You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Jim Jagielski <ji...@jaguNET.com> on 2013/11/19 18:45:02 UTC
[VOTE] Release Apache httpd 2.4.7 as GA
The pre-release test tarballs for Apache httpd 2.4.7 can be found
at the usual place:
http://httpd.apache.org/dev/dist/
I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
[ ] +1: Good to go
[ ] +0: meh
[ ] -1: Danger Will Robinson. And why.
Vote will last the normal 72 hrs.
NOTE: The *-deps are only there for convenience.
RE: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Falco Schwarz <hi...@falco.me>.
[x] +1: Good to go
- Versions used: apr-1.5.0, apr-util-1.5.3, openssl-1.0.1e, mod_fcgid-2.3.9, subversion-1.8.4
- builds with all modules (+ ssl, ldap, cache, proxy)
- builds with all mpms as shared modules
- built and tested on Ubuntu 13.10
- built and tested on SLES11 SP2+3 (32 and 64bit)
- tested with all mpms
> From: jim@jaguNET.com
> Subject: [VOTE] Release Apache httpd 2.4.7 as GA
> Date: Tue, 19 Nov 2013 12:45:02 -0500
> To: dev@httpd.apache.org
>
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
> NOTE: The *-deps are only there for convenience.
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Noel Butler <no...@ausics.net>.
On Tue, 2013-11-19 at 12:45 -0500, Jim Jagielski wrote:
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
+1 slackware 13.1 13.37 14.0 14.1
built w/ apr 1.5, apr-util 1.5.3
keys OK
md5 and sha1 sums OK
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jim Jagielski <ji...@jaguNET.com>.
Note, the only think changed in event now (via https://svn.apache.org/viewvc?view=revision&revision=1542560)
is that event *checks* that atomics work as required for
event... if the check fails, it means that event has
been "broken" on that system, assuming it ever hit
blocked idlers, for a *long* time.
On Nov 22, 2013, at 2:27 PM, Jeff Trawick <tr...@gmail.com> wrote:
> On Wed, Nov 20, 2013 at 2:06 PM, Jeff Trawick <tr...@gmail.com> wrote:
> On Tue, Nov 19, 2013 at 12:45 PM, Jim Jagielski <ji...@jagunet.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> [X] +1: Good to go
>
> Linux RHEL5-ish:
>
> httpd 2.4.7+apr-1.5.0+apr-util-1.5.3+mod_perl httpd24threading branch (current)+latest libxml2/pcre/zlib/other modules
> **but no mod_ssl**
>
> passes httpd test suite
> passes the same mod_perl tests that passed with httpd 2.4.6
>
> I forgot to try this with icc at the time :( Event no longer works with httpd and apr built with icc. (See r1410459 commit thread.) More digging on my part is needed to find out which atomic code gets used.
>
>
> Win2008 R2:
>
> same combination of code
> Visual Studio 2012 64-bit (cmake "NMake Makefiles" generator)
>
> passes the same httpd tests that passed with 2.4.6 (running all testcases cleanly on Windows is not currently possible)
> not able to try mod_perl test suite in this environment currently
>
>
>
>
> --
> Born in Roswell... married an alien...
> http://emptyhammock.com/
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jeff Trawick <tr...@gmail.com>.
On Wed, Nov 20, 2013 at 2:06 PM, Jeff Trawick <tr...@gmail.com> wrote:
> On Tue, Nov 19, 2013 at 12:45 PM, Jim Jagielski <ji...@jagunet.com> wrote:
>
>> The pre-release test tarballs for Apache httpd 2.4.7 can be found
>> at the usual place:
>>
>> http://httpd.apache.org/dev/dist/
>>
>> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>>
>> [ ] +1: Good to go
>> [ ] +0: meh
>> [ ] -1: Danger Will Robinson. And why.
>>
>
> [X] +1: Good to go
>
> Linux RHEL5-ish:
>
> httpd 2.4.7+apr-1.5.0+apr-util-1.5.3+mod_perl httpd24threading branch
> (current)+latest libxml2/pcre/zlib/other modules
> **but no mod_ssl**
>
> passes httpd test suite
> passes the same mod_perl tests that passed with httpd 2.4.6
>
I forgot to try this with icc at the time :( Event no longer works with
httpd and apr built with icc. (See r1410459 commit thread.) More digging
on my part is needed to find out which atomic code gets used.
