Re: Improving SSL config

2011-10-06 Thread Rainer Jung
Hi Bill, On 02.10.2011 09:07, William A. Rowe Jr. wrote: > On 9/29/2011 9:31 AM, Rainer Jung wrote: >> In light of the TLS 1.0 CBC attack (aka BEAST, CVE-2011-3389) I suggest >> we update our SSL configuration analogous to what's in trunk. >> >> - Choose a better

Re: Improving SSL config

2011-10-06 Thread Rainer Jung
On 06.10.2011 10:58, Rainer Jung wrote: > Hi Bill, > > On 02.10.2011 09:07, William A. Rowe Jr. wrote: >> On 9/29/2011 9:31 AM, Rainer Jung wrote: >>> In light of the TLS 1.0 CBC attack (aka BEAST, CVE-2011-3389) I suggest >>> we update our SSL configura

Re: mod_proxy_html

2011-10-13 Thread Rainer Jung
On 12.10.2011 23:56, Nick Kew wrote: > > On 10 Oct 2011, at 23:02, Nick Kew wrote: > >> Any interest? > > Looks like a lazy consensus in favour! If you ant it a bit less lazy: +1 from me also. > Regarding IP, it's mine to sign over, so that's straightforward. > So I guess it's just a matter of

Current LoadModule enabling status

2011-11-08 Thread Rainer Jung
After Stefan's change r1199027 we no longer load all built modules by default. The new behaviour is (citing Stefan): "By default, only load those modules that are either required or explicitly selected by a configure --enable-foo argument. The LoadModule statements for modules enabled by --enable-

Re: Current LoadModule enabling status

2011-11-08 Thread Rainer Jung
On 08.11.2011 10:03, William A. Rowe Jr. wrote: > On 11/8/2011 11:53 AM, Rainer Jung wrote: >> After Stefan's change r1199027 we no longer load all built modules by >> default. The new behaviour is (citing Stefan): >> >> "By default, only load those m

Re: 2.3.15-dev

2011-11-08 Thread Rainer Jung
+1 On 08.11.2011 14:47, Jim Jagielski wrote: > So far 3 +1s and counting… > > On Nov 8, 2011, at 12:49 PM, Jim Jagielski wrote: > >> OK… let's polish this… "gem". >> >> I'd really like to T&R 2.3.15-dev, get some feedback quickly and >> let's push on for a quick 2.4.0 release!

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-09 Thread Rainer Jung
Hi Jim, it looks like your key expired last Friday? % gpg --verify ../incoming/httpd/trunk/2.3.15/httpd-2.3.15-beta.tar.gz.asc gpg: WARNING: using insecure memory! gpg: please see http://www.gnupg.org/faq.html for more information gpg: Signature made November 9, 2011 3:20:26 PM CET using RSA k

Re: Current LoadModule enabling status

2011-11-09 Thread Rainer Jung
On 08.11.2011 13:57, Stefan Fritsch wrote: On Tue, 8 Nov 2011, Rainer Jung wrote: After Stefan's change r1199027 we no longer load all built modules by default. The new behaviour is (citing Stefan): "By default, only load those modules that are either required or explicitly sel

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-09 Thread Rainer Jung
On 09.11.2011 07:43, Rainer Jung wrote: Hi Jim, it looks like your key expired last Friday? Oups, was so convinced it is new, that I didn't see it already expired a year ago. Maybe you should sign 2.4.0 with a new one? Rainer % gpg --verify ../incoming/httpd/trunk/2.3.15/httpd-2

Re: [VOTE] Release 2.3.15-beta as beta

2011-11-09 Thread Rainer Jung
On 09.11.2011 11:12, Jim Jagielski wrote: 2010-11-04 is the day I created the new key… it's unexpired (at least from what I can see ;) ) Sorry for the noise, false alarm :( Regards, Rainer On Nov 9, 2011, at 7:52 AM, Rainer Jung wrote: On 09.11.2011 07:43, Rainer Jung wrote: Hi Jim

Re: Fwd: [users@httpd] 2.3.15-beta: module proxy_balancer requires the not automatically loaded module slotmem_shm

2011-11-09 Thread Rainer Jung
On 09.11.2011 13:53, Stefan Fritsch wrote: Hi, On Wed, 9 Nov 2011, William A. Rowe Jr. wrote: This one in from the users@ list. It sounds vaguely familiar to the issue previously mentioned about win32 defaults and some strange dependency failure between proxy_balancer and slotmem providers. On

Re: Small things to do

2011-11-09 Thread Rainer Jung
On 08.11.2011 13:10, Stefan Fritsch wrote: - Rainer wanted to check some pcre linking issues, but I don't remember the exact details The problem is mainly gone with trunk. It concerns dependency libs, which are likely used by 3rd-party modules as well. Until 2.2 PCRE was such a library *plus

Re: Fwd: [users@httpd] 2.3.15-beta: module proxy_balancer requires the not automatically loaded module slotmem_shm

