<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>Apache | Dev</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>08 Nov  2009 20:07:02 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | Apache | Dev</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>Stefan Fritsch wrote on 2009-11-07 11:24:03: &amp;gt; Shouldn&amp;#039;t you use something like this? &amp;gt; &amp;gt; BrowserMatch &amp;quot;MSIE [2-5]&amp;quot; nokeepalive ssl-unclean-shutdown</description>
<pubDate>08 Nov  2009 16:53:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376443</link>
</item><item>
<title>Bug report for Apache httpd-2 [2009/11/08]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>08 Nov  2009 15:08:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376442</link>
</item><item>
<title>Bug report for Apache httpd-1.3 [2009/11/08]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>08 Nov  2009 15:08:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376441</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; Dirk-Willem van Gulik wrote: &amp;gt; &amp;gt;&amp;gt; Actually Steve - you may know - what besides the obvious &amp;gt;&amp;gt; &amp;gt;&amp;gt; extendedKeyUsage=nsSG</description>
<pubDate>08 Nov  2009 04:47:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376436</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On 06/11/09 20:07, Jim Jagielski wrote: &amp;gt; &amp;gt;&amp;gt; &amp;gt;&amp;gt; I&amp;#039;d like we remove the entire forwarding proxy stuff &amp;gt;&amp;gt; for example. &amp;gt; So we have mod_forward_proxy an</description>
<pubDate>08 Nov  2009 00:56:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376433</link>
</item><item>
<title>Re: svn commit: r833738 - in /httpd/httpd/trunk: CHANGES docs/manual/mod/mod_log_config.xml modules/loggers/mod_log_config.c</title>
<description>On 11/07/2009 08:19 PM, sf@apache.org wrote: &amp;gt; Author: sf &amp;gt; Date: Sat Nov 7 19:19:10 2009 &amp;gt; New Revision: 833738 &amp;gt; &amp;gt; URL: http://svn.apache.org/view</description>
<pubDate>07 Nov  2009 17:45:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376432</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Kaspar Brand wrote: &amp;gt; Dr Stephen Henson wrote: &amp;gt;&amp;gt; A few comments about that: &amp;gt; &amp;gt; Thanks for the review! &amp;gt; &amp;gt;&amp;gt; These are cryptographic keys (or at lea</description>
<pubDate>07 Nov  2009 09:35:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376421</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Dr Stephen Henson wrote: &amp;gt; A few comments about that: Thanks for the review! &amp;gt; These are cryptographic keys (or at least the HMAC and AES keys are)</description>
<pubDate>07 Nov  2009 06:56:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376417</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Kaspar Brand wrote:  +#if !defined(OPENSSL_NO_TLSEXT) &amp;amp;&amp;amp; OPENSSL_VERSION_NUMBER &amp;lt; 0x009080d0 +#define TICK_KEYS_LEN  sizeof(((SSL_CTX *)0)-&amp;gt;tlsext_t</description>
<pubDate>07 Nov  2009 04:21:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376416</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Kaspar Brand wrote: &amp;gt; Does that sound reasonable? If so, I would prepare a new patch with &amp;gt; SSL_CTX_set_tlsext_ticket_keys and the new config directiv</description>
<pubDate>07 Nov  2009 03:06:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376415</link>
</item><item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On Saturday 07 November 2009, Lars Eilebrecht wrote: &amp;gt; Ruediger Pluem wrote on 2009-11-07 00:29:41: &amp;gt; &amp;gt; &amp;gt; -BrowserMatch &amp;quot;.*MSIE.*&amp;quot; \ &amp;gt; &amp;gt; &amp;gt; -     n</description>
<pubDate>07 Nov  2009 02:24:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376414</link>
</item><item>
<title>Re: Pull mod_unique_id out of default build?</title>
<description>On 7 Nov 2009, at 06:25, Brian Rectanus wrote: &amp;gt; Yes, mod_security requires it. Many who use mod_security may not even &amp;gt; realize it. It would be a</description>
<pubDate>07 Nov  2009 01:28:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376429</link>
</item><item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On 11/07/2009 02:21 AM, Lars Eilebrecht wrote: &amp;gt; Ruediger Pluem wrote on 2009-11-07 00:29:41: &amp;gt; &amp;gt;&amp;gt;&amp;gt; -BrowserMatch &amp;quot;.*MSIE.*&amp;quot; \ &amp;gt;&amp;gt;&amp;gt; -     nokeepal</description>
