You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Jim Jagielski <ji...@jaguNET.com> on 2017/06/13 17:33:49 UTC

[VOTE] Release Apache httpd 2.4.26 as GA

The pre-release test tarballs for Apache httpd
version 2.4.26 can be found at the usual place:

	http://httpd.apache.org/dev/dist/

I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

[ ] +1: Good to go
[ ] +0: meh
[ ] -1: Danger Will Robinson. And why.

Vote will last the normal 72 hrs.

NOTE: The *-deps are only there for convenience.

Thx!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Niklas Edmundsson <ni...@acc.umu.se>.
On Tue, 13 Jun 2017, Jim Jagielski wrote:

> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
>
> 	http://httpd.apache.org/dev/dist/

Late to the game and more of a nitpick for next release:

http://httpd.apache.org/dev/dist/CHANGES_2.4.26 notably has links to 
the complete 2.2.x and 2.0.x release history, but NOT for the complete 
2.4.x release history...

Yes, it's available in CHANGES_2.4 but I think there should be a hint 
in CHANGES_2.4.26 as well to avoid confusing newcomers more than 
necessary :-)

Also I suspect that the following note at the bottom of the CHANGES_ 
files has gone stale:

  [Apache 2.3.0-dev includes those bug fixes and changes with the
    Apache 2.2.xx tree as documented, and except as noted, below.]

AFAIK the 2.2.xx tree isn't changing much nowadays...

/Nikke
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  Niklas Edmundsson, Admin @ {acc,hpc2n}.umu.se      |     nikke@acc.umu.se
---------------------------------------------------------------------------
  "Initiate warp shell." - Picard
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by William A Rowe Jr <wr...@rowe-clan.net>.
On Tue, Jun 13, 2017 at 12:33 PM, Jim Jagielski <ji...@jagunet.com> wrote:
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
>
>         http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.

  [X] +1: Good to go

Looking good, thanks for RM'ing!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Stefan Eissing <st...@greenbytes.de>.
> Am 13.06.2017 um 19:33 schrieb Jim Jagielski <ji...@jaguNET.com>:
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.

+1 

MacOS 10.12.5 (openssl 1.0.2l, nghttp2 1.23.1)
Ubuntu 16.04.02 (openssl 1.0.2j, nghttp2 1.23.1)

Thanks for RMing again!

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Jim Jagielski <ji...@jaguNET.com>.
+1:
   o macOS 10.12.5 / Xcode 8.3.3
   o CentOS 6, 64bit

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Jacob Champion <ch...@gmail.com>.
Slightly late to the party, but

[x] +1: Good to go

Ubuntu 16.04 x64: test suites for httpd and mod_websocket pass with

APR 1.5.2, APR-Util 1.5.4
OpenSSL 1.0.2g (Debian patched)
mpm_event, mpm_prefork, mpm_worker
mod_websocket 0.1.1

I didn't test brotli or PHP. The prefork tests intermittently run into 
PR 23238's segfault [1].

--Jacob

[1] https://bz.apache.org/bugzilla/show_bug.cgi?id=23238

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Eric Covener <co...@gmail.com>.
On Tue, Feb 20, 2018 at 9:20 PM, Eric Covener <co...@gmail.com> wrote:
> On Tue, Jun 13, 2017 at 10:05 PM, Eric Covener <co...@gmail.com> wrote:
>> +1 AIX/xlc/ppc64
>>
>> I have two quirks to record, both are openssl / openssl 1.1 related
>> but given the state of my AIX system I am still +1 on the release.
>>
>>  - proxy/ssl.t almost totally fails with handhsake errors between
>> client and origin
>> [Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
>> SSL Library Error: error:14171105:SSL
>> routines:tls_process_server_hello:wrong cipher returned
>>
>> - There is some kind of atexit()-like issue with unloaded openssl-1.1
>> that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
>> related to signal handling thing)
>> .() at 0x0
>> exit(??) at 0x9000000000550c0
>> destroy_and_exit_process(process = 0x000000011001eb28,
>> process_exit_value = 0), line 266 in "main.c"
>> main(argc = 4, argv = 0x0ffffffffffff7c8), line 685 in "main.c"
>
> (replying to old vote thread for posterity)
>
> TIL:
>  - linux calls atexit() callbacks when a library is unloaded, not just
> at process exit
>  - AIX doesn't
>  - openssl 1.1 adds an atexit handler
>  - openssl 1.1 has some code to try to prevent the library from really
> being unloaded by inflating the dlopen reference count so its atexit
> will really be available at exit.
>     - https://github.com/openssl/openssl/pull/1693
>     -  apparently this isn't working on AIX
>  - openssl 1.1 doesn't seem to be provided by IBM or third parties on
> AIX as of early 2018.