2011-11-09 Thread Rainer Jung
On 09.11.2011 14:48, William A. Rowe Jr. wrote: On 11/9/2011 3:53 PM, Stefan Fritsch wrote: Hi, On Wed, 9 Nov 2011, William A. Rowe Jr. wrote: This one in from the users@ list. It sounds vaguely familiar to the issue previously mentioned about win32 defaults and some strange dependency failure

Re: [users@httpd] 2.3.15-beta: module proxy_balancer requires the not automatically loaded module slotmem_shm

2011-11-09 Thread Rainer Jung
On 09.11.2011 21:20, William A. Rowe Jr. wrote: On 11/9/2011 4:53 PM, Jim Jagielski wrote: Isn't the point different? If someone enables mod_proxy then the configure script needs to ensure that mod_slotmem is also built… Reporter suggests that *NOT* loading mod_slotmem_shm caused the server to

Lua state reuse does not work

2011-11-11 Thread Rainer Jung
I did a few lua tests and currently the reuse of lua states does not work. Unfortunately I don't yet see the root cause. We are constantly creating new lua states, saving them to the pool and on the next request retrieve null and create a new state. When the server is shutdown, all of the stat

Re: Lua state reuse does not work

2011-11-11 Thread Rainer Jung
On 11.11.2011 02:16, Rainer Jung wrote: I did a few lua tests and currently the reuse of lua states does not work. Unfortunately I don't yet see the root cause. We are constantly creating new lua states, saving them to the pool and on the next request retrieve null and create a new state.

Re: BRANCHED : httpd 2.4.x

2011-11-11 Thread Rainer Jung
On 11.11.2011 09:42, Jim Jagielski wrote: The 2.4.x httpd branch was created from the r1200449 point of trunk… I've tried to backport pretty much all non-apreq patches from trunk. I guess we are still on CTR on that branch? Rainer

Re: [VOTE] Release 2.3.15-dev as beta

2011-11-11 Thread Rainer Jung
On 08.11.2011 15:16, Jim Jagielski wrote: The 2.3.15-dev (prerelease) tarballs are available for download at test: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as 2.3.15-dev BETA and, with luck, this will be our last beta and the next release in ~2weeks or les

Re: [Discuss] [VOTE] Formal deprecation of 2.0.x branch

2011-11-11 Thread Rainer Jung
On 11.11.2011 13:04, André Malo wrote: * William A. Rowe Jr. wrote: So isn't it enough to say that "The project will choose to publish further releases only for significant security fixes, or will choose instead to publish patches for less significant security fixes for 12 months from the date

Re: Changes in mod_ssl

2011-11-14 Thread Rainer Jung
Hello, On 14.11.2011 05:59, Moran Jacuel wrote: Hello, Our company is an HSM manufacturer (See link for http://www.arx.com/products/private-server-hsm PrivateServer product) We wanted to connect apache server with SSL using our HSM to hold the Private RSA and Certificate. We downloaded apache

Re: Changes in mod_ssl

2011-11-15 Thread Rainer Jung
Hello Moran, On 15.11.2011 14:54, Moran Jacuel wrote: Hello Rainer, I found out that the patch that I used in order to connect apache server with SSL using our HSM to hold the Private RSA and Certificate already exists in bugzilla at: https://issues.apache.org/bugzilla/show_bug.cgi?id=42687

Re: setting TZ env var

2011-11-16 Thread Rainer Jung
On 15.11.2011 17:06, Paul Querna wrote: So, I was looking at all the system calls we make in a single request, and comparing it to nginx. We were actually pretty close, baring supporting our features like htaccess, there was only one thing that stood out. Glibc is opening, calling fstat twice,

Re: svn commit: r1202255 - /httpd/httpd/trunk/modules/filters/mod_reqtimeout.c

2011-11-16 Thread Rainer Jung
On 15.11.2011 20:57, Jeff Trawick wrote: On Tue, Nov 15, 2011 at 2:32 PM, William A. Rowe Jr. wrote: On 11/15/2011 12:33 PM, Stefan Fritsch wrote: On Tuesday 15 November 2011, Paul Querna wrote: On Tue, Nov 15, 2011 at 9:17 AM, Stefan Fritsch wrote: On Tue, 15 Nov 2011, pque...@apache.

Re: Improving SSL config

2011-11-18 Thread Rainer Jung
On 18.11.2011 06:32, Kaspar Brand wrote: As I can't think of any good reason why a new major version of an HTTPS server released in late 2011 should still support insecure SSL protocol cruft from the 1990s (v2 was superseded about 15 years ago, when SSLv3 was introduced), I went for the first opt

Re: Improving SSL config

2011-11-18 Thread Rainer Jung
On 18.11.2011 18:20, Kaspar Brand wrote: On 18.11.2011 13:09, Rainer Jung wrote: You might want to drop the -SSLv2 from our SSLCipherSuite in docs/conf/extra/httpd-ssl.conf.in then as well. You're right, yes. As there were no objections to the changes I proposed on the list a few days a

Re: Win 2.3.15 :: The timeout specified has expired

2011-11-22 Thread Rainer Jung
On 21.11.2011 11:59, "Plüm, Rüdiger, VF-Group" wrote: -Original Message- From: Steffen [mailto:i...@apachelounge.com] Sent: Montag, 21. November 2011 11:50 To: dev@httpd.apache.org Subject: Win 2.3.15 :: The timeout specified has expired Observing that the error.log is filling with [