<pubDate>07 Nov  2009 01:09:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376413</link>
</item><item>
<title>Re: Pull mod_unique_id out of default build?</title>
<description>On Thu, Nov 5, 2009 at 11:02 PM, Ruediger Pluem &amp;lt;rpluem@apache.org&amp;gt; wrote: &amp;gt; &amp;gt; &amp;gt; On 11/06/2009 06:45 AM, Nick Kew wrote: &amp;gt;&amp;gt; On 6 Nov 2009, at 05:30, S</description>
<pubDate>06 Nov  2009 22:25:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376412</link>
</item><item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>Ruediger Pluem wrote on 2009-11-07 00:29:41: &amp;gt; &amp;gt; -BrowserMatch &amp;quot;.*MSIE.*&amp;quot; \ &amp;gt; &amp;gt; -     nokeepalive ssl-unclean-shutdown \ &amp;gt; &amp;gt; -     downgrade-</description>
<pubDate>06 Nov  2009 17:21:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376410</link>
</item><item>
<title>CVE-2009-3555 - apache/mod_ssl vulnerability and mitigation (final draft)</title>
<description>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: CVE-2009-3555 - apache/mod_ssl vulnerability and mitigation Apache httpd is affected by CVE-2</description>
<pubDate>06 Nov  2009 17:21:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376409</link>
</item><item>
<title>[PATCH] Enable Elliptic Curve Keys and ciphers</title>
<description>Folks, This is Vipul Gupta&amp;#039;s patch (Bugzilla 40132) against today&amp;#039;s trunk.  This compiles and works under some manual testing. Looks like OpenSSL</description>
<pubDate>06 Nov  2009 16:41:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376408</link>
</item><item>
<title>Re: svn commit: r833582 - in /httpd/httpd/trunk/modules/ssl:	ssl_engine_init.c ssl_engine_io.c ssl_engine_kernel.c ssl_private.h</title>
<description>Joe Orton wrote: &amp;gt; Awesome, thanks a lot! &amp;gt; &amp;gt; +1 for backport to 2.2.x here too. +1 here from me as well. So the trunk patch is     svn diff -r8</description>
<pubDate>06 Nov  2009 16:23:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376407</link>
</item><item>
<title>Re: svn commit: r833582 - in /httpd/httpd/trunk/modules/ssl: ssl_engine_init.c ssl_engine_io.c ssl_engine_kernel.c ssl_private.h</title>
<description>On Sat, Nov 07, 2009 at 12:37:56AM +0100, Ruediger Pluem wrote: &amp;gt; On 11/06/2009 11:33 PM, jorton@apache.org wrote: &amp;gt; &amp;gt; Author: jorton &amp;gt; &amp;gt; Date: Fri No</description>
<pubDate>06 Nov  2009 16:08:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376401</link>
</item><item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On Fri, Nov 06, 2009 at 03:19:12PM -0800, Lars Eilebrecht wrote: &amp;gt; attached is a slightly different patch, it includes &amp;quot;!EXP&amp;quot; and I&amp;#039;ve &amp;gt; moved the dir</description>
<pubDate>06 Nov  2009 15:57:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376400</link>
</item><item>
<title>Re: svn commit: r833582 - in /httpd/httpd/trunk/modules/ssl: ssl_engine_init.c ssl_engine_io.c ssl_engine_kernel.c ssl_private.h</title>
<description>On 11/06/2009 11:33 PM, jorton@apache.org wrote: &amp;gt; Author: jorton &amp;gt; Date: Fri Nov 6 22:33:19 2009 &amp;gt; New Revision: 833582 &amp;gt; &amp;gt; URL: http://svn.apache.</description>
<pubDate>06 Nov  2009 15:37:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376399</link>
</item><item>
<title>Re: [UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On 11/07/2009 12:19 AM, Lars Eilebrecht wrote: &amp;gt; Hi, &amp;gt; &amp;gt; attached is a slightly different patch, it includes &amp;quot;!EXP&amp;quot; and I&amp;#039;ve &amp;gt; moved the directive ou</description>
<pubDate>06 Nov  2009 15:29:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376398</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Joe Orton wrote: &amp;gt; On Fri, Nov 06, 2009 at 03:09:22AM +0000, Joe Orton wrote: &amp;gt;&amp;gt; A second hack, slightly less rough hack: &amp;gt; &amp;gt; I committed this in r833</description>
<pubDate>06 Nov  2009 15:28:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376397</link>
</item><item>
<title>[UPDATED] Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>Hi, attached is a slightly different patch, it includes &amp;quot;!EXP&amp;quot; and I&amp;#039;ve moved the directive out of the vhost into the main server config (there&amp;#039;s not</description>
