<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>Apache | Dev</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>23 Nov  2009 10:25:48 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | Apache | Dev</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>Re: [PATCH/HEADS UP] mutex method configuration cleanup for 2.4</title>
<description>On Sat, Nov 21, 2009 at 5:24 PM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; a) update mod_ssl as well, at the same time getting rid of the &amp;gt; requiremen</description>
<pubDate>23 Nov  2009 09:06:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377353</link>
</item><item>
<title>RE: MPM-Module perchild</title>
<description>I would like to discuss a collaborative effort to get this module working. -----Original Message----- From: christian4apache@lists.muthpartners.de [m</description>
<pubDate>23 Nov  2009 07:09:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377351</link>
</item><item>
<title>Re: MPM-Module perchild</title>
<description>On Mon, Nov 23, 2009 at 4:40 AM, &amp;lt;christian4apache@lists.muthpartners.de&amp;gt; wrote: &amp;gt; Hello, &amp;gt; &amp;gt; We have an internal project where we need the MPM module</description>
<pubDate>23 Nov  2009 04:09:48 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377337</link>
</item><item>
<title>Re: mod_substitute strange behaviour</title>
<description>Last version from trunk  Jim Jagielski wrote: &amp;gt; On Nov 19, 2009, at 12:12 PM, Nick Gearls wrote: &amp;gt; &amp;gt;&amp;gt; I&amp;#039;m not sure this is really desired: &amp;gt;&amp;gt; &amp;gt;&amp;gt; 1.</description>
<pubDate>23 Nov  2009 03:42:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377336</link>
</item><item>
<title>Re: MPM-Module perchild</title>
<description>2009/11/23 &amp;lt;christian4apache@lists.muthpartners.de&amp;gt;: &amp;gt; Hello, &amp;gt; &amp;gt; We have an internal project where we need the MPM module perchild. The &amp;gt; Apache 2.0</description>
<pubDate>23 Nov  2009 01:45:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377332</link>
</item><item>
<title>MPM-Module perchild</title>
<description>Hello, We have an internal project where we need the MPM module perchild. The Apache 2.0 documentation says that the development is not completed. I</description>
<pubDate>23 Nov  2009 01:40:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377331</link>
</item><item>
<title>Bug report for Apache httpd-2 [2009/11/22]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>22 Nov  2009 15:08:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377323</link>
</item><item>
<title>Bug report for Apache httpd-1.3 [2009/11/22]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>22 Nov  2009 15:08:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377322</link>
</item><item>
<title>Re: KeepAlive directive takes others than on or off</title>
<description>On Sat, 21 Nov 2009 09:44:54 +0100 Ruediger Pluem &amp;lt;rpluem@apache.org&amp;gt; wrote: &amp;gt; &amp;gt; &amp;gt; On 11/21/2009 02:43 AM, Takashi Sato wrote: &amp;gt; &amp;gt; Current KeepAliv</description>
<pubDate>22 Nov  2009 06:36:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377311</link>
</item><item>
<title>[PATCH/HEADS UP] mutex method configuration cleanup for 2.4</title>
<description>See http://people.apache.org/~trawick/mutex-directive-1.txt This follows Joe&amp;#039;s suggestion for one new Mutex directive utilizing existing ap_parse_mut</description>
<pubDate>21 Nov  2009 14:24:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377297</link>
</item><item>
<title>Re: svn commit: r882528 - /httpd/httpd/branches/2.0.x/STATUS</title>
<description>On 11/20/2009 04:46 PM, Rainer Jung wrote: &amp;gt;&amp;gt;  &amp;gt;&amp;gt; PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON: &amp;gt; &amp;gt; Thanks Rüdiger, I added the</description>
<pubDate>21 Nov  2009 00:47:36 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377273</link>
</item><item>
<title>Re: KeepAlive directive takes others than on or off</title>
<description>On 11/21/2009 02:43 AM, Takashi Sato wrote: &amp;gt; Current KeepAlive dirctive accept anything but &amp;quot;Off&amp;quot; or &amp;quot;0&amp;quot; &amp;gt; as &amp;quot;On&amp;quot; for compatibility, &amp;gt; The change fr</description>
<pubDate>21 Nov  2009 00:44:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377272</link>
</item><item>
<title>KeepAlive directive takes others than on or off</title>