Re: Win 2.3.15 :: Server Status Entries

2011-11-22 Thread Rainer Jung
On 22.11.2011 10:28, Steffen wrote: Seeing a huge number of hanging entries in the Server Status, already for 20 hours and looks they are staying there forever. The requests are invalid, not sure since I do not keep the raw logs. ... ... 0-0 3800 0/177/177 _ 64980 1 0.0 0.09 0.09 94.76.244.212

Re: Win 2.3.15 :: New log entries

2011-11-22 Thread Rainer Jung
On 22.11.2011 22:42, Stefan Fritsch wrote: [core:error] [pid 3800:tid 2216] [client 220.134.192.77:42107] Handler for type-map returned invalid result code 620018, referer: . This message denotes that there is a bug in the handler (maybe in mod_negotiation). The log message itself is new, t

Re: [RFC] further proxy/rewrite URL validation security issue (CVE-2011-4317)

2011-11-24 Thread Rainer Jung
On 23.11.2011 15:23, Joe Orton wrote: Prutha Parikh from Qualys reported a variant on the CVE-2011-3368 attack against certain mod_proxy/mod_rewrite configurations. A new CVE name, CVE-2011-4317, has been assigned to this variant. The configurations in question are the same as affected by -3368

Re: Icons for 2.4

2011-11-27 Thread Rainer Jung
On 27.11.2011 10:50, Stefan Fritsch wrote: Hi, docs/icons/apache_pb2* contain the version number (2.2), in the case of docs/icons/apache_pb2_ani.gif it's even an animation. Any volunteers for changing these to 2.4? Anyone knows the right or at least a similar font? Regards, Rainer

Re: Icons for 2.4

2011-11-27 Thread Rainer Jung
Hi Gregg, In 28.11.2011 01:12, Gregg L. Smith wrote: I did this a couple weeks ago, it's close, but not perfect. Best on white/light background. Which font did you use for the digits? Is it a freely avaiable font? Regards, Rainer

Re: svn commit: r1207721 - in /httpd/httpd/branches/2.4.x: ./ build/rpm/httpd.spec.in

2011-12-04 Thread Rainer Jung
On 29.11.2011 13:12, Graham Leggett wrote: On 29 Nov 2011, at 11:55, Igor Galić wrote: OpenSSL (and cascading deps to it) mod_ssl mod_session mod_session_crypto Neither mod_session nor mod_session_crypto have any hard coded links to openssl (or any other library), it's all abstracted away. m

Re: Stray svn:mergeinfo on files

2011-12-04 Thread Rainer Jung
On 30.11.2011 01:02, Graham Leggett wrote: Hi all, While merging I am getting a lot of stray svn:mergeinfo changes on arbitrary files, for example: M modules/core/mod_watchdog.c M modules/core/mod_so.c M modules/core/Makefile.in M modules/core/config.m4 M mod

Re: svn commit: r1207721 - in /httpd/httpd/branches/2.4.x: ./ build/rpm/httpd.spec.in

2011-12-04 Thread Rainer Jung
On 04.12.2011 14:15, Rainer Jung wrote: On 29.11.2011 13:12, Graham Leggett wrote: On 29 Nov 2011, at 11:55, Igor Galić wrote: OpenSSL (and cascading deps to it) mod_ssl mod_session mod_session_crypto Neither mod_session nor mod_session_crypto have any hard coded links to openssl (or any

Re: svn commit: r1203859 [2/2] - in /httpd/httpd/trunk/modules/proxy: mod_proxy.c ...

2011-12-04 Thread Rainer Jung
On 04.12.2011 15:38, Jim Jagielski wrote: On Dec 1, 2011, at 8:35 PM, Gregg L. Smith wrote: @@ -551,7 +546,7 @@ static int scgi_handler(request_rec *r, cleanup: if (backend) { backend->close = 1; /* always close the socket */ -ap_proxy_release_connection(PROXY_FUNCTION

Re: Windows Laundry List pt3, mod_watchdog

2011-12-04 Thread Rainer Jung
Picking up this old discussion: On 03.07.2011 19:40, William A. Rowe Jr. wrote: On 7/1/2011 12:26 AM, Mladen Turk wrote: On 07/01/2011 06:31 AM, Gregg L. Smith wrote: Hi folks, Well, this is the same chunk of Win32 specific debugging code causing this module to crash yet again. Gregg: Can

Re: svn commit: r1210287 [6/12] - in /httpd/httpd/branches/2.4.x: ./ modules/aaa/ modules/arch/netware/ modules/arch/unix/ modules/arch/win32/ modules/cache/ modules/cluster/ modules/core/ modules/dat

2011-12-05 Thread Rainer Jung
Hi Bill, On 05.12.2011 07:50, William A. Rowe Jr. wrote: On 12/4/2011 6:08 PM, s...@apache.org wrote: -ap_log_error(APLOG_MARK, APLOG_ERR, rc, s, +ap_log_error(APLOG_MARK, APLOG_ERR, rc, s, APLOGNO(00654) Did you really mean for these to be in octal? APLOGNO is the f