<pubDate>06 Nov  2009 15:19:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376396</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Fri, Nov 06, 2009 at 03:09:22AM +0000, Joe Orton wrote: &amp;gt; A second hack, slightly less rough hack: I committed this in r833582 with some minor cha</description>
<pubDate>06 Nov  2009 14:49:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376395</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Ruediger Pluem wrote: &amp;gt; I guess how much in the cert case also depends on the clients browser settings &amp;gt; and its user (does it send a certificate eve</description>
<pubDate>06 Nov  2009 14:31:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376394</link>
</item><item>
<title>Re: Updated draft announcement apache.</title>
<description>After further editing. Timeline is to do this shortly after Joe&amp;#039;s patch gets the needed votes. Dw. To:   announce@httpd.apache.org Subject: CVE-2</description>
<pubDate>06 Nov  2009 14:30:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376393</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On 11/06/2009 10:58 PM, Dirk-Willem van Gulik wrote: &amp;gt; So what are the next steps here ? &amp;gt; &amp;gt; -  Joe&amp;#039;s patch is final. &amp;gt; &amp;gt; -  Give the community</description>
<pubDate>06 Nov  2009 14:27:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376392</link>
</item><item>
<title>Updated draft announcement apache.</title>
<description>With some feedback from various folks. Thanks, Dw. Apache httpd is affected by CVE-2009-3555[1] (The SSL Injectin or MiM attack[2]). We strongly</description>
<pubDate>06 Nov  2009 14:13:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376385</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>So what are the next steps here ? -    Joe&amp;#039;s patch is final. -    Give the community the advice &amp;#039;immediately&amp;#039; - with a website     update</description>
<pubDate>06 Nov  2009 13:58:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376384</link>
</item><item>
<title>Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On Fri, Nov 06, 2009 at 01:04:01PM -0800, Lars Eilebrecht wrote: &amp;gt; I would like to propose the attached patch for inclusion in 2.2 &amp;gt; (I&amp;#039;ll commit to t</description>
<pubDate>06 Nov  2009 13:55:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376383</link>
</item><item>
<title>Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>Rainer Jung wrote on 2009-11-06 22:31:55: &amp;gt; Because of the EXP- ciphers still contained in the new one, we might &amp;gt; add !EXPORT: &amp;gt; &amp;gt; ALL:!ADH:!EXPORT</description>
<pubDate>06 Nov  2009 13:54:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376382</link>
</item><item>
<title>Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On Fri, Nov 06, 2009 at 01:04:01PM -0800, Lars Eilebrecht wrote: &amp;gt; I would like to propose the attached patch for inclusion in 2.2 (I&amp;#039;ll &amp;gt; commit to</description>
<pubDate>06 Nov  2009 13:53:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376381</link>
</item><item>
<title>Re: [PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>On 06.11.2009 22:04, Lars Eilebrecht wrote: &amp;gt; Hi, &amp;gt; &amp;gt; I would like to propose the attached patch for inclusion in 2.2 &amp;gt; (I&amp;#039;ll commit to trunk soon un</description>
<pubDate>06 Nov  2009 13:31:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376380</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>2009/11/7 Greg Stein &amp;lt;gstein@gmail.com&amp;gt;: &amp;gt; That&amp;#039;s fine, though I think Thrift will give a cleaner model to perform and &amp;gt; handle the requests. &amp;gt; &amp;gt; Most</description>
<pubDate>06 Nov  2009 13:16:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376379</link>
</item><item>
<title>[PATCH] new default SSLCipherSuite and SSL BrowserMatch configuration</title>
<description>Hi, I would like to propose the attached patch for inclusion in 2.2 (I&amp;#039;ll commit to trunk soon unless I&amp;#039;m getting any -1s in response to this email).</description>
<pubDate>06 Nov  2009 13:04:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376378</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On Nov 5, 2009, at 4:17 PM, Mladen Turk wrote: &amp;gt; On 05/11/09 12:38, Graham Leggett wrote: &amp;gt;&amp;gt; Jim Jagielski wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt;&amp;gt; Let&amp;#039;s get 2.4 out. And then</description>
