Re: [WIP] mod_authnz_ldap / mod_ldap support for APR v2 LDAP API

2024-04-18 Thread Joe Orton
On Thu, Apr 18, 2024 at 09:40:21AM +0100, Graham Leggett via dev wrote: > Hi all, > > The attached patch is a current work in progress patch for httpd-trunk to use > the new apr_ldap API that just landing in APR. > > The highlights: > > - Complete replacement of the previous API. > - Will work

mod_cgi/cgid unification for 2.4.x

2024-04-16 Thread Joe Orton
(configure --enable-cgid-fdpassing) on Unix + platforms. PR 54221. [Joe Orton] diff --git a/modules/generators/cgi_common.h b/modules/generators/cgi_common.h new file mode 100644 index 00..66f9418f21 --- /dev/null +++ b/modules/generators/cgi_common.h @@ -0,0 +1,639 @@ +/* Licensed

Re: mod_systemd: refactor to get rid of libsystemd dependency?

2024-04-03 Thread Joe Orton
On Tue, Apr 02, 2024 at 12:25:40PM +0200, Rainer Jung wrote: > Hi there, > > in the light of the recent xz attack I was wondering, whether we should also > reduce our library dependencies by no longer using sd_notify() in > mod_systemd (thus loading libsystemd and all of its dependencies), but >

Re: [VOTE] Release httpd-2.4.59-rc1 as httpd-2.4.59

2024-04-03 Thread Joe Orton
On Wed, Apr 03, 2024 at 08:26:09AM -0400, Eric Covener wrote: > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a SHORTENED VOTE to release > this candidate tarball httpd-2.4.59-rc1 as 2.4.59: > [X] +1:

Re: Failing test t/apache/pr64339.t

2024-04-03 Thread Joe Orton
On Tue, Apr 02, 2024 at 08:46:46PM -0400, Eric Covener wrote: > This could be due to none of these happening: > - mod_mime didn't send a charset from backend > - no BOM > - no xml2EncDefault (8859-1 effectively by default) on frontend > > To make the conf match the test code, this works for me to

Re: svn commit: r1915947 - /httpd/httpd/branches/2.4.x/STATUS

2024-03-05 Thread Joe Orton
On Tue, Mar 05, 2024 at 11:25:12AM +0100, jean-frederic clere wrote: > On 2/29/24 10:54, Joe Orton wrote: > > On Thu, Feb 22, 2024 at 01:35:06PM -, jfcl...@apache.org wrote: > > > Author: jfclere > > > Date: Thu Feb 22 13:35:06 2024 > > > New Revi

Re: svn commit: r1916068 - in /httpd/httpd/trunk: .github/workflows/linux.yml test/travis_before_linux.sh

2024-03-01 Thread Joe Orton
On Fri, Mar 01, 2024 at 01:52:15PM +0100, Yann Ylavic wrote: > On Fri, Mar 1, 2024 at 1:42 PM Yann Ylavic wrote: > > > > On Fri, Mar 1, 2024 at 1:24 PM Joe Orton wrote: > > > > > > Do you still want that > > > TestSSLCA.pm change merged? > > >

Re: svn commit: r1916068 - in /httpd/httpd/trunk: .github/workflows/linux.yml test/travis_before_linux.sh

2024-03-01 Thread Joe Orton
On Fri, Mar 01, 2024 at 12:59:10PM +0100, Yann Ylavic wrote: > On Fri, Mar 1, 2024 at 11:15 AM wrote: > > > > Author: jorton > > Date: Fri Mar 1 10:15:13 2024 > > New Revision: 1916068 > > > > URL: http://svn.apache.org/viewvc?rev=1916068=rev > > Log: > > CI: add OpenSSL 3.2, test OpenSSL 3.x

Re: svn commit: r1915947 - /httpd/httpd/branches/2.4.x/STATUS

2024-02-29 Thread Joe Orton
On Thu, Feb 22, 2024 at 01:35:06PM -, jfcl...@apache.org wrote: > Author: jfclere > Date: Thu Feb 22 13:35:06 2024 > New Revision: 1915947 > > URL: http://svn.apache.org/viewvc?rev=1915947=rev > Log: > Propose. CMake builds fail withi: "fatal error C1083: Cannot open include > file:

Re: svn commit: r1915740 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr61574.txt modules/ssl/ssl_engine_init.c

2024-02-20 Thread Joe Orton
On Fri, Feb 16, 2024 at 09:52:04PM +0100, Christophe JAILLET wrote: > Le 12/02/2024 à 09:37, jor...@apache.org a écrit : > > Author: jorton > > Date: Mon Feb 12 08:37:35 2024 > > New Revision: 1915740 > > > > URL: http://svn.apache.org/viewvc?rev=1915740=rev > > Log: ... > r1825124 was a

Re: libapreq subproject roll call

2024-02-16 Thread Joe Orton
On Fri, Feb 16, 2024 at 08:10:57AM -0500, Eric Covener wrote: > I count myself as a release vote of last resort only, but i don't > think we should be committing to future fixes/releases if nearly > everyone is in this category. Thanks for raising it here, Eric. Same for me. Regards, Joe

Re: release apreq 2.18 and mothball the project

2024-02-16 Thread Joe Orton
as PMC chair to remove you from dev@ and you are now banned from posting in the future. - Project Chair of HTTP Server, Joe Orton

Re: using changes-entries or write in CHANGES directly

2024-02-14 Thread Joe Orton
On Wed, Feb 14, 2024 at 11:28:15AM +0100, jean-frederic clere wrote: > So for 2.4.x on my accepted back port I have don't need changes-entries and > I have to process CHANGES by hands as I missed creating a changes-entries > file in trunk. If you file a Github PR for the backport you can still

