[users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info

2021-09-23 Thread Ran Mozes
to find out about CVEs you can follow the related links from the NVD site. In the case of CVE-2021-40438 it led me to https://src.fedoraproject.org/rpms/httpd#817ac0a9a475f26768e49342e055307368258b74 there you could dig so more to find information about the users/commits/contents. HTH > Am 23

[users@httpd] Re: [E] [users@httpd] [External] : [users@httpd] Problems compiling under Solaris 10

2021-09-06 Thread Ran Mozes
> : Repeat. It should appear 3 times. # CC=gcc ab_CFLAGS="-I/usr/sfw/include" ./configure --prefix=/home/apache1/httpd8090 --with-included-apr --with-pcre=/home/apache1/httpd8090/bin/pcre-config --disable-ssl # gmake # gmake install # cd /home/apache1 On Wed, Sep 1, 2021 at 2:32

Re: [users@httpd] [External] : [users@httpd] Problems compiling under Solaris 10

2021-09-01 Thread Ran Mozes
fyi, I have opened a bug. In case someone is interested or experiencing the same please feel free to add to it: https://bz.apache.org/bugzilla/show_bug.cgi?id=65542 Am 31.08.2021 um 17:08 schrieb Ran Mozes mailto:ran.mo...@oracle.com>>: Thanks. Unfortunately it didn’t work for me. I sti

Re: [users@httpd] [External] : [users@httpd] Problems compiling under Solaris 10

2021-08-31 Thread Ran Mozes
Benchmark): cd support ; touch ab ; cd .. ; make This way you will skip the ab compilation. 30 agosto 2021 13:47, "Ran Mozes" mailto:ran.mo...@oracle.com?to=%22ran%20mozes%22%20%3cran.mo...@oracle.com%3E>> wrote: Hi Nigel, all, I am experiencing the exact same errors while tryin

[users@httpd] Re: [External] : [users@httpd] Problems compiling under Solaris 10

2021-08-30 Thread Ran Mozes
Hi Nigel, all, I am experiencing the exact same errors while trying to compile apache-2.4.48 on a Solaris 10 X86 machine. bash-3.2$ libtool --silent --mode=link gcc -std=gnu99 -g -O2 -o ab ab.lo -lz apache_upgrade_2.4.48/httpd-2.4.48/srclib/apr-util/libaprutil-1.la

Re: [users@httpd] [External] Re: [users@httpd] Struggling with "decryption failed or bad record mac" error

2021-06-10 Thread Ran Mozes
Hi Matteo, sounds like various issues could be the root cause. Maybe a negotiation issue on the TLS version and/or the Ciphers used? Another option, the error "SSL3_GET_RECORD:decryption failed or bad record mac“ could also imply that something is wrong with the certificates being used. HTH, R

Re: [users@httpd] Updating apache from 2.4.6 to 2.4.46

2020-12-21 Thread Ran Mozes
Hi Kapil, the symbols which are not found seem to be pointing to not finding the OpenSSL. I usually build Apache from source and not through the rpmbuild but my guess would be that your building env is missing the openssl and/or maybe one needs to set the LD_LIBRARY_PATH env variable to point to

Re: [users@httpd] Changing the 'Range' inside the RequestHeader on the fly

2020-12-08 Thread Ran Mozes
Thanks!. After removing the "early“ it worked as expected. Regards, Ran > Am 08.12.2020 um 16:52 schrieb Yann Ylavic : > > On Tue, Dec 8, 2020 at 12:18 PM Ran Mozes wrote: >> >> RequestHeader edit Range bytes=\s bytes= early > > I'm surprised this o

[users@httpd] Changing the 'Range' inside the RequestHeader on the fly

2020-12-08 Thread Ran Mozes
Hi, Starting with with Apache 2.4.44 a strict check of the values given in the ‚Range‘ header was introduced. The new change seems to not allow a blank after 'bytes=' . Unfortunately we have some faulty client that inserts an empty space after ‚bytes=' (from apache error log) http_req

Re: [users@httpd] enforcing file transmission in gzip format with Apache 2.4.46

2020-12-08 Thread Ran Mozes
AddOutputFilter DEFLATE uar combined with 'IfSetEnv force-gzip‘ worked. Thanks! Ran > Am 02.12.2020 um 22:24 schrieb Christophe JAILLET > : > > Le 02/12/2020 à 16:59, a écrit : >> Hi, >> I'd like to configure the server to always send the requested *.uar files in >> gzip format back to th

[users@httpd] enforcing file transmutation in gzip format with Apache 2.4.46

2020-12-02 Thread Ran Mozes
Hi, I'd like to configure the server to always send the requested *.uar files in gzip format back to the client. The following configuration is used but it only works if the client (for example curl) runs with '—compressed' flag. I read that "SetEnv force-gzip“ should do that but it has no impa