<pubDate>06 Nov  2009 11:07:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376377</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On Nov 6, 2009, at 8:11 AM, Akins, Brian wrote: &amp;gt; On 11/5/09 6:08 PM, &amp;quot;Greg Stein&amp;quot; &amp;lt;gstein@gmail.com&amp;gt; wrote: &amp;gt; &amp;gt;&amp;gt; I think a lot of your discussion ca</description>
<pubDate>06 Nov  2009 11:04:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376376</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; &amp;gt; So I guess the one thing we need now is to double check with the OpenSSL &amp;gt; folks if the basic concept of this patch</description>
<pubDate>06 Nov  2009 11:00:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376375</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>2009/11/6 Colm MacCárthaigh &amp;lt;colm@allcosts.net&amp;gt;: &amp;gt; On Thu, Nov 5, 2009 at 6:01 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote &amp;gt;&amp;gt; 3. some mod_ssl configuratio</description>
<pubDate>06 Nov  2009 10:57:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376374</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Joe Orton wrote:  &amp;gt; On Fri, Nov 06, 2009 at 12:00:06AM +0000, Joe Orton wrote:  &amp;gt;&amp;gt; Here is a very rough first hack (for discussion/testing &amp;gt;&amp;gt; purpo</description>
<pubDate>06 Nov  2009 10:54:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376373</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Joe Orton wrote: &amp;gt; On Fri, Nov 06, 2009 at 12:00:06AM +0000, Joe Orton wrote: &amp;gt;&amp;gt; Here is a very rough first hack (for discussion/testing purposes onl</description>
<pubDate>06 Nov  2009 10:45:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376372</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Thu, Nov 5, 2009 at 6:01 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote &amp;gt; 3. some mod_ssl configurations, typically requiring client cert auth in &amp;gt; a per-</description>
<pubDate>06 Nov  2009 10:24:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376371</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>That&amp;#039;s fine, though I think Thrift will give a cleaner model to perform and handle the requests. Mostly I just wanted to point out an alternative to</description>
<pubDate>06 Nov  2009 08:27:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376368</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On 11/5/09 6:08 PM, &amp;quot;Greg Stein&amp;quot; &amp;lt;gstein@gmail.com&amp;gt; wrote: &amp;gt; I think a lot of your discussion can be easily passed off to Apache Thrift. &amp;gt; Let it han</description>
<pubDate>06 Nov  2009 08:11:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376362</link>
</item><item>
<title>Re: Pull mod_unique_id out of default build?</title>
<description>On 11/06/2009 06:45 AM, Nick Kew wrote: &amp;gt; On 6 Nov 2009, at 05:30, Sander Temme wrote: &amp;gt; &amp;gt;&amp;gt; Maybe my understanding is limited and my fu is weak, but</description>
<pubDate>05 Nov  2009 23:02:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376342</link>
</item><item>
<title>Re: Pull mod_unique_id out of default build?</title>
<description>On 6 Nov 2009, at 05:30, Sander Temme wrote: &amp;gt; Maybe my understanding is limited and my fu is weak, but I have  &amp;gt; personally never had a use for mod</description>
<pubDate>05 Nov  2009 21:45:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376340</link>
</item><item>
<title>Pull mod_unique_id out of default build?</title>
<description>Folks, Maybe my understanding is limited and my fu is weak, but I have  personally never had a use for mod_unique_id. The only thing it does  for</description>
<pubDate>05 Nov  2009 21:30:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376339</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Fri, Nov 06, 2009 at 12:00:06AM +0000, Joe Orton wrote: &amp;gt; On Thu, Nov 05, 2009 at 09:31:00PM +0000, Joe Orton wrote: &amp;gt; &amp;gt; * we can detect in mod_ssl</description>
<pubDate>05 Nov  2009 19:09:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376338</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; Dirk-Willem van Gulik wrote: &amp;gt; &amp;gt;&amp;gt; Actually Steve - you may know - what besides the obvious &amp;gt;&amp;gt; &amp;gt;&amp;gt; extendedKeyUsage=nsSG</description>