Re: svn commit: r1915534 - in /httpd/httpd/branches/2.4.x: ./ modules/cache/mod_socache_shmcb.c modules/proxy/balancers/mod_lbmethod_heartbeat.c os/unix/unixd.c server/buildmark.c server/scoreboard.c

2024-02-02 Thread Joe Orton
On Fri, Feb 02, 2024 at 03:29:34PM +0100, Ruediger Pluem wrote: > > Modified: httpd/httpd/branches/2.4.x/server/util_expr_parse.c > > URL: > > http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/util_expr_parse.c?rev=1915534=1915533=1915534=diff > >

Re: svn commit: r1915516 - in /httpd/httpd/branches/2.4.x: ./ CHANGES configure.in docs/man/htpasswd.1 support/htpasswd.c support/passwd_common.c support/passwd_common.h

2024-02-02 Thread Joe Orton
On Fri, Feb 02, 2024 at 08:29:48AM +0100, Ruediger Pluem wrote: > > > On 2/1/24 5:54 PM, jor...@apache.org wrote: > > Author: jorton > > Date: Thu Feb 1 16:54:40 2024 > > New Revision: 1915516 > > > > URL: http://svn.apache.org/viewvc?rev=1915516=rev > > Log: ... > > -" -B Force

Re: PR #363

2024-01-25 Thread Joe Orton
On Thu, Jan 25, 2024 at 08:12:24AM +0100, Ruediger Pluem wrote: > Tried it in r1915391 and it seems to work. Not sure if there are > general downsides / objections with regards to symlinks in our > repository. But trunk is CTR :-). Oh, that looks really nice. +1 Thanks to you, Rich, and Mayank

Re: svn commit: r1914804 - in /httpd/httpd/trunk: changes-entries/flushing-chunks.txt modules/http/chunk_filter.c

2023-12-20 Thread Joe Orton
On Wed, 20 Dec 2023, 16:30 Yann Ylavic, wrote: > On Wed, Dec 20, 2023 at 5:20 PM Yann Ylavic wrote: > > > > On Wed, Dec 20, 2023 at 4:56 PM wrote: > > > > > > Author: jorton > > > Date: Wed Dec 20 15:56:15 2023 > > > New Revision: 1914804 > > > > > > URL:

Re: [PATCH] mod_deflate: remove filter after seeing EOS

2023-12-20 Thread Joe Orton
On Wed, Dec 20, 2023 at 04:24:32PM +0100, Ruediger Pluem wrote: > On 12/20/23 4:08 PM, Yann Ylavic wrote: > > On Wed, Dec 20, 2023 at 2:40 PM Joe Orton wrote: > >> https://github.com/apache/httpd/pull/400 > > > > Thanks, looks good to me. > > +1 Thanks

Re: [PATCH] mod_deflate: remove filter after seeing EOS

2023-12-20 Thread Joe Orton
On Wed, Dec 20, 2023 at 10:07:19AM -0500, Eric Norris via dev wrote: > Thanks Joe, and no need to apologize, that's totally understandable. > > I also appreciate you taking a look at the chunk filter behavior as that > was actually going to be the next patch I proposed. I had written it here: >

Re: [PATCH] mod_deflate: remove filter after seeing EOS

2023-12-20 Thread Joe Orton
On Mon, Oct 30, 2023 at 10:47:44AM -0400, Eric Norris via dev wrote: > Hello again, > > I'd like to politely bump this message to see if anyone would mind > taking a look at this patch, either here or on GitHub. Apologies, I got quite distracted by the "rapid reset" security stuff earlier in

Re: svn commit: r1914045 - in /httpd/httpd/trunk: changes-entries/ab-source-address.txt docs/man/ab.1 support/ab.c

2023-12-19 Thread Joe Orton
On Wed, Nov 22, 2023 at 05:19:50PM -, minf...@apache.org wrote: > Author: minfrin > Date: Wed Nov 22 17:19:49 2023 > New Revision: 1914045 > > URL: http://svn.apache.org/viewvc?rev=1914045=rev > Log: > Add an option to specify a source address. Saw this in the backports list - doesn't this

Re: svn commit: r1914365 - in /httpd/httpd/trunk: changes-entries/ssl-providers.txt docs/log-message-tags/next-number docs/manual/mod/mod_ssl.xml modules/ssl/ssl_engine_init.c modules/ssl/ssl_engine_p

2023-12-13 Thread Joe Orton
On Wed, Dec 13, 2023 at 11:33:16AM +0100, Ingo Franzki wrote: > On 13.12.2023 10:55, Joe Orton wrote: > > On Wed, Dec 06, 2023 at 01:02:01PM +0100, Yann Ylavic wrote: > >> Oh, scratch that. Actually the engine API requires a "SSLCryptoDevice > >> pkcs11&q

Re: svn commit: r1914365 - in /httpd/httpd/trunk: changes-entries/ssl-providers.txt docs/log-message-tags/next-number docs/manual/mod/mod_ssl.xml modules/ssl/ssl_engine_init.c modules/ssl/ssl_engine_p

2023-12-13 Thread Joe Orton
On Wed, Dec 06, 2023 at 01:02:01PM +0100, Yann Ylavic wrote: > Oh, scratch that. Actually the engine API requires a "SSLCryptoDevice > pkcs11" too, so we wouldn't take the !mc->szCryptoDevice path. > Sorry for the noise. Yes it should remain compatible like that, though you prompted me to