<description>Current KeepAlive dirctive accept anything but &amp;quot;Off&amp;quot; or &amp;quot;0&amp;quot; as &amp;quot;On&amp;quot; for compatibility, The change from 0/1 to Off/On was done in 1.3 or before. I&amp;#039;d li</description>
<pubDate>20 Nov  2009 17:43:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377268</link>
</item><item>
<title>Re: mod_substitute strange behaviour</title>
<description>On Nov 19, 2009, at 12:12 PM, Nick Gearls wrote: &amp;gt; I&amp;#039;m not sure this is really desired: &amp;gt; &amp;gt; 1. More or less normal/abnormal case: &amp;gt; s/123/abc123def/</description>
<pubDate>20 Nov  2009 13:46:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377252</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Dong Wang wrote: &amp;gt; Yes, I need... The company I served do not want to lose any flow... &amp;gt; &amp;gt; I think I can config the httpd to not compress the respon</description>
<pubDate>20 Nov  2009 08:01:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377238</link>
</item><item>
<title>Re: svn commit: r882528 - /httpd/httpd/branches/2.0.x/STATUS</title>
<description>On 20.11.2009 13:09, rpluem@apache.org wrote: &amp;gt; Author: rpluem &amp;gt; Date: Fri Nov 20 12:09:17 2009 &amp;gt; New Revision: 882528 &amp;gt; &amp;gt; URL: http://svn.apache.org</description>
<pubDate>20 Nov  2009 07:46:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377237</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Yes, I need... The company I served do not want to lose any flow... I think I can config the httpd to not compress the response to Netscape 4.0.x. Ma</description>
<pubDate>20 Nov  2009 06:22:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377236</link>
</item><item>
<title>Re: wider http</title>
<description>On 11/20/09, basteon &amp;lt;basteon@gmail.com&amp;gt; wrote: &amp;gt; g&amp;#039; time of day 2 every1, &amp;gt; my question to implies of wider http proto, e.g. I needs add to http &amp;gt;</description>
<pubDate>20 Nov  2009 06:19:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377235</link>
</item><item>
<title>wider http</title>
<description>g&amp;#039; time of day 2 every1, my question to implies of wider http proto, e.g. I needs add to http few headers looks like POST and GET, it must be used onl</description>
<pubDate>20 Nov  2009 06:03:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377226</link>
</item><item>
<title>RE: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>This is because of the specific configuration used there and works as designed. (Header append Vary User-Agent env=!dont-vary) Do you really have a n</description>
<pubDate>20 Nov  2009 05:59:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377225</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>On 11/20/09, Dong Wang &amp;lt;wangdong.08@gmail.com&amp;gt; wrote: &amp;gt; Thanks very much. &amp;gt; &amp;gt; But I found a problem, see this page: &amp;gt; http://www.digitalsanctuary.com/</description>
<pubDate>20 Nov  2009 05:57:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377224</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Thanks very much. But I found a problem, see this page: http://www.digitalsanctuary.com/tech-blog/general/apache-mod_deflate-and-mod_cache-issues.htm</description>
<pubDate>20 Nov  2009 05:49:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377222</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Dong Wang wrote: &amp;gt; but mod_compress can cache the compressed file, not only the original file. &amp;gt; the mod_cache can only cache the original file, isn&amp;#039;</description>
<pubDate>20 Nov  2009 05:30:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377221</link>
</item><item>
<title>Re: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>but mod_compress can cache the compressed file, not only the original file. the mod_cache can only cache the original file, isn&amp;#039;t it? I want a module</description>
<pubDate>20 Nov  2009 05:21:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377220</link>
</item><item>
<title>Re: better SSL defaults in 2.4</title>
<description>Jeff Trawick wrote: &amp;gt; enable session cache by default? &amp;gt; &amp;gt; change SSLMutex default to &amp;quot;SSLMutex default&amp;quot; instead of &amp;quot;SSLMutex none&amp;quot;? &amp;gt; (does this de</description>
<pubDate>20 Nov  2009 05:13:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377223</link>
</item><item>