LoadFile of libcrypto.so.1.1 works around this by preventing
libcrypto.so.1.1 from being unloaded when mod_ssl is loaded. Added a
hint to https://wiki.apache.org/httpd/AIXPlatform

>
>
>
>
>
>
>
>
> --
> Eric Covener
> covener@gmail.com



-- 
Eric Covener
covener@gmail.com

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Eric Covener <co...@gmail.com>.
On Tue, Jun 13, 2017 at 10:05 PM, Eric Covener <co...@gmail.com> wrote:
> +1 AIX/xlc/ppc64
>
> I have two quirks to record, both are openssl / openssl 1.1 related
> but given the state of my AIX system I am still +1 on the release.
>
>  - proxy/ssl.t almost totally fails with handhsake errors between
> client and origin
> [Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
> SSL Library Error: error:14171105:SSL
> routines:tls_process_server_hello:wrong cipher returned
>
> - There is some kind of atexit()-like issue with unloaded openssl-1.1
> that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
> related to signal handling thing)
> .() at 0x0
> exit(??) at 0x9000000000550c0
> destroy_and_exit_process(process = 0x000000011001eb28,
> process_exit_value = 0), line 266 in "main.c"
> main(argc = 4, argv = 0x0ffffffffffff7c8), line 685 in "main.c"

(replying to old vote thread for posterity)

TIL:
 - linux calls atexit() callbacks when a library is unloaded, not just
at process exit
 - AIX doesn't
 - openssl 1.1 adds an atexit handler
 - openssl 1.1 has some code to try to prevent the library from really
being unloaded by inflating the dlopen reference count so its atexit
will really be available at exit.
    - https://github.com/openssl/openssl/pull/1693
    -  apparently this isn't working on AIX
 - openssl 1.1 doesn't seem to be provided by IBM or third parties on
AIX as of early 2018.








-- 
Eric Covener
covener@gmail.com

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Eric Covener <co...@gmail.com>.
+1 AIX/xlc/ppc64

I have two quirks to record, both are openssl / openssl 1.1 related
but given the state of my AIX system I am still +1 on the release.

 - proxy/ssl.t almost totally fails with handhsake errors between
client and origin
[Tue Jun 13 21:37:04.265062 2017] [ssl:info] [pid 15073386:tid 6169]
SSL Library Error: error:14171105:SSL
routines:tls_process_server_hello:wrong cipher returned

- There is some kind of atexit()-like issue with unloaded openssl-1.1
that causes a SIGILL at shutdown (goes away w/o mod_ssl, is not
related to signal handling thing)
.() at 0x0
exit(??) at 0x9000000000550c0
destroy_and_exit_process(process = 0x000000011001eb28,
process_exit_value = 0), line 266 in "main.c"
main(argc = 4, argv = 0x0ffffffffffff7c8), line 685 in "main.c"

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Gregg Smith <gl...@gknw.net>.
On 6/13/2017 10:33 AM, Jim Jagielski wrote:
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> 	http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.

+1 on Windows

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Jacob Perkins <ja...@cpanel.net>.
Good to go from here. Tested on C6 32/64 and C7 64



—
Jacob Perkins
Product Owner
cPanel Inc.

jacob.perkins@cpanel.net <ma...@cpanel.net>
Office:  713-529-0800 x 4046
Cell:  713-560-8655

> On Jun 13, 2017, at 12:33 PM, Jim Jagielski <ji...@jaguNET.com> wrote:
> 
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> 	http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [X ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!


Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Reindl Harald <h....@thelounge.net>.

Am 13.06.2017 um 19:33 schrieb Jim Jagielski:
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> 	http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience

looks good so far with apr 1.5 on Fedora 25 because somebody should fix 
https://www.apache.org/dist/apr/ and when you look closer you see 1.6.x 
below

APR 1.5.2 is the latest available version
APR-util 1.5.4 is the latest available version
APR-iconv 1.2.1 is the latest available version
APR 0.9.20 is also available
APR-util 0.9.19 is also available
APR-iconv 0.9.7 is also available

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Yann Ylavic <yl...@gmail.com>.
On Tue, Jun 13, 2017 at 7:33 PM, Jim Jagielski <ji...@jagunet.com> wrote:
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
>
[X] +1: Good to go

Tested on Debian(s) 7, 8 and 9.
All tests passed (but usual TODOs in "t/modules/session.t" for Debian 7 and 8).
PGP signatures, SHA* and MD5 OK.

Note, this new warning with gcc 4.7.2, 4.9.2 and 6.3.0:
util.c: In function ‘ap_parse_form_data’:
util.c:2667:10: warning: ‘escaped_char[0]’ may be used uninitialized
in this function [-Wmaybe-uninitialized]
     char escaped_char[2];
          ^~~~~~~~~~~~
Looks very much like a spurious warning, but it's also hard for the
compiler to figure out.


Thanks for releasing, Jim.

Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Noel Butler <no...@ausics.net>.
On 14/06/2017 03:33, Jim Jagielski wrote:

> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!

+1 Slackware with included apr 1.6.2 and apr-util 1.6.0

-- 
Kind Regards, 

Noel Butler 

 		This Email, including any attachments, may contain legally privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
------
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument

[RESULT] Re: [VOTE] Release Apache httpd 2.4.26 as GA

Posted by Jim Jagielski <ji...@jaguNET.com>.
With more than the 3 +1 (binding) votes, and no -1, this vote
PASSES.

I anticipate a Release Announcement on Monday. Will move the
artifacts for mirror grab.

Thx to all testers and all contributors!

> On Jun 13, 2017, at 1:33 PM, Jim Jagielski <ji...@jaguNET.com> wrote:
> 
> The pre-release test tarballs for Apache httpd
> version 2.4.26 can be found at the usual place:
> 
> 	http://httpd.apache.org/dev/dist/
> 
> I'm calling a VOTE on releasing these as Apache httpd 2.4.26 GA.
> 
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
> 
> Vote will last the normal 72 hrs.
> 
> NOTE: The *-deps are only there for convenience.
> 
> Thx!