Re: mod_dav_fs locking / Re: apr_dbm and concurrency

2023-11-24 Thread Joe Orton
On Thu, Nov 23, 2023 at 05:42:10PM +, Emmanuel Dreyfus wrote: > On Thu, Nov 23, 2023 at 05:36:06PM +0000, Joe Orton wrote: > > 3) in the mean time I worked up a PR for mod_dav_fs which adds a global > > mutex around the dbm lockdb use. This passes my stress tests for the

mod_dav_fs locking / Re: apr_dbm and concurrency

2023-11-23 Thread Joe Orton
Adding dev@httpd to a dev@apr thread about apr_dbm locking being broken. On Sun, Nov 12, 2023 at 07:43:13AM -0600, Greg Stein wrote: > Or, apps can stick to an older APR. ... we don't have to carry this forward > into future versions of APR (IMO). > > To your point, it is probably a single page

Re: [VOTE] Release httpd-2.4.58-rc3 as httpd-2.4.58

2023-10-16 Thread Joe Orton
On Mon, Oct 16, 2023 at 05:08:11PM +0200, Stefan Eissing via dev wrote: > Hi all, > > after fixing my merge mistake in rc2 (sorry!), we go again: > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE

Re: windows block

2023-10-16 Thread Joe Orton
On Mon, Oct 16, 2023 at 04:45:29PM +0200, Stefan Eissing via dev wrote: > Do I make an rc3 nevertheless? Do we know someone else using VC? > > Advice appreciated. +1 for rc3 at r1913027. Someone using VC needs to work out how to fix that rather than just report it's broken, it shouldn't hold

Re: svn commit: r1913006 - in /httpd/httpd/branches/2.4.x: ./modules/http2/h2.h

2023-10-16 Thread Joe Orton
On Mon, Oct 16, 2023 at 03:12:24PM +0200, SteffenAL wrote: > > checkout. > > > Looks like h2_ws.h : > > > Generating Code... > h2_ws.h > C:\VS17\Win32\httpd-2.4\modules\http2\h2.h(173,17): error C2143: syntax > error: missing ';' before '*' >

Re: svn commit: r1913019 - in /httpd/httpd/trunk/modules/http2: h2_session.c h2_ws.c

2023-10-16 Thread Joe Orton
On Mon, Oct 16, 2023 at 02:54:58PM +0200, Ruediger Pluem wrote: > Fails for me as well. Not sure what fails for Joe such that he removed the > include, but if it fails in case H2_USE_WEBSOCKETS is > not 1 I guess we could move the include (or even all) below the > > #if H2_USE_WEBSOCKETS > >

Re: [PATCH] fix mod_h2 with older nghttp2

2023-10-16 Thread Joe Orton
BTW is modules/http2 really CTR for 2.4.x? STATUS says only mod_proxy_http2 is. Anyway: I am +1 for r1913005 and r1913019 for 2.4.x, latter was sufficient to get 2.4 building on RHEL8 again (if only we had a CI to do this, oh...). Regards, Joe

[PATCH] fix mod_h2 with older nghttp2

2023-10-16 Thread Joe Orton
Looks like this broke with the websockets backport. mod_h2 is failing to compile on versions of nghttp2 without NGHTTP2_SETTINGS_ENABLE_CONNECT_PROTOCOL - looks like this was added in nghttp2 v1.34.0 [1] so how about something like this, or is there a better way? (configure check for a

Re: mod_ssl SSL_OP_IGNORE_UNEXPECTED_EOF: "unexpected eof while reading"

2023-09-08 Thread Joe Orton
On Thu, Sep 07, 2023 at 06:46:01PM +0200, Yann Ylavic wrote: > On Thu, Sep 7, 2023 at 6:09 PM Yann Ylavic wrote: > > > > On Wed, Aug 30, 2023 at 1:22 PM Rainer Jung wrote: > > > > > > OpenSSL 3 flags some abortive shutdowns as an error different to what > > > 1.1.1 did. This results in info log

Re: mod_ssl SSL_OP_IGNORE_UNEXPECTED_EOF: "unexpected eof while reading"

2023-09-07 Thread Joe Orton
On Wed, Aug 30, 2023 at 01:21:11PM +0200, Rainer Jung wrote: > Hi there, > > OpenSSL 3 flags some abortive shutdowns as an error different to what 1.1.1 > did. This results in info log output in httpd: > > [Tue Aug 29 12:33:06.787210 2023] [ssl:info] [pid 1994673:tid 1994737] SSL > Library

Re: svn commit: r1911908 - /httpd/httpd/branches/2.4.x/STATUS

2023-08-25 Thread Joe Orton
On Fri, Aug 25, 2023 at 12:11:38PM +0200, Ruediger Pluem wrote: > > == > > --- httpd/httpd/branches/2.4.x/STATUS (original) > > +++ httpd/httpd/branches/2.4.x/STATUS Fri Aug 25 07:52:31 2023 > > @@ -225,11 +225,12 @@

Re: svn commit: r1910861 - /httpd/httpd/trunk/support/ab.c

2023-07-10 Thread Joe Orton
On Mon, Jul 10, 2023 at 11:12:09AM +0200, Yann Ylavic wrote: > I think this is not reached with rtnevents == POLLOUT|POLLHUP because > it takes the first POLLIN|POLLHUP continue-branch. > I moved the check for POLLOUT first in r1910911, which fixed the issue for me. Perfect, works for me too -