<title>RE: Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Use mod_cache for this.  Regards  Rüdiger  ________________________________     From: Dong Wang [mailto:wangdong.08@gmail.com]     Sent:</description>
<pubDate>20 Nov  2009 05:07:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377219</link>
</item><item>
<title>Does Apache has similar module like Lighttpd&amp;#039;s mod_compress ?</title>
<description>Lighttpd&amp;#039;s mod_compress can not only compress file, but also cache it. Can Apache do the same thing?</description>
<pubDate>20 Nov  2009 05:03:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377218</link>
</item><item>
<title>Re: handling request splicing in case of server initiated	renegotiation CVE-2009-3555</title>
<description>Joe Orton wrote: &amp;gt; On Thu, Nov 19, 2009 at 04:05:34PM +0100, Hartmut Keil wrote: &amp;gt;&amp;gt; With the proposed change, we prevent request splitting attacks bas</description>
<pubDate>20 Nov  2009 04:40:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377217</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Thu, Nov 19, 2009 at 11:09 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote: &amp;gt; On Thu, Nov 19, 2009 at 06:47:56AM -0500, Jeff Trawick wrote: &amp;gt;&amp;gt; I envisioned</description>
<pubDate>19 Nov  2009 12:52:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377183</link>
</item><item>
<title>Re: dav_new_error_*() and errno, revisit before 2.4 GA</title>
<description>On Thu, Nov 19, 2009 at 11:41 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote: &amp;gt; On Wed, Nov 18, 2009 at 07:29:46AM -0500, Jeff Trawick wrote: &amp;gt;&amp;gt; - For mod_da</description>
<pubDate>19 Nov  2009 12:29:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377182</link>
</item><item>
<title>mod_substitute strange behaviour</title>
<description>I&amp;#039;m not sure this is really desired: 1. More or less normal/abnormal case: s/123/abc123def/ -&amp;gt; &amp;quot;*123*&amp;quot; becomes &amp;quot;abcabc123defdef&amp;quot; Substitution is mad</description>
<pubDate>19 Nov  2009 09:12:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377170</link>
</item><item>
<title>Re: dav_new_error_*() and errno, revisit before 2.4 GA</title>
<description>On Wed, Nov 18, 2009 at 07:29:46AM -0500, Jeff Trawick wrote: &amp;gt; - For mod_dav in httpd trunk/future 2.4: &amp;gt; http://people.apache.org/~trawick/mod_dav_e</description>
<pubDate>19 Nov  2009 08:41:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377169</link>
</item><item>
<title>Re: handling request splicing in case of server initiated	renegotiation CVE-2009-3555</title>
<description>Joe Orton wrote: &amp;gt; On Thu, Nov 19, 2009 at 04:05:34PM +0100, Hartmut Keil wrote: &amp;gt;&amp;gt; &amp;gt; [...] From my point of view without &amp;gt;&amp;gt; &amp;gt; drawbacks, since &amp;#039;pip</description>
<pubDate>19 Nov  2009 08:41:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377168</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Thu, Nov 19, 2009 at 06:47:56AM -0500, Jeff Trawick wrote: &amp;gt; I envisioned the conf (perhaps a vendor conf) declaring something like &amp;gt; &amp;gt; MutexDir l</description>
<pubDate>19 Nov  2009 08:09:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377162</link>
</item><item>
<title>Re: handling request splicing in case of server initiated renegotiation CVE-2009-3555</title>
<description>On Thu, Nov 19, 2009 at 04:05:34PM +0100, Hartmut Keil wrote: &amp;gt; With the proposed change, we prevent request splitting attacks based &amp;gt; on the TSL ren</description>
<pubDate>19 Nov  2009 07:58:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377161</link>
</item><item>
<title>Re: handling request splicing in case of server initiated	renegotiation CVE-2009-3555</title>
<description>Joe Orton wrote: &amp;gt; On Tue, Nov 17, 2009 at 06:12:41PM +0100, Hartmut Keil wrote: &amp;gt;&amp;gt; The client must stop and wait for the response in any case, otherw</description>
<pubDate>19 Nov  2009 07:05:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377160</link>
</item><item>
<title>Re: Backport proposal for CVE-2009-3555</title>
<description>On 09.11.2009 23:28, Rainer Jung wrote: &amp;gt; I did a first try on backporting the CVE-2009-3555 patch to 2.0: &amp;gt; &amp;gt; http://people.apache.org/~rjung/patche</description>
<pubDate>19 Nov  2009 04:08:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377140</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Thu, Nov 19, 2009 at 6:47 AM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; On Thu, Nov 19, 2009 at 4:23 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote: &amp;gt;&amp;gt; On</description>