<pubDate>05 Nov  2009 19:09:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376337</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; Actually Steve - you may know - what besides the obvious &amp;gt; &amp;gt; extendedKeyUsage=nsSGC,msSGC &amp;gt; &amp;gt; in the extension file ne</description>
<pubDate>05 Nov  2009 18:21:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376336</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dr Stephen Henson wrote: &amp;gt; There are two separate types used by Mozilla (Step up?) and Microsoft SSL/TLS &amp;gt; (SGC?) implementations IIRC. One completes</description>
<pubDate>05 Nov  2009 18:19:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376335</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On a phone, so pls excuse my brevity... I think a lot of your discussion can be easily passed off to Apache Thrift. Let it handle all the message pas</description>
<pubDate>05 Nov  2009 18:08:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376332</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dr Stephen Henson wrote: &amp;gt; There are two separate types used by Mozilla (Step up?) and Microsoft SSL/TLS &amp;gt; (SGC?) implementations IIRC. One completes</description>
<pubDate>05 Nov  2009 18:07:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376331</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Andrews, Rick wrote: &amp;gt;  https://www.chase.com &amp;gt;  https://www.wellsfargo.com &amp;gt; &amp;gt; But I suppose you&amp;#039;ll need to locate an old international browser</description>
<pubDate>05 Nov  2009 18:00:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376330</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; we propably &amp;gt; only have the step up &amp;#039;Server Gated Certs&amp;#039;* let to check. &amp;gt; &amp;gt; Does anyone have such a beast for testing</description>
<pubDate>05 Nov  2009 17:52:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376329</link>
</item><item>
<title>Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>So with Joe his patch doing the right thing it seems (would be nice if we could get Ben or the OpenSSL guys to confirm that) - that we propably only</description>
<pubDate>05 Nov  2009 17:38:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376328</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On 11/5/09 4:30 PM, &amp;quot;Graham Dumpleton&amp;quot; &amp;lt;graham.dumpleton@gmail.com&amp;gt; wrote: &amp;gt; Thoughts? Still digesting, but generally +1 to the entire post.  -- B</description>
<pubDate>05 Nov  2009 17:33:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376327</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>2009/11/5 Graham Leggett &amp;lt;minfrin@sharp.fm&amp;gt;: &amp;gt; Jim Jagielski wrote: &amp;gt; &amp;gt;&amp;gt; Let&amp;#039;s get 2.4 out. And then let&amp;#039;s rip it to shreds and drop &amp;gt;&amp;gt; buckets/brigad</description>
<pubDate>05 Nov  2009 16:30:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376326</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On 06.11.2009 01:12, Joe Orton wrote: &amp;gt; On Fri, Nov 06, 2009 at 12:00:06AM +0000, Joe Orton wrote: &amp;gt; FYI - Dirk points out that you can test this usin</description>
<pubDate>05 Nov  2009 16:28:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376325</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On 05/11/09 12:38, Graham Leggett wrote: &amp;gt; Jim Jagielski wrote: &amp;gt; &amp;gt;&amp;gt; Let&amp;#039;s get 2.4 out. And then let&amp;#039;s rip it to shreds and drop &amp;gt;&amp;gt; buckets/brigades a</description>
<pubDate>05 Nov  2009 16:17:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376322</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Fri, Nov 06, 2009 at 12:00:06AM +0000, Joe Orton wrote: &amp;gt; On Thu, Nov 05, 2009 at 09:31:00PM +0000, Joe Orton wrote: &amp;gt; &amp;gt; * we can detect in mod_ssl</description>
<pubDate>05 Nov  2009 16:12:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376321</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Thu, Nov 05, 2009 at 09:31:00PM +0000, Joe Orton wrote: &amp;gt; * we can detect in mod_ssl when the client is renegotiating by using the &amp;gt; callback inst</description>