Re: svn commit: r1910861 - /httpd/httpd/trunk/support/ab.c

2023-07-10 Thread Joe Orton
On Fri, Jul 07, 2023 at 03:52:46PM -, yla...@apache.org wrote: > Author: ylavic > Date: Fri Jul 7 15:52:45 2023 > New Revision: 1910861 > > URL: http://svn.apache.org/viewvc?rev=1910861=rev > Log: > ab: Fix accounting of started connections. > > Revert when a kept alive connection is

Re: svn commit: r1910820 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr60182.txt modules/ssl/ssl_util_stapling.c

2023-07-07 Thread Joe Orton
On Thu, Jul 06, 2023 at 10:58:07PM +0200, Christophe JAILLET wrote: > Le 06/07/2023 à 18:11, jor...@apache.org a écrit : > > Author: jorton > > Date: Thu Jul 6 16:11:56 2023 > > New Revision: 1910820 > > > > URL: http://svn.apache.org/viewvc?rev=1910820=rev > > Log: > > Merge r1875355 from

Re: [VOTE] Switch read/write repository from Subversion to Git

2023-05-04 Thread Joe Orton
On Thu, May 04, 2023 at 10:34:32AM +0200, Ruediger Pluem wrote: > This is a formal vote on whether we should move our read/write repository > from Subversion to Git. > This means that our latest read/write repository will be no longer available > via svn.apache.org. It > will be available via

Re: ci vs PR approvals? (was: [apache/httpd] Fix a possible NULL pointer dereference in hook_uri2file (PR #355))

2023-05-04 Thread Joe Orton
On Wed, May 03, 2023 at 02:31:35PM -0500, Daniel Gruno wrote: > I am +1 on moving. I do not have any particular love for git or svn on their > own, and I realize that the proposed change does make outside contributions > and certain workflows easier. +1 for the same reasons here. Might be better

Re: svn commit: r1909135 - in /httpd/httpd/trunk: CHANGES include/ap_mmn.h server/core.c

2023-04-21 Thread Joe Orton
On Wed, Apr 19, 2023 at 08:08:49PM +0200, Yann Ylavic wrote: > On Fri, Apr 14, 2023 at 4:02 PM wrote: > > > > Author: minfrin > > Date: Fri Apr 14 14:02:11 2023 > > New Revision: 1909135 > > > > URL: http://svn.apache.org/viewvc?rev=1909135=rev > > Log: > > core: Be explicit if an enclosing

Re: [VOTE] Release httpd-2.4.57-rc1 as httpd-2.4.57

2023-04-03 Thread Joe Orton
On Sun, Apr 02, 2023 at 12:10:25PM -0400, Eric Covener wrote: > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.57-rc1 as 2.4.57:

Re: svn commit: r1908835 - /httpd/httpd/trunk/.github/workflows/linux.yml

2023-03-31 Thread Joe Orton
On Fri, Mar 31, 2023 at 09:47:05AM +0200, Yann Ylavic wrote: > On Fri, Mar 31, 2023 at 9:22 AM wrote: > > > > Author: jorton > > Date: Fri Mar 31 07:21:37 2023 > > New Revision: 1908835 > > > > URL: http://svn.apache.org/viewvc?rev=1908835=rev > > Log: > > Try running CI for 2.* tags. [skip ci] >

Re: svn commit: r1908684 - in /httpd/httpd/trunk: docs/log-message-tags/next-number modules/cache/mod_cache_disk.c

2023-03-28 Thread Joe Orton
On Fri, Mar 24, 2023 at 08:50:19AM -, gbec...@apache.org wrote: > Author: gbechis > Date: Fri Mar 24 08:50:19 2023 > New Revision: 1908684 > > URL: http://svn.apache.org/viewvc?rev=1908684=rev > Log: > add error message when storing data to temp file fails. > Github: closes #182 Hi Giovanni,

Re: svn commit: r1908537 - /httpd/httpd/trunk/modules/ssl/

2023-03-20 Thread Joe Orton
On Sun, Mar 19, 2023 at 09:30:47PM -, yla...@apache.org wrote: > Author: ylavic > Date: Sun Mar 19 21:30:47 2023 > New Revision: 1908537 > > URL: http://svn.apache.org/viewvc?rev=1908537=rev > Log: > mod_ssl: Fix deprecation warnings with openssl-3. Great stuff, thank you Yann!

Re: svn commit: r1908060 - in /httpd/httpd/trunk/test/modules: http1/htdocs/cgi/ http2/ http2/htdocs/cgi/ md/ tls/ tls/htdocs/a.mod-tls.test/ tls/htdocs/b.mod-tls.test/

2023-03-07 Thread Joe Orton
On Tue, Mar 07, 2023 at 09:15:59AM +0100, Stefan Eissing via dev wrote: > > > > Am 06.03.2023 um 17:53 schrieb Joe Orton : > > > > [resent to dev@] > > > > On Sat, Mar 04, 2023 at 01:40:39PM -, ic...@apache.org wrote: > >> Author: icing > >

Re: svn commit: r1908060 - in /httpd/httpd/trunk/test/modules: http1/htdocs/cgi/ http2/ http2/htdocs/cgi/ md/ tls/ tls/htdocs/a.mod-tls.test/ tls/htdocs/b.mod-tls.test/

2023-03-06 Thread Joe Orton
[resent to dev@] On Sat, Mar 04, 2023 at 01:40:39PM -, ic...@apache.org wrote: > Author: icing > Date: Sat Mar 4 13:40:38 2023 > New Revision: 1908060 > > URL: http://svn.apache.org/viewvc?rev=1908060=rev > Log: > Test case updates related to macOS ventura changes: > > - python 3.11