Re: Win 2.3.15 :: Server Status Entries

2011-12-06 Thread Rainer Jung
ave the Logging status in server-status for a long time for the winnt MPM? -Original Message- From: Rainer Jung Sent: Tuesday, November 22, 2011 11:32 AM To: dev@httpd.apache.org Subject: Re: Win 2.3.15 :: Server Status Entries On 22.11.2011 10:28, Steffen wrote: Seeing a huge number of hang

Re: Win 2.3.16 :: SSL and AcceptFilter

2012-01-03 Thread Rainer Jung
On 30.12.2011 22:04, Gregg L. Smith wrote: On 12/27/2011 10:40 AM, Steffen wrote: Gregg reported it also: I've also found AcceptFilter https none to be problematic. First time you hit a site via https it usually comes up with a blank white nothing. Hitting reload and it comes up proper. That

Re: Win 2.3.16 :: SSL and AcceptFilter

2012-01-04 Thread Rainer Jung
On 04.01.2012 06:00, William A. Rowe Jr. wrote: On 1/3/2012 9:19 PM, Rainer Jung wrote: On 30.12.2011 22:04, Gregg L. Smith wrote: On 12/27/2011 10:40 AM, Steffen wrote: Gregg reported it also: I've also found AcceptFilter https none to be problematic. First time you hit a site via htt

Re: Win 2.3.16 :: Server Status Entries

2012-01-04 Thread Rainer Jung
gging status in server-status for a long time for the winnt MPM? This bug is still there in 2.3.16, have "L" entries for more then a week ! They are occupying workers all the time, so the busyorkers are far high: L__L_L___LL_L__L___L_L_L__ Happy (2.4) new year to all, Ste

Build-Warnings httpd 2.4.x Visual Studio 10, 32 Bit

2012-01-04 Thread Rainer Jung
During the Build for Windows 32 Bit I get the following warnings: mod_data.c(112): warning C4244: 'function' : conversion from 'apr_off_t' to 'int', possible loss of data mod_filter.c(596): warning C4090: 'function' : different 'const' qualifiers mod_substitute.c(250): warning C4018: '<=' : s

Re: Build-Warnings httpd 2.4.x Visual Studio 10, 32 Bit

2012-01-04 Thread Rainer Jung
Hi Eric, On 04.01.2012 16:07, Eric Covener wrote: Any fresh hints/pointers about setting up a windows sandbox so I can try to look at the LDAP stuff? Here's what I did. Some of it is a bit complex, because I used Visual Studio 10 and the Windows build files are not really optimal for that (m

Re: Fwd: svn commit: r1228700 - in /httpd/httpd/trunk/docs: STATUS manual/mod/mod_heartbeat.xml manual/mod/mod_heartmonitor.xml manual/mod/mod_watchdog.xml manual/mod/mod_watchdog.xml.meta

2012-01-07 Thread Rainer Jung
On 07.01.2012 20:22, Sander Temme wrote: Folks, I've put in some updates to the mod_heart* modules, taken from the README supplied with the modules and some perusal of the source code. I have not run these as I'm too lazy to set up the servers. Review would be appreciated, especially by the

Re: Time for 2.4.0 GA??

2012-01-12 Thread Rainer Jung
On 12.01.2012 11:24, Steffen wrote: We have at least 4 hard bugs in 2.3.16. Known for a long time, and no need to exposure more for these. Fine a GA, with a big note that it is not ready for Windows and advising to run 2.2.21 as proven stable. So not happy with 2.4. Understood, but we rep

Re: Time for 2.4.0 GA??

2012-01-12 Thread Rainer Jung
On 12.01.2012 19:10, Jim Jagielski wrote: On monday (Jan 16th), I plan to T&R 2.4.0... +1

Re: Time for 2.4.0 GA??

2012-01-13 Thread Rainer Jung
and a bad response. The name "Stefan" was a typo at that type and was corrected shortly after on the same thread to be meant as "Steffen" ;) I think Stefan doesn't have a Win build and environment to reproduce. Regards, Rainer Op 12 jan. 2012 om 18:11 heeft R

Re: [VOTE] Release Apache httpd 2.4.0

2012-01-18 Thread Rainer Jung
On 16.01.2012 18:50, Jim Jagielski wrote: The 2.4.0 (prerelease) tarballs are available for download and test: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.0 GA. Vote will last the normal 72 hours... Can I get a w00t w00t! Intermediate r

Re: [VOTE] Release Apache httpd 2.4.0

2012-01-19 Thread Rainer Jung
On 19.01.2012 07:14, Kaspar Brand wrote: On 19.01.2012 03:28, Rainer Jung wrote: OpenSSL should be 1.0.0f and the strange thing is, that the same tests succeed on Solaris 10 using the same OpenSSL version. Something must be different between my Linux systems, which all fail, and the Solaris box

Re: [VOTE] Release Apache httpd 2.4.0

2012-01-19 Thread Rainer Jung
On 16.01.2012 18:50, Jim Jagielski wrote: The 2.4.0 (prerelease) tarballs are available for download and test: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.0 GA. Vote will last the normal 72 hours... Can I get a w00t w00t! +1 for GA. I

