[users@httpd] How to compile Apache 2.4 source to get mod_shib_24.so

2021-06-04 Thread Diggs, Cameron Toussaint (ctd8z)
Hello. We have an Apache 2.2 server running on an old Windows 2008 server. We are upgrading to Apache 2.4, but we are having an issue with shibboleth that the module mod_shib_2.4.so is missing. I was told that it would have to be compiled, but I haven't found any information on how to do

Re: [users@httpd] Newer Apache does not offer TLS cipher with TLSv1 anymore

2021-06-04 Thread Stefan Eissing
Hildegard, I believe this is the result of a deliberate change in the OpenSSL API when going to version 1.1.0. In earlier versions of OpenSSL one could switch on/off individual protocols, whereas now one specifies a minimum and maximum TLS version to use. In Apache, the configuration handling

Re: [users@httpd] Misbehaving CustomLog logger causing local denial-of-service, intended behaviour?

2021-06-04 Thread Antony Stone
On Friday 04 June 2021 at 11:09:33, Olli Pasanen wrote: > Hello, > > I’ve encountered an interesting local DOS issue on Apache 2.4.48, and I am > not sure whether this is intended behavior. > > Symptom: > - Apache2 hangs indefinitely (stops processing incoming requests) > > Setup: > - Apache

[users@httpd] Misbehaving CustomLog logger causing local denial-of-service, intended behaviour?

2021-06-04 Thread Olli Pasanen
Hello, I’ve encountered an interesting local DOS issue on Apache 2.4.48, and I am not sure whether this is intended behavior. Symptom: - Apache2 hangs indefinitely (stops processing incoming requests) Setup: - Apache 2.4.48 built from source, running on Debian 10 - A dummy CustomLog program