You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by "William A. Rowe Jr." <wr...@rowe-clan.net> on 2014/08/22 19:59:55 UTC

[VOTE] Release 2.2.29 as GA?

The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
of the docs/manual/ since 2.2.28, can be found in;

	http://httpd.apache.org/dev/dist/

  +/-1
  [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)

Please take note of APR subversion version bump from 1.5.0 to 1.5.1
since 2.2.27 was released.

Vote to conclude 18:00 GMT Monday, provided enough voters have had time
to review.

Re: [VOTE] Release 2.2.29 as GA?

Posted by Eric Covener <co...@gmail.com>.
On Fri, Aug 22, 2014 at 1:59 PM, William A. Rowe Jr.
<wr...@rowe-clan.net> wrote:
>   [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)

+1 AIX/xlc/PPC64

Thanks for RM'ing

Re: [VOTE] Release 2.2.29 as GA?

Posted by Michael Felt <ma...@gmail.com>.
built on a second server, but at AIX 5.3 TL12 (5300-12-05-1140), previous
report was on AIX 5.3 TL7 (5300-07-10-0943) - so the differences (more
tests passed) may be related to that. However, on the old AIX 5.3 TL7 to
2.4.9 tests (nearly) all pass.

BOTH are reporting some failed CVE tests!

With --enable-proxy added, for more tests, result is now:

Test Summary Report
-------------------
t/apache/chunkinput.t             (Wstat: 0 Tests: 9 Failed: 1)
  Failed test:  3
t/security/CVE-2008-2364.t        (Wstat: 0 Tests: 3 Failed: 2)
  Failed tests:  2-3
t/security/CVE-2009-3555.t        (Wstat: 65280 Tests: 2 Failed: 0)
  Non-zero exit status: 255
  Parse errors: Bad plan.  You planned 4 tests but ran 2.
t/ssl/extlookup.t                 (Wstat: 0 Tests: 4 Failed: 1)
  Failed test:  2
t/ssl/pr12355.t                   (Wstat: 0 Tests: 10 Failed: 4)
  Failed tests:  3-4, 7-8
t/ssl/pr43738.t                   (Wstat: 0 Tests: 4 Failed: 2)
  Failed tests:  1-2
t/ssl/proxy.t                     (Wstat: 0 Tests: 172 Failed: 10)
  Failed tests:  3-7, 116-120
t/ssl/require.t                   (Wstat: 0 Tests: 10 Failed: 1)
  Failed test:  9
Files=109, Tests=3731, 293 wallclock secs ( 1.51 usr  0.22 sys + 45.93 cusr
15.62 csys = 63.28 CPU)
Result: FAIL
Failed 8/109 test programs. 21/3731 subtests failed.
[warning] server loopback:8529 shutdown
[warning] port 8529 still in use...
......done
[  error] error running tests (please examine t/logs/error_log)

Hope this helps!


On Sun, Aug 24, 2014 at 9:36 PM, Michael Felt <ma...@gmail.com> wrote:

> package builds fine using the build/aix scripts, except these ignore, if
> possible, the srcapr that was included in the tarball.
>
> Question: is the .gdbinit in tarball root part of the distro now?
>
> Apeche::Test returned these errors
> Test Summary Report
> -------------------
> t/apache/server_name_port.t       (Wstat: 65280 Tests: 0 Failed: 0)
>   Non-zero exit status: 255
>   Parse errors: Bad plan.  You planned 84 tests but ran 0.
> t/protocol/nntp-like.t            (Wstat: 65280 Tests: 0 Failed: 0)
>   Non-zero exit status: 255
>   Parse errors: Bad plan.  You planned 10 tests but ran 0.
> t/security/CVE-2005-2700.t        (Wstat: 0 Tests: 2 Failed: 1)
>   Failed test:  1
> t/security/CVE-2009-3555.t        (Wstat: 65280 Tests: 0 Failed: 0)
>   Non-zero exit status: 255
>   Parse errors: Bad plan.  You planned 4 tests but ran 0.
> t/ssl/basicauth.t                 (Wstat: 0 Tests: 3 Failed: 2)
>   Failed tests:  2-3
> t/ssl/env.t                       (Wstat: 0 Tests: 30 Failed: 23)
>   Failed tests:  1-8, 16-30
> t/ssl/extlookup.t                 (Wstat: 0 Tests: 4 Failed: 4)
>   Failed tests:  1-4
> t/ssl/fakeauth.t                  (Wstat: 0 Tests: 3 Failed: 2)
>   Failed tests:  2-3
> t/ssl/headers.t                   (Wstat: 0 Tests: 3 Failed: 3)
>   Failed tests:  1-3
> t/ssl/pr12355.t                   (Wstat: 0 Tests: 10 Failed: 8)
>   Failed tests:  1-8
> t/ssl/pr43738.t                   (Wstat: 0 Tests: 4 Failed: 4)
>   Failed tests:  1-4
> t/ssl/require.t                   (Wstat: 0 Tests: 10 Failed: 5)
>   Failed tests:  2, 5-7, 9
> t/ssl/v2.t                        (Wstat: 0 Tests: 1 Failed: 1)
>   Failed test:  1
> t/ssl/varlookup.t                 (Wstat: 0 Tests: 73 Failed: 73)
>   Failed tests:  1-73
> t/ssl/verify.t                    (Wstat: 0 Tests: 3 Failed: 1)
>   Failed test:  2
> Files=109, Tests=3337, 400 wallclock secs ( 4.73 usr  0.42 sys + 95.87
> cusr 62.90 csys = 163.92 CPU)
> Result: FAIL
> Failed 15/109 test programs. 127/3337 subtests failed.
>
> Will run again with --enable-proxy as I noticed all those tests are being
> skipped. And may have to do something similiar for the _auth_ modules. They
> do not look to all being tested.
>
> FYI only - as I do not believe I have a vote to give.
>
> I would like to mention, re: the tests, that most, if not all, pass with
> httpd-2.4.9
>
>
> On Fri, Aug 22, 2014 at 8:59 PM, William A. Rowe Jr. <wr...@rowe-clan.net>
> wrote:
>
>> The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
>> of the docs/manual/ since 2.2.28, can be found in;
>>
>>         http://httpd.apache.org/dev/dist/
>>
>>   +/-1
>>   [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)
>>
>> Please take note of APR subversion version bump from 1.5.0 to 1.5.1
>> since 2.2.27 was released.
>>
>> Vote to conclude 18:00 GMT Monday, provided enough voters have had time
>> to review.
>>
>
>