<pubDate>19 Nov  2009 04:03:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377139</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Thu, Nov 19, 2009 at 4:23 AM, Joe Orton &amp;lt;jorton@redhat.com&amp;gt; wrote: &amp;gt; On Wed, Nov 18, 2009 at 01:18:55PM -0500, Jeff Trawick wrote: &amp;gt;&amp;gt; A. simplistic</description>
<pubDate>19 Nov  2009 03:47:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377138</link>
</item><item>
<title>Re: handling request splicing in case of server initiated renegotiation CVE-2009-3555</title>
<description>On Tue, Nov 17, 2009 at 06:12:41PM +0100, Hartmut Keil wrote: &amp;gt; The client must stop and wait for the response in any case, otherwise the &amp;gt; response o</description>
<pubDate>19 Nov  2009 01:30:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377133</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Wed, Nov 18, 2009 at 01:18:55PM -0500, Jeff Trawick wrote: &amp;gt; A. simplistic goal: Just make it simple for modules with no special &amp;gt; issues or love o</description>
<pubDate>19 Nov  2009 01:23:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377132</link>
</item><item>
<title>Re: better SSL defaults in 2.4</title>
<description>On Wed, Nov 18, 2009 at 09:54:34AM -0500, Jeff Trawick wrote: &amp;gt; enable session cache by default? Yes! I&amp;#039;ve been moving towards this goal - creating</description>
<pubDate>19 Nov  2009 01:00:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377129</link>
</item><item>
<title>Re: mutex method configuration cleanup for 2.4</title>
<description>On Wed, Nov 18, 2009 at 1:18 PM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; This should be good enough to get rid of AcceptMutex, LockFile, and &amp;gt; the</description>
<pubDate>18 Nov  2009 12:50:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377116</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Jean-Marc Desperrier wrote: &amp;gt; Dr Stephen Henson wrote: &amp;gt;&amp;gt; Jean-Marc Desperrier wrote: &amp;gt;&amp;gt;&amp;gt; Joe Orton wrote: &amp;gt;&amp;gt;&amp;gt;&amp;gt; Please file a bug and attach all of: &amp;gt;</description>
<pubDate>18 Nov  2009 12:25:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377115</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>On 11/18/2009 08:32 PM, Jean-Marc Desperrier wrote: &amp;gt; Stefan Fritsch wrote: &amp;gt;&amp;gt; I cannot reproduce the problems. With an openssl that rejects all &amp;gt;&amp;gt; re</description>
<pubDate>18 Nov  2009 11:47:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377107</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Stefan Fritsch wrote: &amp;gt; I cannot reproduce the problems. With an openssl that rejects all &amp;gt; renegotiations, both reconnections after ssl session timeo</description>
<pubDate>18 Nov  2009 11:32:13 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377106</link>
</item><item>
<title>FIPS mode for MOD_SSL</title>
<description>Dear Apache developer,   (this is related to Apache bugzilla 46270)   I&amp;#039;m attempting to build a FIPS compliant version of Apache 2.2.14. I&amp;#039;ve app</description>
<pubDate>18 Nov  2009 11:01:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377105</link>
</item><item>
<title>mutex method configuration cleanup for 2.4</title>
<description>A. simplistic goal: Just make it simple for modules with no special issues or love of complexity. Provide these directives to set global defaults for</description>
<pubDate>18 Nov  2009 10:18:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377104</link>
</item><item>
<title>Re: [PATCH] useful ldap feature</title>
<description>Justin came up with it but wants Tony Stevenson to be blamed for it. :-) The docs look good to me.  Sent from my iPhone On Nov 18, 2009, at 6:51 AM,</description>
<pubDate>18 Nov  2009 07:32:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377096</link>
</item><item>
<title>Re: [PATCH] useful ldap feature</title>
<description>Justin came up with it but wants Tony Stevenson to be blamed for it. :-) The docs look good to me.  Sent from my iPhone On Nov 18, 2009, at 6:51 AM,</description>
<pubDate>18 Nov  2009 07:32:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377097</link>
</item><item>
<title>Re: better SSL defaults in 2.4</title>
<description>On 11/18/2009 03:54 PM, Jeff Trawick wrote: &amp;gt; enable session cache by default? +1 Cheers Jean-Frederic</description>