>
> Win2008 R2:
>
> same combination of code
> Visual Studio 2012 64-bit (cmake "NMake Makefiles" generator)
>
> passes the same httpd tests that passed with 2.4.6 (running all testcases
> cleanly on Windows is not currently possible)
> not able to try mod_perl test suite in this environment currently
>
>
--
Born in Roswell... married an alien...
http://emptyhammock.com/
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jeff Trawick <tr...@gmail.com>.
On Tue, Nov 19, 2013 at 12:45 PM, Jim Jagielski <ji...@jagunet.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
[X] +1: Good to go
Linux RHEL5-ish:
httpd 2.4.7+apr-1.5.0+apr-util-1.5.3+mod_perl httpd24threading branch
(current)+latest libxml2/pcre/zlib/other modules
**but no mod_ssl**
passes httpd test suite
passes the same mod_perl tests that passed with httpd 2.4.6
Win2008 R2:
same combination of code
Visual Studio 2012 64-bit (cmake "NMake Makefiles" generator)
passes the same httpd tests that passed with 2.4.6 (running all testcases
cleanly on Windows is not currently possible)
not able to try mod_perl test suite in this environment currently
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Reindl Harald <h....@thelounge.net>.
+1
sorry for the noise, the default seems to be changed to 2048
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e) DH 2048 bits (p: 256, g: 1, Ys: 256) FS 128
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x67) DH 2048 bits (p: 256, g: 1, Ys: 256) FS 128
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33) DH 2048 bits (p: 256, g: 1, Ys: 256) FS 128
indeed i missed:
DH parameter interoperability with primes > 1024 bit
Beginning with version 2.4.7, mod_ssl makes use of standardized DH parameters with prime lengths of 2048, 3072 and
4096 bits (from RFC 3526), and hands them out to clients based on the length of the certificate's RSA/DSA key. With
Java-based clients in particular (Java 7 or earlier), this may lead to handshake failures - see this FAQ answer for
working around such issues.
Am 20.11.2013 00:12, schrieb Reindl Harald:
>
> Am 19.11.2013 18:45, schrieb Jim Jagielski:
>> The pre-release test tarballs for Apache httpd 2.4.7 can be found
>> at the usual place:
>>
>> http://httpd.apache.org/dev/dist/
>>
>> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>>
>> [ ] +1: Good to go
>> [ ] +0: meh
>> [ ] -1: Danger Will Robinson. And why.
>>
>> Vote will last the normal 72 hrs.
>>
>> NOTE: The *-deps are only there for convenience
>
> https://issues.apache.org/bugzilla/show_bug.cgi?id=49559
> still not included and patches for 2.4.6 flying around no longer matching
>
> [root@srv-rhsoft:~]$ apachectl -t
> AH00526: Syntax error on line 20 of /etc/httpd/conf/httpd-ssl.conf:
> Invalid command 'SSLDHParametersFile', perhaps misspelled or defined...............
>
> because the original patch is more than a year old and https://www.ssllabs.com/ssltest/
> gives you 5 additional points for a 2048 bit DHE key -1 from me
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Reindl Harald <h....@thelounge.net>.
Am 19.11.2013 18:45, schrieb Jim Jagielski:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
> NOTE: The *-deps are only there for convenience
https://issues.apache.org/bugzilla/show_bug.cgi?id=49559
still not included and patches for 2.4.6 flying around no longer matching
[root@srv-rhsoft:~]$ apachectl -t
AH00526: Syntax error on line 20 of /etc/httpd/conf/httpd-ssl.conf:
Invalid command 'SSLDHParametersFile', perhaps misspelled or defined...............
because the original patch is more than a year old and https://www.ssllabs.com/ssltest/
gives you 5 additional points for a 2048 bit DHE key -1 from me
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jim Jagielski <ji...@jaguNET.com>.
+1: CentOS 6, Fed 16 and 18, OSX 10.9 (all 64bit)
On Nov 19, 2013, at 12:45 PM, Jim Jagielski <ji...@jaguNET.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
> NOTE: The *-deps are only there for convenience.
>
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Mario Brandt <jb...@gmail.com>.