Re: svn commit: r1234336 - in /httpd/httpd/branches/2.4.x: include/ap_release.h server/util_expr_parse.c server/util_expr_parse.h

2012-01-21 Thread Rainer Jung
On 21.01.2012 15:38, j...@apache.org wrote: Author: jim Date: Sat Jan 21 14:38:25 2012 New Revision: 1234336 URL: http://svn.apache.org/viewvc?rev=1234336&view=rev Log: Update copyrights for externally visible and changed code Modified: httpd/httpd/branches/2.4.x/include/ap_release.h

Re: [Vote] httpd 2.2.22 release

2012-01-25 Thread Rainer Jung
On 25.01.2012 23:59, William A. Rowe Jr. wrote: Candidate binaries are available from http://httpd.apache.org/dev/dist/ - these do not yet constitute ASF releases. Win32 specific artifacts (x86 binary distribution and -win32-src.zip) will follow shortly, once I fix the release.sh breakage. Ple

Re: [Vote] httpd 2.2.22 release

2012-01-29 Thread Rainer Jung
On 25.01.2012 23:59, William A. Rowe Jr. wrote: Candidate binaries are available from http://httpd.apache.org/dev/dist/ - these do not yet constitute ASF releases. Win32 specific artifacts (x86 binary distribution and -win32-src.zip) will follow shortly, once I fix the release.sh breakage. Ther

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread Rainer Jung
On 30.01.2012 03:16, William A. Rowe Jr. wrote: On 1/29/2012 3:18 PM, Rainer Jung wrote: Overview: Minor problem (not a regression): config.guess and config.sub are a bit old (2008) due to buildconf in the released apr overwriting the config.* in our svn by the system config.*. This is fixed

Re: who is working on getting security patches proposed for 2.0.65?

2012-01-30 Thread Rainer Jung
On 25.01.2012 14:00, Jeff Trawick wrote: I'll start with the patch for CVE-2011-4317. I removed CVE-2011-3348 from STATUS (does not apply to 2.0.x) and added a comment for CVE-2010-2068, which IMHO does not apply either. Regards, Rainer

Re: [Vote] httpd 2.2.22 release

2012-01-30 Thread Rainer Jung
On 30.01.2012 19:10, William A. Rowe Jr. wrote: On 1/30/2012 4:02 AM, Rainer Jung wrote: We add apu-1-confg --includes to CPPFLAGS and then use CPP and apu_version.h to detect which version we have. That works for most gcc versions, but recent gcc chokes, because apu_version.h includes

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-30 Thread Rainer Jung
On 31.01.2012 00:36, Daniel Ruggeri wrote: On 1/30/2012 7:51 AM, Jim Jagielski wrote: Anyone with Windows willing to sign up to review/test? I don't have a build environment to create something based on the diff, but if someone can create a build , I'll happily do the testing. What's you ru

Re: Rename apachectl prior to 2.4.1 tag?

2012-01-30 Thread Rainer Jung
On 30.01.2012 22:53, William A. Rowe Jr. wrote: On 1/30/2012 3:12 PM, Stefan Fritsch wrote: And there is apachectl, not httpdctl. Would anyone else like to see this changed, now, for the 2.4 releases? -0.5 Rainer

Questions on open ports between trunk and 2.4.x

2012-01-31 Thread Rainer Jung
I backported some trunk changes to 2.4.x (mostly cosmetic ones) and a few changes also in the other direction to keep code changes small in parts were there are still no functional changes. A few backports are open, because I'm not sure, whether we want to backport. I left out the obvious chan

Re: Questions on open ports between trunk and 2.4.x

2012-01-31 Thread Rainer Jung
On 31.01.2012 16:17, Graham Leggett wrote: On 31 Jan 2012, at 5:07 PM, Rainer Jung wrote: 6) mod_cache Applied to 2.4.x but not in trunk: r1208384 | minfrin | 2011-11-30 12:21:43 +0100 (Wed, 30 Nov 2011) | 4 lines mod_cache: Revert http://svn.apache.org/viewvc?view=revision

Re: [PATCH] trunk/2.4 core output filter is broken

2012-01-31 Thread Rainer Jung
Hi Stefan, On 29.01.2012 20:53, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more "isolated", rather than the current impl which is intrusive (which is part of what we're trying to avoid, aren't we?) OK, patch is attached

Re: Questions on open ports between trunk and 2.4.x

2012-01-31 Thread Rainer Jung
On 31.01.2012 17:17, Graham Leggett wrote: On 31 Jan 2012, at 5:43 PM, Rainer Jung wrote: All the items listed are actual code differences. The log info was the shortest way to explain the differences. I tried hard to verify, that the differences I've seen are actually the ones generat

Re: Questions on open ports between trunk and 2.4.x

2012-01-31 Thread Rainer Jung
On 31.01.2012 17:38, Jim Jagielski wrote: 5) mod_authnz_ldap == r1231257 | covener | 2012-01-13 20:18:03 +0100 (Fri, 13 Jan 2012) | 3 lines whitespace only: shift a block refactored in r1231255 over 8 spaces. r1231255 | covener | 2012-01-13 20:16:50 +0100 (Fri, 13 Jan 2012) |

Re: 2.4.1….??