<pubDate>18 Nov  2009 07:02:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377095</link>
</item><item>
<title>better SSL defaults in 2.4</title>
<description>enable session cache by default? change SSLMutex default to &amp;quot;SSLMutex default&amp;quot; instead of &amp;quot;SSLMutex none&amp;quot;? (does this default to &amp;quot;none&amp;quot; to avoid chec</description>
<pubDate>18 Nov  2009 06:54:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377094</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Torsten Foertsch wrote: &amp;gt; If &amp;gt; your/authentication/ is a resource that generates a directory listing &amp;gt; via mod_autoindex then apache issues a subrequ</description>
<pubDate>18 Nov  2009 05:41:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377086</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Dr Stephen Henson wrote: &amp;gt; Jean-Marc Desperrier wrote: &amp;gt;&amp;gt; Joe Orton wrote: &amp;gt;&amp;gt;&amp;gt; Please file a bug and attach all of: &amp;gt;&amp;gt;&amp;gt; &amp;gt;&amp;gt;&amp;gt; a) error_log output at &amp;quot;Lo</description>
<pubDate>18 Nov  2009 05:34:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377085</link>
</item><item>
<title>Re: dav_new_error_*() and errno, revisit before 2.4 GA</title>
<description>On Thu, Nov 12, 2009 at 7:04 AM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; On Wed, Nov 11, 2009 at 10:06 PM, Greg Stein &amp;lt;gstein@gmail.com&amp;gt; wrote: &amp;gt;&amp;gt; O</description>
<pubDate>18 Nov  2009 04:29:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377084</link>
</item><item>
<title>Re: [PATCH] useful ldap feature</title>
<description>On Tue, Nov 17, 2009 at 10:34 PM, Joe Schaefer &amp;lt;joe_schaefer@yahoo.com&amp;gt; wrote: &amp;gt; This patch applies against the 2.2 branch &amp;gt; and adds the AuthLDAPBind</description>
<pubDate>18 Nov  2009 03:51:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377079</link>
</item><item>
<title>Re: Obsolete modules in 2.3</title>
<description>On Nov 17, 2009, at 21:49 , William A. Rowe Jr. wrote: &amp;gt; Roy T. Fielding wrote: &amp;gt;&amp;gt; I personally find it useful to continue having support for &amp;gt;&amp;gt; feat</description>
<pubDate>18 Nov  2009 03:27:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377078</link>
</item><item>
<title>Re: [PATCH] useful ldap feature</title>
<description>&amp;gt; This patch applies against the 2.2 branch &amp;gt; and adds the AuthLDAPBindAuthoritative directive, &amp;gt; which allows infra to failover login requests &amp;gt; to f</description>
<pubDate>17 Nov  2009 20:49:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377074</link>
</item><item>
<title>[PATCH] useful ldap feature</title>
<description>This patch applies against the 2.2 branch and adds the AuthLDAPBindAuthoritative directive, which allows infra to failover login requests to file base</description>
<pubDate>17 Nov  2009 19:34:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377072</link>
</item><item>
<title>Re: Obsolete modules in 2.3</title>
<description>Roy T. Fielding wrote: &amp;gt; I personally find it useful to continue having support for &amp;gt; features that were once used in the past, specifically to &amp;gt; test</description>
<pubDate>17 Nov  2009 18:49:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377071</link>
</item><item>
<title>Re: Obsolete modules in 2.3</title>
<description>I personally find it useful to continue having support for features that were once used in the past, specifically to test things that once worked to s</description>
<pubDate>17 Nov  2009 16:12:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377069</link>
</item><item>
<title>Re: Obsolete modules in 2.3</title>
<description>Hi, Gregg L. Smith schrieb: &amp;gt; Lars Eilebrecht wrote: &amp;gt;&amp;gt; Or just use the 2.2 modules with 2.4. &amp;gt; &amp;gt; It was just my recent findings with 2.3.3-alpha tha</description>
<pubDate>17 Nov  2009 12:52:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377065</link>
</item><item>
<title>Re: Obsolete modules in 2.3</title>
<description>Lars Eilebrecht wrote: &amp;gt; Or just use the 2.2 modules with 2.4. It was just my recent findings with 2.3.3-alpha that this will not work. If the APR 1.</description>
<pubDate>17 Nov  2009 12:33:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377064</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Jean-Marc Desperrier wrote: &amp;gt; Joe Orton wrote: &amp;gt;&amp;gt; Please file a bug and attach all of: &amp;gt;&amp;gt; &amp;gt;&amp;gt; a) error_log output at &amp;quot;LogLevel debug&amp;quot; for that case &amp;gt;&amp;gt;</description>