Re: [VOTE] [VOTE] Release httpd-2.4.56-rc1 as httpd-2.4.56

2023-03-06 Thread Joe Orton
On Sun, Mar 05, 2023 at 04:31:34PM -0500, Eric Covener wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball

Re: svn commit: r1907974 - in /httpd/httpd/trunk: CMakeLists.txt modules/dav/fs/config6.m4 modules/dav/fs/mod_dav_fs.c modules/dav/fs/mod_dav_fs.dsp modules/dav/fs/repos.c modules/dav/fs/repos.h modul

2023-03-02 Thread Joe Orton
On Thu, Mar 02, 2023 at 02:36:32PM -, m...@apache.org wrote: > Author: manu > Date: Thu Mar 2 14:36:31 2023 > New Revision: 1907974 > > URL: http://svn.apache.org/viewvc?rev=1907974=rev > Log: > Add RFC4331 quotas for mod_dav_fs Hi Emmanuel - looks like you forgot to "svn add" the new

Re: [VOTE] broader RTC exception for 2.4.x CI changes

2023-02-21 Thread Joe Orton
Thanks all, applied in r1907783. Regards, Joe

Re: svn commit: r1907680 - /httpd/httpd/trunk/modules/dav/main/ms_wdv.c

2023-02-15 Thread Joe Orton
On Wed, Feb 15, 2023 at 02:07:14PM -, m...@apache.org wrote: > Author: manu > Date: Wed Feb 15 14:07:14 2023 > New Revision: 1907680 > > URL: http://svn.apache.org/viewvc?rev=1907680=rev > Log: > Fix warnings Thanks! There are a still a couple more warnings with GCC 10 from a %s argument

[VOTE] broader RTC exception for 2.4.x CI changes

2023-02-15 Thread Joe Orton
Per my previous Travis is dead, long live GitHub actions. I propose to broaden the RTC exception in 2.4.x/STATUS to allow CI config changes and scripts to be merged from trunk: Index: STATUS === --- STATUS (revision 1907679)

CI status update: Travis out, GitHub Actions in

2023-02-15 Thread Joe Orton
Support for Travis has now been dropped, so we are relying only on GitHub Actions for CI from today. There are some gaps in the GHA configuration compared to what we had running in Travis: notably, we're currently only testing on the latest Ubuntu release, and nothing has been ported back to

Re: [VOTE] Release httpd-2.4.55-rc1 as httpd-2.4.55

2023-01-10 Thread Joe Orton
On Tue, Jan 10, 2023 at 10:21:55AM -0500, Eric Covener wrote: > On Tue, Jan 10, 2023 at 10:17 AM Giovanni Bechis wrote: ... > > In file included from /usr/include/openssl/asn1.h:27, > > from /usr/include/openssl/rsa.h:21, > > from ab.c:169: > >

Re: [VOTE] Release httpd-2.4.55-rc1 as httpd-2.4.55

2023-01-10 Thread Joe Orton
On Tue, Jan 10, 2023 at 08:40:52AM -0500, Eric Covener wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball

Re: svn commit: r1906487 - /httpd/httpd/trunk/modules/dav/main/util.c

2023-01-10 Thread Joe Orton
On Tue, Jan 10, 2023 at 07:30:37AM +0100, Ruediger Pluem wrote: > On 1/9/23 5:16 PM, Joe Orton wrote: > > It seems consistent with other error cases to return straight away, but > > I'm not following the second part, can you explain more? An 'N' > > followed by whites

Re: svn commit: r1906487 - /httpd/httpd/trunk/modules/dav/main/util.c

2023-01-09 Thread Joe Orton
On Mon, Jan 09, 2023 at 04:47:33PM +0100, Ruediger Pluem wrote: > On 1/9/23 1:01 PM, jor...@apache.org wrote: > > Author: jorton > > Date: Mon Jan 9 12:01:56 2023 > > New Revision: 1906487 > > > > URL: http://svn.apache.org/viewvc?rev=1906487=rev > > Log: > > * modules/dav/main/util.c

Re: MS-WDV (was Re: Help with buckets)

2022-12-02 Thread Joe Orton
On Fri, Dec 02, 2022 at 08:53:07AM +, Emmanuel Dreyfus wrote: > Hello > > I made some progress with the combined GET+PROPFIND specified > by MS-WDV (for a summary, see > https://lists.apache.org/thread/57s1vvl6k9qpdv5ym7mtcl29bd933w7k ) > > Attached is the diff against trunk, form comments.

New committer: Emmanuel Dreyfus

2022-11-08 Thread Joe Orton
The Project Management Committee (PMC) for the Apache HTTP Server has invited Emmanuel Dreyfus to become a committer and we are pleased to announce that they have accepted. Welcome, Emmanuel! Regards, Joe

Re: [libapreq2] nits to pick about the patches to util.c over the past few years

2022-10-31 Thread Joe Orton
On Sun, Oct 30, 2022 at 12:09:02AM -0400, Joe Schaefer wrote: > Forgive me for summarizing, but I didn’t come here expecting help, much > less collaboration on a solution. I came here expecting to be scolded for > having the temerity to critique the quality of the patch sets you’ve been >

CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption

2022-08-25 Thread Joe Orton
Severity: important Description: A flaw in libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

[RESULT: PASS] Re: [VOTE] Release libapreq2-2.17

2022-08-25 Thread Joe Orton
Thanks for testing. The release is approved: PMC votes: +1 from ylavic, jfclere, jorton I will promote the release and announce it. Regards, Joe

