable or not

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-14 Thread Gregg Smith
On 6/14/2015 6:14 PM, Gregg Smith wrote: On 6/14/2015 2:56 PM, Yann Ylavic wrote: On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff I'm fine with this approach too. We have to decide whether a single [warn] i

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-14 Thread Gregg Smith
On 6/14/2015 2:56 PM, Yann Ylavic wrote: On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff I'm fine with this approach too. We have to decide whether a single [warn] is acceptable or not since it may still conf

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-14 Thread Yann Ylavic
On Sun, Jun 14, 2015 at 1:31 PM, Gregg Smith wrote: > > http://people.apache.org/~gsmith/proposal/sslcertificatechainfile_compromise.diff I'm fine with this approach too. We have to decide whether a single [warn] is acceptable or not since it may still confuse startup monitors, which was a point

Re: SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-14 Thread Gregg Smith
On 6/14/2015 2:54 AM, Yann Ylavic wrote: On Sun, Jun 14, 2015 at 11:29 AM, wrote: Author: gsmith Date: Sun Jun 14 09:29:50 2015 New Revision: 1685371 URL: http://svn.apache.org/r1685371 Log: -1 vote w/ comment Modified: httpd/httpd/branches/2.4.x/STATUS Modified: httpd/httpd/branches/2.

SSLCertificateChainFile deprecation, still (was: svn commit: r1685371 - /httpd/httpd/branches/2.4.x/STATUS)

2015-06-14 Thread Yann Ylavic
On Sun, Jun 14, 2015 at 11:29 AM, wrote: > Author: gsmith > Date: Sun Jun 14 09:29:50 2015 > New Revision: 1685371 > > URL: http://svn.apache.org/r1685371 > Log: > -1 vote w/ comment > > Modified: > httpd/httpd/branches/2.4.x/STATUS > > Modified: httpd/httpd/branches/2.4.x/STATUS > URL: > ht