<pubDate>17 Nov  2009 11:31:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377063</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Joe Orton wrote: &amp;gt; Please file a bug and attach all of: &amp;gt; &amp;gt; a) error_log output at &amp;quot;LogLevel debug&amp;quot; for that case &amp;gt; b) the config snipping that you&amp;#039;re</description>
<pubDate>17 Nov  2009 11:25:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377062</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Rainer Jung wrote: &amp;gt; In the presence of the &amp;gt; session ticket extension, session IDs observed on the server are no &amp;gt; longer a good measurement for ses</description>
<pubDate>17 Nov  2009 11:03:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377061</link>
</item><item>
<title>Re: handling request splicing in case of server initiated	renegotiation CVE-2009-3555</title>
<description>Joe Orton wrote: &amp;gt; On Tue, Nov 17, 2009 at 11:42:40AM +0100, Hartmut Keil wrote: &amp;gt;&amp;gt; Joe Orton wrote: &amp;gt;&amp;gt;&amp;gt; This would break HTTP pipelining over SSL (fo</description>
<pubDate>17 Nov  2009 09:12:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377050</link>
</item><item>
<title>Re: mod_rewrite and mod_fcgid pass wrong fcgi request</title>
<description>On Mon, Nov 16, 2009 at 7:06 AM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; On Mon, Nov 16, 2009 at 1:04 AM, Felipe Alcacibar &amp;lt;falcacibar@gmail.com&amp;gt; wr</description>
<pubDate>17 Nov  2009 07:28:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377041</link>
</item><item>
<title>Re: handling request splicing in case of server initiated renegotiation CVE-2009-3555</title>
<description>On Tue, Nov 17, 2009 at 11:42:40AM +0100, Hartmut Keil wrote: &amp;gt; Joe Orton wrote: &amp;gt; &amp;gt; This would break HTTP pipelining over SSL (for affected configura</description>
<pubDate>17 Nov  2009 05:08:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377035</link>
</item><item>
<title>AIX build as installp package ready for testing</title>
<description>It has taken a while for me to figure out what I was doing wrong - but that seems to be resolved. I have a build of apache2.2.14 ready. But rather th</description>
<pubDate>17 Nov  2009 03:31:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377030</link>
</item><item>
<title>Re: handling request splicing in case of server initiated	renegotiation CVE-2009-3555</title>
<description>Hi Joe Joe Orton wrote: &amp;gt; On Mon, Nov 16, 2009 at 09:59:12PM +0100, Hartmut Keil wrote: &amp;gt;&amp;gt; With the change described in https://issues.apache.org/bug</description>
<pubDate>17 Nov  2009 02:42:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377029</link>
</item><item>
<title>Re: r833582</title>
<description>On Tue, Nov 17, 2009 at 10:06:32AM +0100, &amp;quot;PlÃ¼m, RÃ¼diger, VF-Group&amp;quot; wrote: &amp;gt; I now see the following warning: &amp;gt; &amp;gt; ssl_engine_kernel.c: In function</description>
<pubDate>17 Nov  2009 01:55:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377025</link>
</item><item>
<title>Re: r833582</title>
<description>On 17/11/09 10:06, &amp;quot;Plüm, Rüdiger, VF-Group&amp;quot; wrote: &amp;gt; I now see the following warning: &amp;gt; &amp;gt; ssl_engine_kernel.c: In function `ssl_callback_Info&amp;#039;: &amp;gt; ssl</description>
<pubDate>17 Nov  2009 01:50:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377024</link>
</item><item>
<title>r833582</title>
<description>I now see the following warning: ssl_engine_kernel.c: In function `ssl_callback_Info&amp;#039;: ssl_engine_kernel.c:1943: warning: passing arg 1 of `SSL_state</description>
<pubDate>17 Nov  2009 01:06:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377023</link>
</item><item>
<title>Re: handling request splicing in case of server initiated renegotiation CVE-2009-3555</title>
<description>On Mon, Nov 16, 2009 at 09:59:12PM +0100, Hartmut Keil wrote: &amp;gt; With the change described in https://issues.apache.org/bugzilla/show_bug.cgi?id=48204</description>
<pubDate>16 Nov  2009 14:19:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377007</link>
</item><item>
<title>Re: svn commit: r880981 - /httpd/httpd/trunk/build/instdso.sh</title>
<description>On Mon, Nov 16, 2009 at 4:51 PM, &amp;lt;trawick@apache.org&amp;gt; wrote: &amp;gt; Author: trawick &amp;gt; Date: Mon Nov 16 21:51:01 2009 &amp;gt; New Revision: 880981 &amp;gt; &amp;gt; URL: http:</description>