+1 Debian 7.2 (x64) tested with event mpm
On 19 November 2013 18:45, Jim Jagielski <ji...@jagunet.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
> NOTE: The *-deps are only there for convenience.
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Ben Reser <be...@reser.org>.
On 11/19/13 9:45 AM, Jim Jagielski wrote:
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
+1: OS X 10.7.5 and Ubuntu 12.04: Subversion test suite passes with trunk, 1.8
and 1.7 using Subversion's HTTPv1 and HTTPv2 protocols.
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Eric Covener <co...@gmail.com>.
On Tue, Nov 19, 2013 at 12:45 PM, Jim Jagielski <ji...@jagunet.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
+1 AIX/PPC64/xlc w/ -deps, test suite 100%.
Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Gregg Smith <gl...@gknw.net>.
On 11/19/2013 9:45 AM, Jim Jagielski wrote:
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [X] +1: Good to go
APR 1.5.0 APU 1.5.3 OpenSSL 1.0.1e latest libxml2/lua/pcre/zlib
VC 2008 x86 on XP & Vista
VC 2008 x64 on Server 2003 R2
VC2012 x86&x64 on Server 2012
RE: [RESULT] Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Falco Schwarz <hi...@falco.me>.
> Jim I just now found out that the atomics problem for event also happens
> on Linux 32 Bits using GCC. At least it does on SuSE Linux Enterprise 10
> 32 Bits with platform standard gcc 4.1.0.
I can confirm that SLES11 SP2+3 with 32 Bit is also affected.
gcc version 4.3.4 [gcc-4_3-branch revision 152973] (SUSE Linux)
Re: [RESULT] Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jim Jagielski <ji...@jaguNET.com>.
Agreed.
On Nov 23, 2013, at 1:17 PM, Rainer Jung <ra...@kippdata.de> wrote:
> On 22.11.2013 18:47, Jim Jagielski wrote:
>> With +1 votes from jim,covener,trawick,gsmith,breser,noel.butler,hiding,jblond and h.reindl
>> and NO -1 votes, I call the voting closed with the
>> result of Releasing 2.4.7 as GA.
>
> Jim I just now found out that the atomics problem for event also happens
> on Linux 32 Bits using GCC. At least it does on SuSE Linux Enterprise 10
> 32 Bits with platform standard gcc 4.1.0.
>
> Not sure whether many people looking for event still run on a 32 bit
> platform, but it might also impact people building 32 bit binaries on a
> 64 bit Linux platform. Don't know.
>
> Maybe at least worth a release note.
>
> Regards,
>
> Rainer
>
Re: [RESULT] Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Rainer Jung <ra...@kippdata.de>.
On 22.11.2013 18:47, Jim Jagielski wrote:
> With +1 votes from jim,covener,trawick,gsmith,breser,noel.butler,hiding,jblond and h.reindl
> and NO -1 votes, I call the voting closed with the
> result of Releasing 2.4.7 as GA.
Jim I just now found out that the atomics problem for event also happens
on Linux 32 Bits using GCC. At least it does on SuSE Linux Enterprise 10
32 Bits with platform standard gcc 4.1.0.
Not sure whether many people looking for event still run on a 32 bit
platform, but it might also impact people building 32 bit binaries on a
64 bit Linux platform. Don't know.
Maybe at least worth a release note.
Regards,
Rainer
[RESULT] Re: [VOTE] Release Apache httpd 2.4.7 as GA
Posted by Jim Jagielski <ji...@jaguNET.com>.
With +1 votes from jim,covener,trawick,gsmith,breser,noel.butler,hiding,jblond and h.reindl
and NO -1 votes, I call the voting closed with the
result of Releasing 2.4.7 as GA.
Thx to all testers and voters!
Will push to mirrors for announcement and release next week.
On Nov 19, 2013, at 12:45 PM, Jim Jagielski <ji...@jaguNET.com> wrote:
> The pre-release test tarballs for Apache httpd 2.4.7 can be found
> at the usual place:
>
> http://httpd.apache.org/dev/dist/
>
> I'm calling a VOTE on releasing these as Apache httpd 2.4.7 GA.
>
> [ ] +1: Good to go
> [ ] +0: meh
> [ ] -1: Danger Will Robinson. And why.
>
> Vote will last the normal 72 hrs.
>
> NOTE: The *-deps are only there for convenience.
>