You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by wr...@apache.org on 2002/09/17 21:45:09 UTC

cvs commit: httpd-dist/binaries/win32 README.html

wrowe       2002/09/17 12:45:09

  Modified:    binaries/win32 README.html
  Log:
    Updated links and information about the final AFD.sys fix for XP.
  
  Revision  Changes    Path
  1.27      +28 -19    httpd-dist/binaries/win32/README.html
  
  Index: README.html
  ===================================================================
  RCS file: /home/cvs/httpd-dist/binaries/win32/README.html,v
  retrieving revision 1.26
  retrieving revision 1.27
  diff -u -r1.26 -r1.27
  --- README.html	15 Aug 2002 18:46:46 -0000	1.26
  +++ README.html	17 Sep 2002 19:45:09 -0000	1.27
  @@ -9,12 +9,16 @@
   
   <h2><a name="winsock">Windows 95 Apache Users Read This First</a></h2>
   
  -<p>If you will install Apache on Windows 95, stop.  First you need to
  -   download and install the Windows Socket 2 Update from Microsoft, available
  -   at <a href="http://www.microsoft.com/windows/downloads/bin/W95ws2setup.exe"
  -   >http://www.microsoft.com/windows/downloads/bin/W95ws2setup.exe</a>, before
  +<p>If you are installing Apache on Windows 95, stop.  First you need to
  +   download and install the Windows Socket 2 Update from Microsoft, before
      you proceed to download and install Apache on Windows 95.  Windows NT 4.0,
  -   98, ME and 2000 versions already ship with Winsock2.</p>
  +   98, ME and 2000 versions already ship with Winsock2.  You may obtain that
  +   Windows 95 Socket 2 Update from;</p>
  +
  +<dl><dd>
  +<a href="http://www.microsoft.com/windows95/downloads/contents/wuadmintools/s_wunetworkingtools/w95sockets2/default.asp"
  +>http://www.microsoft.com/windows95/downloads/contents/wuadmintools/s_wunetworkingtools/w95sockets2/default.asp</a>
  +</dd></dl>
   
   <p><strong>Warning:</strong> You must have WinSock2 TCP/IP networking 
      correctly installed, configured and running in order to install Apache on 
  @@ -24,12 +28,18 @@
   
   <h2><a name="xpbug">Windows XP Apache Users Read This First</a></h2>
   
  -<p>If you will install Apache on Windows XP, be warned.  There is a known bug
  -   our users have identified; you may or may not encounter it yourself.  It
  -   is mitigated, but possibly not eliminated, as of the Apache 1.3.24 release.  
  -   The effects of this bug within Apache 2.0 are particularly observed
  -   in conjunction with https SSL/TLS connections, but could occur in other
  -   contexts.</p>
  +<p>If you will install Apache on Windows XP, you must install the Windows XP 
  +   Service Pack 1.  You may obtain that service pack from;</p>
  +
  +<dl><dd>
  +<a href="http://www.microsoft.com/windowsxp/pro/downloads/servicepacks/sp1/default.asp"
  +>http://www.microsoft.com/windowsxp/pro/downloads/servicepacks/sp1/default.asp</a>
  +</dd></dl>
  +
  +<p>The original distribution of Windows XP may expose you to a known bug,
  +   reported by users of Apache 1.3 and 2.0 on Windows XP.  The effects of this 
  +   bug are particularly observed in conjunction with https SSL/TLS connections, 
  +   but also occurs in other contexts.</p>
   
   <p>It appears the combination of duplicating file handles between and parent
      and child process, in conjunction with blocking sends to the http client
  @@ -37,17 +47,16 @@
      tends to throw any error in the 'Cannot find server or DNS Error' category, 
      rather than explaining the real error or display the corruption.  You will 
      only see this corruption over slower links, testing the local loopback 
  -   generally reveals no corruption.  This is a potential security risk, since 
  -   the random, corrupt data served may come from anywhere, such as the cache 
  -   of buffered file pages containing sensitive data.</p>
  +   (localhost) generally reveals no corruption.  This is a potential security 
  +   risk, since the random, corrupt data served may come from anywhere, such as 
  +   the cache of buffered file pages containing sensitive data.</p>
   
   <p>If you receive such errors on Windows XP using SSI scripting or PHP scripts,
  -   but not static pages, you are probably a victim of this bug.  It has been 
  -   reported to Microsoft, they have prepared a hotfix for afd.sys that 
  -   should resolve this bug.  MSKB article 
  +   but not static pages, you are probably a victim of this bug.  Microsoft
  +   initially released a hotfix for the issue, that has been superceeded by
  +   the Service Pack 1 release.  MSKB article 
      <a href="http://support.microsoft.com/default.aspx?scid=kb;EN-US;q317949"
  -    >Q317949</a> addresses this bug, you should be able to obtain the hotfix 
  -   directly from Microsoft by citing this Knowledge Base article.</p>
  +    >Q317949</a> addresses this bug.</p>
   
   <h2><a name="stable">The current stable release is Apache 2.0.40</a></h2>