<pubDate>16 Nov  2009 14:07:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377006</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>On 16.11.2009 20:21, Jean-Marc Desperrier wrote: &amp;gt; Jean-Marc Desperrier wrote: &amp;gt; An interesting point is that firefox is *not* reusing the ssl session</description>
<pubDate>16 Nov  2009 14:03:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377005</link>
</item><item>
<title>Re: mod_fcgid: different instances of the same program</title>
<description>On 16.11.2009 13:14, Jeff Trawick wrote: &amp;gt; On Mon, Nov 16, 2009 at 5:03 AM, Danny Sadinoff &amp;lt;danny@sadinoff.com&amp;gt; wrote: &amp;gt;&amp;gt; On Tue, Nov 10, 2009 at 1:47</description>
<pubDate>16 Nov  2009 13:49:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377004</link>
</item><item>
<title>handling request splicing in case of server initiated renegotiation CVE-2009-3555</title>
<description>Hi everybody  for clarification of https://issues.apache.org/bugzilla/show_bug.cgi?id=48204 a more detailed explanation of the described attack scena</description>
<pubDate>16 Nov  2009 12:59:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/377003</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>On Mon, Nov 16, 2009 at 08:21:20PM +0100, Jean-Marc Desperrier wrote: &amp;gt; Ok, so in fact I have one apache instance available locally with a  &amp;gt; problem</description>
<pubDate>16 Nov  2009 12:13:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376998</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>On Mon 16 Nov 2009, Jean-Marc Desperrier wrote: &amp;gt; Here&amp;#039;s the wireshark captured exchange between the client and server, &amp;gt; note that &amp;quot;Hello Request&amp;quot; al</description>
<pubDate>16 Nov  2009 11:58:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376997</link>
</item><item>
<title>intend to roll next alpha on 24th</title>
<description>I&amp;#039;ll try to do another 2.3.x on next Tuesday, the 24th. We can vote on it over thanksgiving :-) Thanks, Paul</description>
<pubDate>16 Nov  2009 11:33:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376996</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Jean-Marc Desperrier wrote: &amp;gt; Everyone who uses client certificate authentication knows that they are &amp;gt; many apache configurations around that will fo</description>
<pubDate>16 Nov  2009 11:21:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376995</link>
</item><item>
<title>Re: A fundamentally secure Apache server, any interest?</title>
<description>On Mon, Nov 16, 2009 at 5:11 PM, Sander Temme &amp;lt;sctemme@apache.org&amp;gt; wrote: &amp;gt; Hi Kevin, &amp;gt; &amp;gt; Definitely not the right list: this is where we discuss deve</description>
<pubDate>16 Nov  2009 11:05:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376994</link>
</item><item>
<title>Re: A fundamentally secure Apache server, any interest?</title>
<description>Hi Kevin,  Definitely not the right list: this is where we discuss development of the Apache HTTP Server code. users@httpd.apache.org may be a bette</description>
<pubDate>16 Nov  2009 08:11:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376991</link>
</item><item>
<title>Re: Server Gated Certs (Was: TLS renegotiation attack, mod_ssl and OpenSSL)</title>
<description>On Fri, Nov 06, 2009 at 02:00:47AM +0000, Dirk-Willem van Gulik wrote: &amp;gt; What we really need is 1) a pub/priv key pair of such a cert* (or use  &amp;gt; att</description>
<pubDate>16 Nov  2009 06:51:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376990</link>
</item><item>
<title>Re: mod_fcgid: different instances of the same program</title>
<description>&amp;gt; On Mon, Nov 9, 2009 at 5:16 PM, Danny Sadinoff &amp;gt; &amp;lt;danny.sadinoff@gmail.com&amp;gt; wrote: &amp;gt; 2) Virtual hosts &amp;gt; The above item holds true even across virtua</description>
<pubDate>16 Nov  2009 06:48:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376989</link>
</item><item>
<title>Re: one remaining mpms-shared quirk</title>
<description>On Sun, Nov 15, 2009 at 5:09 PM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrote: &amp;gt; On Sat, Nov 14, 2009 at 8:10 PM, William A. Rowe Jr. &amp;gt; &amp;lt;wrowe@rowe-clan.net</description>
<pubDate>16 Nov  2009 06:37:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376988</link>
</item><item>