<pubDate>05 Nov  2009 16:00:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376320</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On 11/05/2009 11:03 PM, Dirk-Willem van Gulik wrote: &amp;gt; Joe Orton wrote: &amp;gt; &amp;gt;&amp;gt; * we can detect in mod_ssl when the client is renegotiating by using the</description>
<pubDate>05 Nov  2009 14:17:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376315</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Joe Orton wrote: &amp;gt; * we can detect in mod_ssl when the client is renegotiating by using the &amp;gt; callback installed using SSL_CTX_set_info_callback(), i</description>
<pubDate>05 Nov  2009 14:03:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376314</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Thu, Nov 05, 2009 at 09:38:23PM +0100, Ruediger Pluem wrote: &amp;gt; If server triggered renegotiation will not work at all, people will just ignore the</description>
<pubDate>05 Nov  2009 13:31:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376313</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>How about support of openmp? Regards,  Jie</description>
<pubDate>05 Nov  2009 12:57:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376312</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On 11/05/2009 06:32 PM, Joe Orton wrote: &amp;gt; On Thu, Nov 05, 2009 at 03:39:06PM +0000, Ben Laurie wrote: &amp;gt;&amp;gt; Joe Orton wrote: &amp;gt;&amp;gt;&amp;gt; In the short term, I th</description>
<pubDate>05 Nov  2009 12:38:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376311</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On Thu, 2009-11-05 at 13:38 +0200, Graham Leggett wrote: &amp;gt; I&amp;#039;m keen to teach httpd v3.0 to work asynchronously throughout - still &amp;gt; maintaining the pr</description>
<pubDate>05 Nov  2009 12:34:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376310</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>On Thu, Nov 05, 2009 at 03:39:06PM +0000, Ben Laurie wrote: &amp;gt; Joe Orton wrote: &amp;gt; &amp;gt; In the short term, I think it would be useful to have a new SSL_OP_</description>
<pubDate>05 Nov  2009 09:32:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376296</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Joe Orton wrote: &amp;gt; With reference to the issue described here: &amp;gt; &amp;gt; http://www.ietf.org/mail-archive/web/tls/current/msg03948.html &amp;gt; &amp;gt; Considering th</description>
<pubDate>05 Nov  2009 07:39:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376288</link>
</item><item>
<title>Re: TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>Hi Isn&amp;#039;t the real simple cause the possiblity to &amp;#039;upgrade&amp;#039; an &amp;quot;anonymous&amp;quot; session to a client authenticated one initiated by the server after seeing</description>
<pubDate>05 Nov  2009 07:26:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376287</link>
</item><item>
<title>TLS renegotiation attack, mod_ssl and OpenSSL</title>
<description>With reference to the issue described here: http://www.ietf.org/mail-archive/web/tls/current/msg03948.html Considering the impact on mod_ssl, I&amp;#039;m ma</description>
<pubDate>05 Nov  2009 06:01:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376279</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>Jim Jagielski wrote: &amp;gt; Let&amp;#039;s get 2.4 out. And then let&amp;#039;s rip it to shreds and drop &amp;gt; buckets/brigades and fold in serf. I think we should decide on</description>
<pubDate>05 Nov  2009 03:38:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376278</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>On Wed, 4 Nov 2009, Jim Jagielski wrote: &amp;gt; Let&amp;#039;s get 2.4 out. And then let&amp;#039;s rip it to shreds and drop &amp;gt; buckets/brigades and fold in serf. I agree,</description>
<pubDate>05 Nov  2009 02:18:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376274</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Ruediger Pluem wrote: &amp;gt; I would like to see your comment on Steves comment regarding the usage of &amp;gt; SSL_CTX_set_tlsext_ticket_keys. That workaround d</description>
<pubDate>04 Nov  2009 22:09:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376272</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>I&amp;#039;m with Jim, Head for 2.4 first. IIRC there was some talk about moving to a &amp;#039;d&amp;#039; project, since httpd now does ftp (mod_ftp), echo, pop3,... and som</description>