Re: [VOTE] Release libapreq2-2.17

2022-08-25 Thread Joe Orton
On Thu, Aug 18, 2022 at 12:31:56PM +0100, Joe Orton wrote: > Hi, I've prepared a candidate release tarball for libapreq2 v2.17 here: > > https://dist.apache.org/repos/dist/dev/httpd/libapreq/ > > I would like to call a VOTE over the next week to release this candidate >

[VOTE] Release libapreq2-2.17

2022-08-18 Thread Joe Orton
Hi, I've prepared a candidate release tarball for libapreq2 v2.17 here: https://dist.apache.org/repos/dist/dev/httpd/libapreq/ I would like to call a VOTE over the next week to release this candidate tarball as v2.17: [ ] +1: It's not just good, it's good enough! [ ] +0: Let's have a talk. [ ]

Re: svn commit: r1894982 - /httpd/apreq/trunk/library/util.c

2022-08-18 Thread Joe Orton
On Wed, Aug 17, 2022 at 06:17:23PM +0200, Yann Ylavic wrote: > I fixed it in r1903496 by requiring that the name in a name=value pair > only be a token, with no equal sign the attribute is a value only. Thanks a lot for committing all the fixes, test suite is passing here now. Regards, Joe

Re: svn commit: r1894982 - /httpd/apreq/trunk/library/util.c

2022-08-17 Thread Joe Orton
On Wed, Aug 17, 2022 at 02:05:09PM +0100, Joe Orton wrote: > On Fri, Nov 12, 2021 at 06:12:58PM -, yla...@apache.org wrote: > > Author: ylavic > > Date: Fri Nov 12 18:12:58 2021 > > New Revision: 1894982 > > > > URL: http://svn.apache.o

Re: svn commit: r1894982 - /httpd/apreq/trunk/library/util.c

2022-08-17 Thread Joe Orton
On Fri, Nov 12, 2021 at 06:12:58PM -, yla...@apache.org wrote: > Author: ylavic > Date: Fri Nov 12 18:12:58 2021 > New Revision: 1894982 > > URL: http://svn.apache.org/viewvc?rev=1894982=rev > Log: > apreq_header_attribute: Search for the exact attribute name. > > Improve the parsing of the

Re: [VOTE] Release httpd-2.4.54-rc3 as httpd-2.4.54

2022-06-07 Thread Joe Orton
On Mon, Jun 06, 2022 at 04:25:31PM +0200, Stefan Eissing wrote: > Here we go again! Sorry for the repeats, but that is why we build candidates, > right? > > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would

Re: strcasecmp raises its...

2022-05-19 Thread Joe Orton
On Wed, May 18, 2022 at 05:34:22PM +0200, Ruediger Pluem wrote: > On 5/18/22 4:55 PM, Joe Orton wrote: > > I think for httpd it is only safe and sane to run httpd with LANG=C, we > > do this in the default service scripts in Fedora/RHEL for a very long > > time. Other than

Re: strcasecmp raises its...

2022-05-18 Thread Joe Orton
On Wed, May 18, 2022 at 12:53:57PM +0200, Ruediger Pluem wrote: > > > On 5/18/22 12:19 PM, Stefan Eissing wrote: > > 2022 and we discuss strcasecmp() again? > > > > Background: OpenSSL 3.0.3 added OPENSSL_strcasecmp() and friends and there > > are several issue around their implementation. Up

Re: Trouble in rusttls land?

2022-05-11 Thread Joe Orton
On Tue, May 10, 2022 at 10:50:12PM +0200, Stefan Eissing wrote: > Will look at it tomorrow. Could we cache the crates if building them is the source of unreliability? It looks like we just have to add a couple of extra directories to the cache list:

Re: Fwd: FYI: change to travis-ci emailer could cause moderation headaches

2022-05-10 Thread Joe Orton
On Wed, Jan 26, 2022 at 08:58:14AM -0500, Eric Covener wrote: > I noticed I stopped getting "Travis CI" emails for httpd around 10/21. > But I see people still discussing CI failures, so I am a little > confused. Maybe they are only seeing it in the context of PRs. > > Did we lose notifications

Re: [VOTE] Release httpd-2.4.53-rc2 as httpd-2.4.53

2022-03-10 Thread Joe Orton
On Wed, Mar 09, 2022 at 05:19:22PM +0100, Stefan Eissing wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball

Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53

2022-03-08 Thread Joe Orton
On Tue, Mar 08, 2022 at 02:01:42PM +0100, Ruediger Pluem wrote: > > I got a new "may be uninitialized" warning with with the GCC 12 shapshot > > used in Fedora 36 (which is still under development and can be > > unreliable). I think it's unreachable, if we enter here: > > > >

Re: [VOTE] Release httpd-2.4.53-rc1 as httpd-2.4.53

2022-03-08 Thread Joe Orton
On Mon, Mar 07, 2022 at 04:55:54PM +0100, Stefan Eissing wrote: > Hi all, > > Please find below the proposed release tarball and signatures: > > https://dist.apache.org/repos/dist/dev/httpd/ > > I would like to call a VOTE over the next few days to release > this candidate tarball

Re: candidate branch/tag names

2022-03-08 Thread Joe Orton
On Mon, Mar 07, 2022 at 01:46:51PM +0100, Stefan Eissing wrote: > Joe, > > I'll change the release candidate tag/branch names and if that works, > you can strip some regex from the travis setup. Looks good to me, thanks Stefan. I've updated the regexes. Regards, Joe