<title>Re: A fundamentally secure Apache server, any interest?</title>
<description>On Mon, 2009-11-16 at 08:42 -0500, Sweere, Kevin E CTR USAF AFRL/RYT wrote: &amp;gt; Greetings, &amp;gt;  &amp;gt; I work for the US Air Force. We have a prototype that</description>
<pubDate>16 Nov  2009 06:18:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376976</link>
</item><item>
<title>Re: A fundamentally secure Apache server, any interest?</title>
<description>I support you! 2009/11/16 Sweere, Kevin E CTR USAF AFRL/RYT &amp;lt;Kevin.Sweere@wpafb.af.mil&amp;gt; &amp;gt; Greetings, &amp;gt; &amp;gt; I work for the US Air Force. We have a pro</description>
<pubDate>16 Nov  2009 06:08:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376975</link>
</item><item>
<title>Re: balancer-manager and server-status feature request.</title>
<description>On Nov 16, 2009, at 5:52 AM, Mladen Turk wrote: &amp;gt; Regarding xml data, it is my long standing wish to create &amp;gt; log output filter sub module system wher</description>
<pubDate>16 Nov  2009 06:04:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376974</link>
</item><item>
<title>A fundamentally secure Apache server, any interest?</title>
<description>Greetings,   I work for the US Air Force.  We have a prototype that dramatically, fundamentally increases a web server&amp;#039;s security.    We run an Apach</description>
<pubDate>16 Nov  2009 05:42:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376973</link>
</item><item>
<title>Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l</title>
<description>Stefan Fritsch wrote: &amp;gt; On Tuesday 10 November 2009, Jean-Marc Desperrier wrote: &amp;gt;&amp;gt; [ Apache + openssl 0.9.8l = TLS renegotiation fully disabled ] &amp;gt;&amp;gt;</description>
<pubDate>16 Nov  2009 04:26:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376972</link>
</item><item>
<title>Re: mod_fcgid: different instances of the same program</title>
<description>On Mon, Nov 16, 2009 at 5:03 AM, Danny Sadinoff &amp;lt;danny@sadinoff.com&amp;gt; wrote: &amp;gt; On Tue, Nov 10, 2009 at 1:47 AM, Danny Sadinoff &amp;lt;danny@sadinoff.com&amp;gt; wro</description>
<pubDate>16 Nov  2009 04:14:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376965</link>
</item><item>
<title>Re: mod_rewrite and mod_fcgid pass wrong fcgi request</title>
<description>On Mon, Nov 16, 2009 at 1:04 AM, Felipe Alcacibar &amp;lt;falcacibar@gmail.com&amp;gt; wrote: &amp;gt; ... &amp;gt;&amp;gt; When comparing modes of PHP execution: &amp;gt;&amp;gt; &amp;gt;&amp;gt; - CGI and FastCG</description>
<pubDate>16 Nov  2009 04:06:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376964</link>
</item><item>
<title>mod_proxy_fcgi changes SCRIPT_FILENAME?</title>
<description>I am trying to use apache-2.3&amp;#039;s mod_proxy_fcgi in 2.2.13. It seems to be built and run all right. But I have noticed that the SCRIPT_FILENAME has bee</description>
<pubDate>16 Nov  2009 03:15:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376963</link>
</item><item>
<title>Re: balancer-manager and server-status feature request.</title>
<description>On 16/11/09 11:33, Mark Watts wrote: &amp;gt; &amp;gt; The statistics one gets from both /balancer-manager and mod_status are &amp;gt; useful but of course only exist unti</description>
<pubDate>16 Nov  2009 02:52:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376962</link>
</item><item>
<title>balancer-manager and server-status feature request.</title>
<description>The statistics one gets from both /balancer-manager and mod_status are useful but of course only exist until httpd is restarted. It would be nice if</description>
<pubDate>16 Nov  2009 02:33:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376961</link>
</item><item>
<title>Re: mod_fcgid: different instances of the same program</title>
<description>On Tue, Nov 10, 2009 at 1:47 AM, Danny Sadinoff &amp;lt;danny@sadinoff.com&amp;gt; wrote: &amp;gt; On Tue, Nov 10, 2009 at 12:53 AM, Jeff Trawick &amp;lt;trawick@gmail.com&amp;gt; wrot</description>
<pubDate>16 Nov  2009 02:03:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376955</link>
</item><item>
<title>Re: mod_rewrite and mod_fcgid pass wrong fcgi request</title>
<description>... &amp;gt; When comparing modes of PHP execution: &amp;gt; &amp;gt; - CGI and FastCGI are directly comparable because the information that &amp;gt; Apache needs to pass to PHP</description>
<pubDate>15 Nov  2009 22:04:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/376942</link>
</item>
</channel>
</rss>