Re: [VOTE] Release 2.2.29 as GA?

Posted by Michael Felt <ma...@gmail.com>.
package builds fine using the build/aix scripts, except these ignore, if
possible, the srcapr that was included in the tarball.

Question: is the .gdbinit in tarball root part of the distro now?

Apeche::Test returned these errors
Test Summary Report
-------------------
t/apache/server_name_port.t       (Wstat: 65280 Tests: 0 Failed: 0)
  Non-zero exit status: 255
  Parse errors: Bad plan.  You planned 84 tests but ran 0.
t/protocol/nntp-like.t            (Wstat: 65280 Tests: 0 Failed: 0)
  Non-zero exit status: 255
  Parse errors: Bad plan.  You planned 10 tests but ran 0.
t/security/CVE-2005-2700.t        (Wstat: 0 Tests: 2 Failed: 1)
  Failed test:  1
t/security/CVE-2009-3555.t        (Wstat: 65280 Tests: 0 Failed: 0)
  Non-zero exit status: 255
  Parse errors: Bad plan.  You planned 4 tests but ran 0.
t/ssl/basicauth.t                 (Wstat: 0 Tests: 3 Failed: 2)
  Failed tests:  2-3
t/ssl/env.t                       (Wstat: 0 Tests: 30 Failed: 23)
  Failed tests:  1-8, 16-30
t/ssl/extlookup.t                 (Wstat: 0 Tests: 4 Failed: 4)
  Failed tests:  1-4
t/ssl/fakeauth.t                  (Wstat: 0 Tests: 3 Failed: 2)
  Failed tests:  2-3
t/ssl/headers.t                   (Wstat: 0 Tests: 3 Failed: 3)
  Failed tests:  1-3
t/ssl/pr12355.t                   (Wstat: 0 Tests: 10 Failed: 8)
  Failed tests:  1-8
t/ssl/pr43738.t                   (Wstat: 0 Tests: 4 Failed: 4)
  Failed tests:  1-4
t/ssl/require.t                   (Wstat: 0 Tests: 10 Failed: 5)
  Failed tests:  2, 5-7, 9
t/ssl/v2.t                        (Wstat: 0 Tests: 1 Failed: 1)
  Failed test:  1
t/ssl/varlookup.t                 (Wstat: 0 Tests: 73 Failed: 73)
  Failed tests:  1-73
t/ssl/verify.t                    (Wstat: 0 Tests: 3 Failed: 1)
  Failed test:  2
Files=109, Tests=3337, 400 wallclock secs ( 4.73 usr  0.42 sys + 95.87 cusr
62.90 csys = 163.92 CPU)
Result: FAIL
Failed 15/109 test programs. 127/3337 subtests failed.

Will run again with --enable-proxy as I noticed all those tests are being
skipped. And may have to do something similiar for the _auth_ modules. They
do not look to all being tested.

FYI only - as I do not believe I have a vote to give.

I would like to mention, re: the tests, that most, if not all, pass with
httpd-2.4.9


On Fri, Aug 22, 2014 at 8:59 PM, William A. Rowe Jr. <wr...@rowe-clan.net>
wrote:

> The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
> of the docs/manual/ since 2.2.28, can be found in;
>
>         http://httpd.apache.org/dev/dist/
>
>   +/-1
>   [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)
>
> Please take note of APR subversion version bump from 1.5.0 to 1.5.1
> since 2.2.27 was released.
>
> Vote to conclude 18:00 GMT Monday, provided enough voters have had time
> to review.
>

Re: [VOTE] Release 2.2.29 as GA?