Re: backports

2022-03-08 Thread Joe Orton
On Sun, Mar 06, 2022 at 05:56:36PM +0200, Graham Leggett wrote: > I am however strongly opposed for Github to be our only promotion process. > > CI is great right until the point you get your first unrelated test failure, > then it is a nightmare. The collectd project was completely stuck unable

Re: backports

2022-03-08 Thread Joe Orton
On Mon, Mar 07, 2022 at 01:28:19PM +0200, Graham Leggett wrote: > On 07 Mar 2022, at 11:21, Stefan Eissing wrote: > > > I'd really like, as a reviewer of backports, you can: > > - see that it passes all our tests. No need to patch/compile/test locally. > > “No need to patch/compile locally" is

Re: backports

2022-03-08 Thread Joe Orton
On Fri, Mar 04, 2022 at 09:40:49AM -0800, Roy T. Fielding wrote: > > On Mar 4, 2022, at 6:17 AM, Eric Covener wrote: > > > > On Fri, Mar 4, 2022 at 9:05 AM Jim Jagielski wrote: > >> > >> A question: Would it be easier for all this if we moved to being Github > >> canon? > > > > I think it is

Re: svn commit: r1898566 - in /httpd/httpd/branches/2.4.x: ./ modules/aaa/ modules/cache/ modules/dav/fs/ modules/dav/lock/ modules/mappers/ modules/proxy/

2022-03-08 Thread Joe Orton
On Fri, Mar 04, 2022 at 09:24:37AM +0100, Stefan Eissing wrote: > > Am 04.03.2022 um 08:32 schrieb Ruediger Pluem : > > On 3/3/22 5:40 PM, Joe Orton wrote: > >> Oh, good question. I'm not sure how the "branch" variable appears in an > >> arbitrary bra

Re: svn commit: r1898566 - in /httpd/httpd/branches/2.4.x: ./ modules/aaa/ modules/cache/ modules/dav/fs/ modules/dav/lock/ modules/mappers/ modules/proxy/

2022-03-03 Thread Joe Orton
On Thu, Mar 03, 2022 at 05:11:52PM +0100, Ruediger Pluem wrote: > On 3/3/22 4:49 PM, Joe Orton wrote: > > Folks (in no way pointing a finger at Jim who just did merging duty), it > > is not hard to test your backport proposals, either in an SVN branch or > > a github

Re: svn commit: r1898566 - in /httpd/httpd/branches/2.4.x: ./ modules/aaa/ modules/cache/ modules/dav/fs/ modules/dav/lock/ modules/mappers/ modules/proxy/

2022-03-03 Thread Joe Orton
On Thu, Mar 03, 2022 at 01:30:47PM -, j...@apache.org wrote: > Author: jim > Date: Thu Mar 3 13:30:46 2022 > New Revision: 1898566 > > URL: http://svn.apache.org/viewvc?rev=1898566=rev > Log: > dbm backport approved and merged This has broken the CI with several new warnings and empty

Re: Fwd: FYI: change to travis-ci emailer could cause moderation headaches

2022-01-26 Thread Joe Orton
On Wed, Jan 26, 2022 at 08:58:14AM -0500, Eric Covener wrote: > I noticed I stopped getting "Travis CI" emails for httpd around 10/21. > But I see people still discussing CI failures, so I am a little > confused. Maybe they are only seeing it in the context of PRs. > > Did we lose notifications

Re: svn commit: r1897156 - in /httpd/httpd/trunk: CHANGES docs/log-message-tags/next-number docs/manual/mod/core.xml modules/dav/main/mod_dav.c server/core.c

2022-01-18 Thread Joe Orton
On Mon, Jan 17, 2022 at 04:10:51PM -, minf...@apache.org wrote: > Author: minfrin > Date: Mon Jan 17 16:10:51 2022 > New Revision: 1897156 > > URL: http://svn.apache.org/viewvc?rev=1897156=rev > Log: > core: Allow an optional expression to be specified for an effective > path in the

Re: TLS neverbleed design

2022-01-17 Thread Joe Orton
On Wed, Jan 12, 2022 at 03:37:05PM +0100, Stefan Eissing wrote: > My current, rough idea would be: > > - fork a process, like mod_cgid does, that can be communicated > with over a unix domain socket > - have an ap_hook to load a key and return an opaque key handle > - have an ap_hooks to

Re: svn commit: r1896976 - /httpd/httpd/branches/2.4.x/STATUS

2022-01-17 Thread Joe Orton
On Sun, Jan 16, 2022 at 03:35:15PM -0600, William A Rowe Jr wrote: > 4 day ago, you all saw this. 6 years ago, you all started using this on trunk. > > Don't know what I can to do help this along and honor the library > author's wishes for all of us to walk away from the dead fork, and use >

Re: Possible apr 1.7.1 showstopper from httpd test framework

2022-01-14 Thread Joe Orton
On Fri, Jan 14, 2022 at 11:37:35AM +0100, Ruediger Pluem wrote: > > > On 1/14/22 6:47 AM, William A Rowe Jr wrote: > > In addition to a broken release of brotli (where enc/dec don't specify > > -lbrotlicommon, > > even on trunk, for openssl and other consumers to ferret out that binding), > >

Re: ocsp.t failing

2022-01-12 Thread Joe Orton
On Wed, Jan 05, 2022 at 12:11:50PM +, Joe Orton wrote: > On Sat, Dec 25, 2021 at 10:56:59AM +0100, Christophe JAILLET wrote: > > Hi, > > > > the last travis jobs have failed on trunk because of ocsp.t. > > > > Unless I missed something, the only chan