2012-01-31 Thread Rainer Jung
On 30.01.2012 21:11, Jim Jagielski wrote: Do I dare float the idea of a 2.4.1 T&R "very soon"?? I'm done with flodding the list with trivial backports. Still open are: A) Testing/Fixing the "bucket problems". There were two bugs, and I have lost the overview, how the fixes are related. One w

Re: Questions on open ports between trunk and 2.4.x

2012-01-31 Thread Rainer Jung
On 31.01.2012 22:23, Stefan Fritsch wrote: On Tuesday 31 January 2012, Rainer Jung wrote: 1) mod_reqtimeout = Now trunk is made consistent with 2.4.x (module is active with default values if loaded but not explicitely configured). r1238826 (sf). 2) log tags

Re: svn commit: r1238824 - in /httpd/httpd/branches/2.4.x: ./ CHANGES server/core.c

2012-01-31 Thread Rainer Jung
On 31.01.2012 22:50, s...@apache.org wrote: Author: sf Date: Tue Jan 31 21:50:03 2012 New Revision: 1238824 URL: http://svn.apache.org/viewvc?rev=1238824&view=rev Log: Merge r1225199: Check during configtest that the directories for error logs exist PR: 29941 I added r1238833: Fix handling o

Re: [PATCH] trunk/2.4 core output filter is broken

2012-02-01 Thread Rainer Jung
On 31.01.2012 22:30, Stefan Fritsch wrote: On Tuesday 31 January 2012, Gregg Smith wrote: On 1/29/2012 11:53 AM, Stefan Fritsch wrote: On Wednesday 25 January 2012, Jim Jagielski wrote: Looking over the code, impl as a hook seems more "isolated", rather than the current impl which is intrusive

Re: [VOTE] Bundle apr/apu with 2.4.x

2012-02-02 Thread Rainer Jung
On 02.02.2012 15:54, Jim Jagielski wrote: I'm calling a vote to get consensus on whether we should continue to bundle apr/apu with httpd 2.4.x. The proposal is that at the time we T&R 2.4.x, we also "bundle" that latest, released versions of apr/apu "with" the httpd tarball. How we bundle it (eg

Re: [VOTE] Bundle apr/apu with 2.4.x

2012-02-02 Thread Rainer Jung
On 02.02.2012 23:48, William A. Rowe Jr. wrote: On 2/2/2012 4:18 PM, Rainer Jung wrote: Hmmm, no clear consensus until now. Consensus? Looks pretty split so far :) Or do you mean you had no clear opinion until now? Did I say "no consensus"? I do have a clear opinion as eve

Re: remove mod_heart* from 2.4?(was: 2.4.0 GA This week?)

2012-02-03 Thread Rainer Jung
On 03.02.2012 19:51, Gregg Smith wrote: On 2/3/2012 9:35 AM, William A. Rowe Jr. wrote: On 1/3/2012 2:22 AM, Gregg L. Smith wrote: Since I have been the most vocal about this watchdog/hearmonitor/heartbeats on windows ... I should chime in. I can tell someone what each do (as far as I have seen

Re: svn commit: r1221296 - /httpd/docs-build/trunk/build.xml

2012-02-09 Thread Rainer Jung
Hi Graham, On 20.12.2011 15:53, minf...@apache.org wrote: Author: minfrin Date: Tue Dec 20 14:53:13 2011 New Revision: 1221296 URL: http://svn.apache.org/viewvc?rev=1221296&view=rev Log: Move ab, logresolve, httxt2dbm and apxs to bin from sbin, along with corresponding man pages. Since the bu

Re: svn commit: r1242950 - /httpd/httpd/branches/2.2.x/docs/manual/style/build.properties

2012-02-10 Thread Rainer Jung
Hi Andre, nice fix. One remark see below. On 10.02.2012 22:53, n...@apache.org wrote: Author: nd Date: Fri Feb 10 21:53:19 2012 New Revision: 1242950 URL: http://svn.apache.org/viewvc?rev=1242950&view=rev Log: enter manpage section assignment into property file Modified: httpd/httpd/bran

Some spare time for fixing our front page?

2012-02-12 Thread Rainer Jung
I just notived the following sentence on our front page: Apache httpd has been the most popular web server on the Internet since April 1996, and celebrated its 15th birthday as a project this February. Since we now have february 2012, this is no longer our 15 birthday. IMHO we should remove t

Re: svn commit: r1243272 - in /httpd/httpd/trunk/docs/manual/mod: core.xml.fr mod_proxy.xml.fr mod_rewrite.xml.fr

2012-02-12 Thread Rainer Jung
Hi Lucien, On 12.02.2012 17:08, lgen...@apache.org wrote: Author: lgentis Date: Sun Feb 12 16:08:31 2012 New Revision: 1243272 URL: http://svn.apache.org/viewvc?rev=1243272&view=rev Log: Updates. Modified: httpd/httpd/trunk/docs/manual/mod/core.xml.fr httpd/httpd/trunk/docs/manual/mo