<pubDate>04 Nov  2009 15:58:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376254</link>
</item><item>
<title>Re: static analysis of httpd</title>
<description>on request, here is mod_fcgid: &amp;lt;http://zeus.kimaker.com/~chip/fcgid-scan/&amp;gt; On Wed, Nov 4, 2009 at 1:44 PM, Paul Querna &amp;lt;paul@querna.org&amp;gt; wrote: &amp;gt; usi</description>
<pubDate>04 Nov  2009 14:12:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376240</link>
</item><item>
<title>static analysis of httpd</title>
<description>using the newer clang/llvm static analysis on httpd trunk: &amp;lt;http://zeus.kimaker.com/~chip/httpd-scan/&amp;gt;</description>
<pubDate>04 Nov  2009 13:44:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376239</link>
</item><item>
<title>Re: Httpd 3.0 or something else</title>
<description>Let&amp;#039;s get 2.4 out. And then let&amp;#039;s rip it to shreds and drop buckets/brigades and fold in serf. On Nov 4, 2009, at 1:26 PM, Akins, Brian wrote: &amp;gt; So,</description>
<pubDate>04 Nov  2009 11:30:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376230</link>
</item><item>
<title>Httpd 3.0 or something else</title>
<description>So, after several conversations at Apachecon and on the list, we still have no real &amp;quot;vision&amp;quot; of how we want to move ahead with httpd &amp;quot;3.0.&amp;quot; Or, if we</description>
<pubDate>04 Nov  2009 10:26:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376229</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>On 11/04/2009 05:59 PM, Kaspar Brand wrote: &amp;gt; Ruediger Pluem wrote: &amp;gt;&amp;gt;&amp;gt; 2) In the SNI callback, it adjusts OpenSSL&amp;#039;s session id context - which &amp;gt;&amp;gt;&amp;gt; m</description>
<pubDate>04 Nov  2009 09:16:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376223</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Ruediger Pluem wrote: &amp;gt; I guess your current patch fails on trunk since myModConfig(s))-&amp;gt;nSessionCacheMode &amp;gt; is no longer present in trunk Oops, you&amp;#039;</description>
<pubDate>04 Nov  2009 08:59:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376222</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>On 11/04/2009 10:35 AM, Kaspar Brand wrote: &amp;gt; Kamesh Jayachandran wrote: &amp;gt;&amp;gt; Reasonable fix for this on the server side is to apply SSL_OP_NO_TICKET &amp;gt;</description>
<pubDate>04 Nov  2009 07:49:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376215</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Kaspar Brand wrote: &amp;gt; Kamesh Jayachandran wrote: &amp;gt;&amp;gt; Reasonable fix for this on the server side is to apply SSL_OP_NO_TICKET &amp;gt;&amp;gt; patch and enable SSLSe</description>
<pubDate>04 Nov  2009 04:33:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376208</link>
</item><item>
<title>Re: [PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Thanks Kaspar. I tested your patch against 2.2 branch on to my apache-2.2.12 and found it to be working. My observations: Without SSLSessionCache i</description>
<pubDate>04 Nov  2009 02:43:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376202</link>
</item><item>
<title>[PATCH] mod_ssl: improving session caching for SNI configurations</title>
<description>Kamesh Jayachandran wrote: &amp;gt; Reasonable fix for this on the server side is to apply SSL_OP_NO_TICKET &amp;gt; patch and enable SSLSessionCache. There is ac</description>
<pubDate>04 Nov  2009 01:35:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376200</link>
</item><item>
<title>Re: horray - snapshots are back again, but ....</title>
<description>Hi Jeff, Jeff Trawick schrieb: &amp;gt; http://svn.apache.org/viewvc/ that&amp;#039;s what I used all the time - but when I posted this didnt work, nor was a link dis</description>
<pubDate>03 Nov  2009 18:15:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376197</link>
</item><item>
<title>Re: horray - snapshots are back again, but ....</title>
<description>On Tue, Nov 3, 2009 at 3:17 PM, Guenter Knauf &amp;lt;fuankg@apache.org&amp;gt; wrote: &amp;gt; Hi Tony, &amp;gt; Tony Stevenson schrieb: &amp;gt;&amp;gt; I&amp;#039;m sorry, I dont understand what you</description>