Posted by Ruediger Pluem <rp...@apache.org>.

William A. Rowe Jr. wrote:
> The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
> of the docs/manual/ since 2.2.28, can be found in;
> 
> 	http://httpd.apache.org/dev/dist/
> 
>   +/-1
>   [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)
> 
> Please take note of APR subversion version bump from 1.5.0 to 1.5.1
> since 2.2.27 was released.
> 
> Vote to conclude 18:00 GMT Monday, provided enough voters have had time
> to review.
> 

+1

signatures and hashes ok.

Tested on Centos 6.5 64 bit with prefork, event and worker

Regards

RĂ¼diger

Re: [VOTE] Release 2.2.29 as GA?

Posted by Yann Ylavic <yl...@gmail.com>.
On Fri, Aug 22, 2014 at 7:59 PM, William A. Rowe Jr.
<wr...@rowe-clan.net> wrote:
> The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
> of the docs/manual/ since 2.2.28, can be found in;
>
>         http://httpd.apache.org/dev/dist/
>
>   +/-1
>   [  ]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)
>

[ X]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)

MPM worker, no regression for :
- Debian 6.0.9/squeeze: Linux 2.6.32-5-x86 + OpenSSL 0.9.8o-4squeeze14
- Debian 6.0.9/squeeze: Linux 2.6.32-5-amd64 + OpenSSL 1.0.1i
- Debian 7.6/wheezy: Linux 3.2.0-4-amd64 + OpenSSL 1.0.1e-2+deb7u12
- Debian 8/jessie: Linux 3.14-1-amd64 + OpenSSL 1.0.1i-2

Thanks for the RM.

Re: [VOTE] Release 2.2.29 as GA?

Posted by Rainer Jung <ra...@kippdata.de>.
Am 22.08.2014 um 19:59 schrieb William A. Rowe Jr.:
> The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
> of the docs/manual/ since 2.2.28, can be found in;
>
> 	http://httpd.apache.org/dev/dist/
>
>    +/-1
>    [ X]  Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)

+1 to release, thanks for RM

Details:

- Netware and Windows binary artefacts not checked (missing)
- signature and hashes OK
- key in KEYS file
- gz and bz2 contents identical
- no unexpected diff to svn tag
- built and tested on
   - Solaris 8+10 Sparc
   - SuSE Linux Enterprise 10 (32Bit)
   - SLES 10+11 (64 Bit)
   - RedHat Enterprise Linux 5+6 (64Bit)
- builds fine using gcc (300 different build combinations)
   - out of tree
   - with "all", "most" and default module sets
   - with either default (static) or shared linked modules
   - MPMs prefork, worker, event (where applicable)
   - dependencies apr/apu/expat/pcre:
     a) all bundled
     b) 1.5.1/1.5.3/2.1.0/8.35 (2 variants)
   - OpenSSL 1.0.1i
   - I expect configure to still fail on Linux with external non-system
     PCRE. Not a regression, see my 2.2.23 voting mail for details.
- test suite r1619925 ran for all the builds and log levels
     info and debug (522 out of 600 variations finished right now)
   - no test regressions w.r.t. at least 2.2.16-2.2.25:
     - Failed test 2 in t/ssl/extlookup.t at line 27
     - Failed test 9 in t/ssl/require.t at line 44
     For details about both see my 2.2.19 voting mail.
   - failed tests 2+3 in t/security/CVE-2008-2364.t when
     using LWP 6.0.3 or above
     For details about both see my 2.2.23 voting mail.

Regards,

Rainer

[RESULT][VOTE] Release 2.2.29 as GA?

Posted by wr...@rowe-clan.net.
--------- Original Message --------- Subject: [VOTE] Release 2.2.29 as GA?
From: "William A. Rowe Jr." <wr...@rowe-clan.net>
Date: 8/22/14 12:59 pm
To: dev@httpd.apache.org

The pre-release candidate Apache httpd 2.2.29 - with simply a rebuild
 of the docs/manual/ since 2.2.28, can be found in;

 http://httpd.apache.org/dev/dist/

 +/-1
 [ ] Release 2.2.29 (apr 1.5.1, apr-util 1.5.3)
 
  Finally +1 from me as well, sorry that I fell into a lua-as-shared-lib
rabbit hole on unix, and took too long to climb back out. and break
away from 2.4.10.  Tested 2.2.29 on an array of linux, solaris 12.3
studio, aix xlc and hpux cc, ms studio 97 and 2012 compilers, and
found no regressions..

 
Counting a sufficient number of +1's and no objections, pushing
to the mirrors this morning, once I add -win32-src and binaries.
Announcement will follow noon-ish tomorrow.
 
Feedback and corrections to 
http://httpd.apache.org/dev/dist/Announcement2.2.txt
http://httpd.apache.org/dev/dist/Announcement2.2.html
would be welcome.