Re: Intent to T&R 2.4.1

2012-02-12 Thread Rainer Jung
Lame mathematician joke: 2.4 at 2^4 (16th Apache birthday). Regards, Rainer

Re: [VOTE] Release Apache httpd 2.4.1

2012-02-13 Thread Rainer Jung
On 13.02.2012 14:56, Jim Jagielski wrote: The 2.4.1 (candidate) tarballs are available for download and test: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.1 GA. NOTE: The -deps tarballs are included here *only* to make life easier for the t

Re: [VOTE] Release Apache httpd 2.4.1

2012-02-16 Thread Rainer Jung
On 13.02.2012 14:56, Jim Jagielski wrote: The 2.4.1 (candidate) tarballs are available for download and test: http://httpd.apache.org/dev/dist/ I'm calling a VOTE on releasing these as Apache httpd 2.4.1 GA. NOTE: The -deps tarballs are included here *only* to make life easier for the t

Re: svn commit: r503 - in /dev/httpd: Announcement2.4.html Announcement2.4.txt

2012-02-21 Thread Rainer Jung
On 21.02.2012 09:44, wr...@apache.org wrote: Author: wrowe Date: Tue Feb 21 08:44:06 2012 New Revision: 503 Modified: dev/httpd/Announcement2.4.html dev/httpd/Announcement2.4.txt Modified: dev/httpd/Announcement2.4.html ===

Updating www.apache.org to 2.4.1?

2012-02-21 Thread Rainer Jung
Hi Infra, I know there's always to much to do, but any chance we can update www.apache.org to 2.4.1 now that 2.4 is GA? AFAIK Joe's latest problem observation with 2.3.16 was fixed in http://svn.apache.org/viewvc?rev=1236351&view=rev before cutting 2.4.1. Thanks in advance should you find s

AsyncRequestWorkerFactor / Event Sizing / Closing Connections

2012-02-21 Thread Rainer Jung
Looking at the server status on www.apache.org running 2.3.15 one can see, that about 50% of the async connections are in closing state. We created AsyncRequestWorkerFactor to control the amount of overcommitment in terms of connections relative to idle workers we allow for each process. The f

Re: AsyncRequestWorkerFactor / Event Sizing / Closing Connections

2012-02-22 Thread Rainer Jung
On 22.02.2012 09:53, Daniel Shahaf wrote: Rainer Jung wrote on Wed, Feb 22, 2012 at 04:53:34 +0100: "C" only occasionally, not with such a big percentage. E.g. on the EU mirror running 2.2 and having less traffic there is hardly ever a "C" to notice. Is that an expected 2.4/

Re: DO NOT REPLY [Bug 52748] New: build should blow up early with apr 1.3 or earlier?

2012-02-23 Thread Rainer Jung
On 23.02.2012 15:19, bugzi...@apache.org wrote: https://issues.apache.org/bugzilla/show_bug.cgi?id=52748 Bug #: 52748 Summary: build should blow up early with apr 1.3 or earlier? Product: Apache httpd-2 Version: 2.4.1 Platform: PC

Interesting server-status at w.a.o

2012-02-24 Thread Rainer Jung
Currently server-status at w.a.o shows 4 processes with no busy requests but all slots in state "G" or "L" and many connections in "closing". It seems the reason for those processes to not end are the closing connections, but if it were correct lingering close, that would have ended long ago. T

Re: ******** Interesting server-status at w.a.o

2012-02-24 Thread Rainer Jung
On 24.02.2012 12:12, Steffen wrote: Looks like the hanging "L"'s, which I reported way back, which was investigated by Stefan Could be but not necessarily. It depends on your MaxConnectionsPerChild setting. The situation at w.a.o is due to processes getting recycled. I sporadically watched th

Re: bugzilla entries for new modules

2012-02-26 Thread Rainer Jung
On 26.02.2012 00:00, Stefan Fritsch wrote: Hi someone with bugzilla admin rights, please add the following modules as components to bugzilla: mod_policy mod_firehose mod_proxy_html mod_xml2enc mod_log_debug mod_data Done Hopefully I haven't overlooked anything. I also added mod_serf and m

Re: ******** Interesting server-status at w.a.o

2012-02-26 Thread Rainer Jung
On 26.02.2012 17:46, Sander Temme wrote: On Feb 24, 2012, at 3:50 AM, Rainer Jung wrote: On 24.02.2012 12:12, Steffen wrote: Looks like the hanging "L"'s, which I reported way back, which was investigated by Stefan Could be but not necessarily. It depends on your MaxConn

Re: Win VC10 project files convert

2012-02-26 Thread Rainer Jung
On 26.02.2012 19:11, Steffen wrote: When I recall on the list is stated that .dsw and .dsp files cannot directly be used by VC10, so we should drop them. Correct me if I have read/understood wrong. But in the MS docu I read: By using Visual C++ 2010, you can open and save a project that was built