<pubDate>03 Nov  2009 16:47:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376196</link>
</item><item>
<title>Re: horray - snapshots are back again, but ....</title>
<description>Hi Tony, Tony Stevenson schrieb: &amp;gt; I&amp;#039;m sorry, I dont understand what you want us to do. viewcv is working, &amp;gt; I just used it now. huh? well, I used nor</description>
<pubDate>03 Nov  2009 15:17:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376194</link>
</item><item>
<title>Re: horray - snapshots are back again, but ....</title>
<description>I&amp;#039;m sorry, I dont understand what you want us to do. viewcv is  working, I just used it now. As for the rest of your mail, you may need to explain it</description>
<pubDate>03 Nov  2009 15:03:36 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376193</link>
</item><item>
<title>horray - snapshots are back again, but ....</title>
<description>... viewvc is gone now :( hope we can restore that soon .... also I would like to remind that some snapshot branches need changed, or otherwise they</description>
<pubDate>03 Nov  2009 14:38:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376192</link>
</item><item>
<title>Re: svn commit: r832496 - in /httpd/httpd/trunk/modules/ssl: ssl_toolkit_compat.h ssl_util_stapling.c</title>
<description>Hi, Guenter Knauf schrieb: &amp;gt; then please lets do: &amp;gt; &amp;gt; #ifndef HAVE_OCSP &amp;gt; #if OPENSSL_VERSION_NUMBER &amp;gt;= 0x00907000 &amp;gt; #define HAVE_OCSP &amp;gt; #include &amp;lt;op</description>
<pubDate>03 Nov  2009 11:51:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376179</link>
</item><item>
<title>Re: svn commit: r832496 - in /httpd/httpd/trunk/modules/ssl: ssl_toolkit_compat.h ssl_util_stapling.c</title>
<description>Hi Sander, sctemme@apache.org schrieb: &amp;gt; Author: sctemme &amp;gt; Date: Tue Nov 3 18:19:33 2009 &amp;gt; New Revision: 832496 &amp;gt; &amp;gt; URL: http://svn.apache.org/viewv</description>
<pubDate>03 Nov  2009 11:47:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376178</link>
</item><item>
<title>Re: svn commit: r832496 - in /httpd/httpd/trunk/modules/ssl: ssl_toolkit_compat.h ssl_util_stapling.c</title>
<description>On 11/03/2009 07:19 PM, sctemme@apache.org wrote: &amp;gt; Author: sctemme &amp;gt; Date: Tue Nov 3 18:19:33 2009 &amp;gt; New Revision: 832496 &amp;gt; &amp;gt; URL: http://svn.apach</description>
<pubDate>03 Nov  2009 11:45:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376177</link>
</item><item>
<title>Unexplained unresponsiveness of Apache httpd</title>
<description>Hello,   I am currently dealing with a situation where the Apache httpd process becomes unresponsive for some time. At the end of this time, the Ap</description>
<pubDate>03 Nov  2009 08:52:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376169</link>
</item><item>
<title>How to use the FcgidAccessChecker Directive?</title>
<description>Hi, I have been searching for a guide on how to use the FcgidAccessChecker command with a PHP script. In my tests I have tried calling a PHP-script</description>
<pubDate>03 Nov  2009 06:53:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376163</link>
</item><item>
<title>Re: Trunk MPM API changes and the OS/2 and NetWare MPMs</title>
<description>Jeff Trawick wrote: &amp;gt; On Sun, Oct 18, 2009 at 12:50 PM, Brian Havard &amp;lt;brian.havard@gmail.com&amp;gt; wrote: &amp;gt;  &amp;gt;&amp;gt; Jeff Trawick wrote: &amp;gt;&amp;gt;   &amp;gt;&amp;gt;&amp;gt; APIs were</description>
<pubDate>03 Nov  2009 06:19:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376162</link>
</item><item>
<title>Re: Visiting mod_authn_cache</title>
<description>Graham Leggett wrote: &amp;gt; Issac Goldstand wrote: &amp;gt; &amp;gt;  I actually ended up solving it with the help of socache&amp;#039;s source. I was having troubles with ap</description>
<pubDate>02 Nov  2009 23:50:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376136</link>
</item><item>
<title>Re: svn commit: r830765 - /httpd/httpd/trunk/modules/ssl/ssl_toolkit_compat.h</title>
<description>On 11/03/2009 12:28 AM, Guenter Knauf wrote: &amp;gt; Hi Ruediger, &amp;gt; Ruediger Pluem schrieb: &amp;gt;&amp;gt; I now get the following warnings on Linux: &amp;gt;&amp;gt; &amp;gt;&amp;gt; In file incl</description>
<pubDate>02 Nov  2009 22:11:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376132</link>
</item>
</channel>
</rss>
