Subersion 1.9 with httpd 2.4.19 compilation error

[Attila Soki <at...@gmx.net>]

hi,

i trying to complie subversion 1.9 with mod_dav_svn support on os x 10.10 and i get the following error message:
subversion/mod_authz_svn/mod_authz_svn.c:100:8: error: This version of httpd has a security hole with mod_authz_svn

configure parameters for subversion:
./configure --prefix=/path/to/my/folder/subversion \
--with-apxs=/path/to/my/folder/apache/bin/apxs \
--with-apr=/path/to/my/folder/apr \
--with-apr-util=/path/to/my/folder/apr-util \
--with-serf=/path/to/my/folder/serf

apr-1.5.2
apr-util-1.5.4
serf-1.3.8


httpd 2.4.16 (tried httpd-2.4.12 too)
compiled from source with builtin apr -> same error message from subversion
./configure \
--with-mpm=prefork \
--prefix=/path/to/my/folder/apache \
--with-pcre=/path/to/my/folder/pcre \
--with-included-apr \
--enable-ssl \
--enable-http \
--enable-so \
--enable-unique-id \
--enable-rewrite \
--enable-deflate \
--enable-dav \
--enable-ldap \
--with-ldap \
--enable-authnz-ldap


compiled from source with external apr/apr-util -> same error message from subversion
./configure \
--with-mpm=prefork \
--prefix=/path/to/my/folder/apache \
--with-pcre=/path/to/my/folder/pcre \
--with-apr=/path/to/my/folder/apr/bin/apr-1-config \
--with-apr-util=/path/to/my/folder/apr-util/bin/apu-1-config \
--enable-ssl \
--enable-http \
--enable-so \
--enable-unique-id \
--enable-rewrite \
--enable-deflate \
--enable-dav \
--enable-ldap \
--with-ldap \
--enable-authnz-ldap


which httpd version sould i use?

thanks.

Attila Soki

Aw: Re: Subersion 1.9 with httpd 2.4.19 compilation error

[Attila Soki <at...@gmx.net>]

>Gesendet: Montag, 10. August 2015 um 17:08 Uhr
>Von: Stefan <lu...@posteo.de>
>An: users@subversion.apache.org
>Betreff: Re: Subersion 1.9 with httpd 2.4.19 compilation error

>> configure parameters for subversion:
>> ./configure --prefix=/path/to/my/folder/subversion \
>> --with-apxs=/path/to/my/folder/apache/bin/apxs \
>> --with-apr=/path/to/my/folder/apr \
>> --with-apr-util=/path/to/my/folder/apr-util \
>> --with-serf=/path/to/my/folder/serf
>>

>looking at the corresponding code in mod_authz_svn.c suggests that u are
>building with a httpd version < 2.4.14. As far as I'm aware there is no
>2.4.19 version yet from httpd (latest one I'c on the webpage is 2.4.16).
>So if you would build SVN with that version the error u are seeing
>should not trigger.>

sorry, the 2.4.19 in the subject was a typo, i mean 2.4.16

>Is it possible that you are in fact building with a different version
>than the one u expect?
>What is the value of MODULE_MAGIC_NUMBER_MAJOR/_MINOR in ur case?>

i added a pragma message to show the used major/minor numbers
major: 20120211
minor: 36

this means it uses the system provided /usr/include/apache2/ap_mmn.h instead of mine

i added a CFLAG/CPPFLAG/CXXFLAG with -I/path/to/my/folder/apache/include
and now compiles without error

thank you for your help.

Attila

Re: Subersion 1.9 with httpd 2.4.19 compilation error

[Stefan <lu...@posteo.de>]

Hi Attilla,
> hi,
>
> i trying to complie subversion 1.9 with mod_dav_svn support on os x 10.10 and i get the following error message:
> subversion/mod_authz_svn/mod_authz_svn.c:100:8: error: This version of httpd has a security hole with mod_authz_svn
>
> configure parameters for subversion:
> ./configure --prefix=/path/to/my/folder/subversion \
> --with-apxs=/path/to/my/folder/apache/bin/apxs \
> --with-apr=/path/to/my/folder/apr \
> --with-apr-util=/path/to/my/folder/apr-util \
> --with-serf=/path/to/my/folder/serf
>
> apr-1.5.2
> apr-util-1.5.4
> serf-1.3.8
>
>
> httpd 2.4.16 (tried httpd-2.4.12 too)
> compiled from source with builtin apr -> same error message from subversion
> ./configure \
> --with-mpm=prefork \
> --prefix=/path/to/my/folder/apache \
> --with-pcre=/path/to/my/folder/pcre \
> --with-included-apr \
> --enable-ssl \
> --enable-http \
> --enable-so \
> --enable-unique-id \
> --enable-rewrite \
> --enable-deflate \
> --enable-dav \
> --enable-ldap \
> --with-ldap \
> --enable-authnz-ldap
>
>
> compiled from source with external apr/apr-util -> same error message from subversion
> ./configure \
> --with-mpm=prefork \
> --prefix=/path/to/my/folder/apache \
> --with-pcre=/path/to/my/folder/pcre \
> --with-apr=/path/to/my/folder/apr/bin/apr-1-config \
> --with-apr-util=/path/to/my/folder/apr-util/bin/apu-1-config \
> --enable-ssl \
> --enable-http \
> --enable-so \
> --enable-unique-id \
> --enable-rewrite \
> --enable-deflate \
> --enable-dav \
> --enable-ldap \
> --with-ldap \
> --enable-authnz-ldap
>
>
> which httpd version sould i use?
>
> thanks.
>
> Attila Soki
>
looking at the corresponding code in mod_authz_svn.c suggests that u are 
building with a httpd version < 2.4.14. As far as I'm aware there is no 
2.4.19 version yet from httpd (latest one I'c on the webpage is 2.4.16). 
So if you would build SVN with that version the error u are seeing 
should not trigger.

Is it possible that you are in fact building with a different version 
than the one u expect?
What is the value of MODULE_MAGIC_NUMBER_MAJOR/_MINOR in ur case?

Regards,
Stefan