Re: Cannot start httpd v2.4.1 with mpm_build on AIX

2012-02-27 Thread Rainer Jung
On 27.02.2012 23:14, Michael Felt wrote: LoadModule unixd_module libexec/mod_unixd.so #LoadModule heartbeat_module libexec/mod_heartbeat.so #LoadModule heartmonitor_module libexec/mod_heartmonitor.so #LoadModule dav_module libexec/mod_dav.so LoadModule status_module libexec/mod_status.so LoadModu

Re: setting up testing

2012-03-03 Thread Rainer Jung
On 02.03.2012 11:44, Michael Felt wrote: Well, as long as I dont need a compiler (as I dont have one installed here, dont want test to be dependent on compiler, or dev related files not normally found on production system) this wont be a problem - I will just install the packages and then execute

Re: Proposal: adoption of mod_policy subproject

2012-03-03 Thread Rainer Jung
On 03.03.2012 15:22, Eric Covener wrote: But it would have to be clear that inclusion into trunk would not by default mean that they would be included in the next major release. Especially for mod_ftp, I think that it requires many more eyeballs and a comprehensive test suite before it should be

Re: [RE-VOTE] adoption of mod_firehose MODULE

2012-03-03 Thread Rainer Jung
On 01.03.2012 19:11, William A. Rowe Jr. wrote: Let's simply reset this whole mess. A proposal to adopt mod_firehose is attached. [X] Option 1: adopt as trunk module [ ] Option 2: adopt only as subproject [ ] Option 3: do not adopt Option 1. Regards, Rainer

Re: [RE-VOTE #2] adoption of mod_policy subproject

2012-03-03 Thread Rainer Jung
On 02.03.2012 19:28, William A. Rowe Jr. wrote: A proposal to adopt mod_policy is attached. [X] Option 1: adopt as trunk module [ ] Option 2: adopt only as subproject [ ] Option 3: do not adopt +1 for Option 1. Regards, Rainer

Re: thread ID

2012-03-06 Thread Rainer Jung
On 06.03.2012 09:25, Massimo Manghi wrote: I'm quite aware the code is public, but I thought it would be highly recommended to rely on interfaces rather than copying & pasting implementations that might change in future. Days ago I put on this list a question (that went unanswered) concerning th

Re: httpd 2.4.1 and mod_slotmem_shm / mod_proxy_balancer (AH01179)

2012-03-06 Thread Rainer Jung
On 06.03.2012 15:53, Jeff Trawick wrote: On Tue, Mar 6, 2012 at 8:38 AM, Plüm, Rüdiger, VF-Group wrote: Sounds reasonable. BTW, I started sketching out a RuntimeDir directive and ap_runtime_dir_relative() API. (i.e., I threw some code together but I don't have time this a.m. to test it ;) )

Re: log-message-tags

2012-03-06 Thread Rainer Jung
hi Jim, On 07.03.2012 00:24, Jim Jagielski wrote: Oh yeah... and how do we worry about keeping things in sync. For example, right now trunk uses 02298 and 02299, but 2.4 does not. When another log entry is added to 2.4, do we use these or skip these??? On Mar 6, 2012, at 6:21 PM, Jim Jagielski

Re: httpd 2.4.1 and mod_slotmem_shm / mod_proxy_balancer (AH01179)

2012-03-06 Thread Rainer Jung
On 07.03.2012 02:01, Daniel Ruggeri wrote: On 3/6/2012 6:32 PM, Rainer Jung wrote: I like the idea even if the current problem will be fixed without. I think the locations of all created or read file can be influenced by configuration except for some implicit files in DEFAULT_REL_RUNTIMEDIR

Re: [PATCH] DefaultRuntimeDir, ap_runtime_dir_relative()

2012-03-07 Thread Rainer Jung
Since a user can now easily move all those non-log read/write files to a central dir like /var/run/apache etc., do we think we need to keep the files themselves separate between instances by choosing unique file names (adding parent pid or similar)? Or should we document that you should *not* u

Fix for CVE-2011-4317 broke RewriteMap in forward proxy?

2012-03-23 Thread Rainer Jung
It seems using a rewrite map in a forward proxy is broken in 2.2.22. It was working until 2.2.21. The problem is the fix for CVE-2011-4317 which returns DECLINED in hook_uri2file() in mod_rewrite. The config is roughly: Listen 3128 ProxyRequests on RewriteEngine on RewriteRule http://

Re: Fix for CVE-2011-4317 broke RewriteRule in forward proxy?

2012-03-23 Thread Rainer Jung
It should be RewriteRule not RewriteMap in my previous mail. I simplified the config to a single RewriteRule but forgot to adjst subject and intro of my mail. The problem remains the same. On 23.03.2012 18:00, Rainer Jung wrote: It seems using a rewrite map in a forward proxy is broken in

Re: Fix for CVE-2011-4317 broke RewriteRule in forward proxy?

2012-03-24 Thread Rainer Jung
On 24.03.2012 07:02, Kaspar Brand wrote: On 23.03.2012 18:11, Rainer Jung wrote: It should be RewriteRule not RewriteMap in my previous mail. I simplified the config to a single RewriteRule but forgot to adjst subject and intro of my mail. The problem remains the same. Doesn't that r

<    7   8   9   10   11   12   13   14   >