[oe] [meta-webserver][PATCH 0/3] Apache / PHP upgrades

[Paul Eggleton]

Hi Randy,

On Thursday 16 January 2014 09:31:28 Randy MacLeod wrote:
> You asked me about dropping this patch and I've done a bit of digging.
> 
> My conclusion is that the  patch is not integrated into 2.4.7 and
> it would be "nice to have" since we've supported it so far.
> It seems that apache2-2.6.x will include the patch.
> 
> The intended use is primarily to support SPDY as described here:
>     https://technotes.googlecode.com/git/nextprotoneg.html
> and I skimmed though this:
> 
> http://googledevelopers.blogspot.ca/2012/04/add-spdy-support-to-your-apache-> server.html
> 
> 
> As for generating a new patch, the STATUS file in 2.4.7 says:
> ...
>     * mod_ssl: Add support for Next Protocol Negotiation.
>       Trunk patch:
>         http://svn.apache.org/viewvc?view=revision&revision=1332643
>       2.4.x patch:
>         Trunk patch works.
>       +1: ben
>       sf says: Needs r1345599, too.
>            And wrowe's comment about the 2.2 patch is also valid for 2.4:
>            http://svn.apache.org/viewvc?view=revision&revision=1354823
> 
> 
> Does that help? Do you want someone @WR to work on the patch, the
> mod_spdy module and testing? A few more comments and links given
> below.
> 
> ../Randy
> 
> ---
> 
> This patch has:
>     Upstream-Status: Backport
> and I do see the _reworked_ feature and our patch upstream
> in the git-svn repo:
>     https://github.com/apache/httpd.git
> specifically, the re-worked commit here:
> 
> https://github.com/apache/httpd/commit/afa9bc99edf96a8ff3a81786cc4ef52a9f3cf
> 310
> 
> and a commit with identical content to our patch here:
> 
> https://github.com/apache/httpd/commit/79d4d4d3ce586bf526178ed6d05e1b0dca705
> 1c4
> 
> but they are both on the trunk branch (aka 2.5) so
> they are not include in 2.4.7.
> 
> The original defect is:
>     https://issues.apache.org/bugzilla/show_bug.cgi?id=52210
> 
>     OpenSSL 1.0.1 added support for TLS Next Protocol Negotiation (NPN)
>     [1], a feature which allows client and server to negotiate what
>     protocol should be used over the secure connection.  I propose
>     adding hooks into mod_ssl to allow other modules to access
>     this feature.


Thanks for looking deeper into this. I'm not quite sure what they mean by 
"Trunk patch works" but I just retrieved the trunk patch and tried to apply it 
but there are conflicts; I also tried a cherry-pick on that git repository but 
that didn't work either. 

I suspect that it would be good to have someone else who knows more about this 
feature create and test a new patch, so if you have someone who could do that 
that would be great.

Cheers,
Paul

-- 

Paul Eggleton
Intel Open Source Technology Centre