Re: TLS neverbleed design

2022-01-12 Thread Joe Orton
On Fri, Jan 07, 2022 at 11:34:47AM +0100, Stefan Eissing wrote: > A nice new year to everyone! > > I was looking at the design of https://github.com/h2o/neverbleed which > - loads TLS private keys in a separate process > - creates EVP_PKEY instances that in the sign callback call into the >

Re: ocsp.t failing

2022-01-05 Thread Joe Orton
On Sat, Dec 25, 2021 at 10:56:59AM +0100, Christophe JAILLET wrote: > Hi, > > the last travis jobs have failed on trunk because of ocsp.t. > > Unless I missed something, the only change with previous successful build is > r1896361: > >

Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52

2021-12-17 Thread Joe Orton
On Fri, 17 Dec 2021, 10:56 Ruediger Pluem, wrote: > > > On 12/17/21 10:54 AM, Joe Orton wrote: > > On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > >> I would like to call a VOTE over the next few days to release > >> this candidate tarball ht

Re: [VOTE] Release httpd-2.4.52-rc1 as httpd-2.4.52

2021-12-17 Thread Joe Orton
On Thu, Dec 16, 2021 at 03:03:13PM +0100, Stefan Eissing wrote: > I would like to call a VOTE over the next few days to release > this candidate tarball httpd-2.4.52-rc1 as 2.4.52: > [X] +1: It's not just good, it's good enough! > [ ] +0: Let's have a talk. > [ ] -1: There's trouble in paradise.

Re: travis setup for 2.4.x

2021-12-14 Thread Joe Orton
On Tue, Dec 14, 2021 at 11:34:24AM +0100, Stefan Eissing wrote: > How is the relation between the .travis.yml in trunk and 2.4.x? We have > checks for jobs in trunk with > > - if: *condition_not_24x > > and those jobs do not appear in the 2.4.x/.travis.yml. Is this a leftover? > Are these 2

Re: release vibes?

2021-12-08 Thread Joe Orton
On Mon, Dec 06, 2021 at 11:36:51AM +0100, Stefan Eissing wrote: > Friends of httpd, how do you feel about a release in the next two weeks? Sounds good to me. We may have fewer people around to test it, but at least trying to get a release out is better than definitely having no release IMO.

Re: mod_tls as experimental module?

2021-11-24 Thread Joe Orton
Possibly no strong opinions? +1 from me anyway. How hard is it going to be to test in Travis? On Wed, Nov 24, 2021 at 10:46:03AM +0100, ste...@eissing.org wrote: > Coming back to this. Since there was no feedback on my post: are people > just too occupied/opposed/not interested? > > Curious, >

Re: openssl 3.0 when

2021-11-02 Thread Joe Orton
On Tue, Nov 02, 2021 at 09:23:32AM +0100, ste...@eissing.org wrote: > > > Am 01.11.2021 um 15:24 schrieb Joe Orton : > > > > On Sun, Oct 31, 2021 at 01:35:09PM +0100, ste...@eissing.org wrote: > >> I would like us to come to an understanding what our roadmap

Re: openssl 3.0 when

2021-11-01 Thread Joe Orton
On Sun, Oct 31, 2021 at 01:35:09PM +0100, ste...@eissing.org wrote: > I would like us to come to an understanding what our roadmap in > regard to OpenSSL 3.0 is. People keep on asking about it. > > Yesterday, I spent some hours hacking at mod_ssl and mod_md to > get it running. I managed to

Re: svn commit: r1894220 - in /httpd/httpd/trunk: modules/http2/h2_bucket_beam.c test/modules/http2/test_004_post.py test/modules/http2/test_400_push.py test/modules/http2/test_401_early_hints.py

2021-10-14 Thread Joe Orton
On Thu, Oct 14, 2021 at 11:17:11AM +0200, Ruediger Pluem wrote: > On 10/14/21 10:59 AM, ic...@apache.org wrote: > > - > > + > > +b = APR_BRIGADE_FIRST(bb); > > if (APR_BUCKET_IS_METADATA(b)) { > > APR_BUCKET_REMOVE(b); > > apr_bucket_setaside(b, beam->pool); > >

Re: Ineract with travis? (was: Errored: apache/httpd#1888 (trunk - 47e6ece))

2021-10-12 Thread Joe Orton
On Tue, Oct 12, 2021 at 11:31:51AM +0200, Yann Ylavic wrote: > Gavin (infra) gave all the httpd-committers team the "triage" access > right on github, which follows on travis. > This also includes managing PRs on github, great! Ah, brilliant. Thank you Yann and Gavin. Regards, Joe

Re: Broken: apache/httpd#2037 (trunk - fa7f375)

2021-10-11 Thread Joe Orton
On Mon, Oct 11, 2021 at 11:03:47AM +0100, Joe Orton wrote: > On Sat, Oct 09, 2021 at 06:06:32PM +0200, Yann Ylavic wrote: > > On Sat, Oct 9, 2021 at 5:47 PM Travis CI wrote: > > > > > > Build #2037 was broken > > > > Somehow Travis picked up the wrong Ub

Re: Broken: apache/httpd#2037 (trunk - fa7f375)

2021-10-11 Thread Joe Orton
On Sat, Oct 09, 2021 at 06:06:32PM +0200, Yann Ylavic wrote: > On Sat, Oct 9, 2021 at 5:47 PM Travis CI wrote: > > > > Build #2037 was broken > > Somehow Travis picked up the wrong Ubuntu version?? > All the Ubuntu Focal builds with system's APR failed with: Odd one, I haven't seen this before.

  1   2   3   4   5   6   7   8   9   10   >