[oe] [meta-webserver][PATCH 0/3] Apache / PHP upgrades

[Randy MacLeod]

On 14-01-16 10:15 AM, Paul Eggleton wrote:
> Hi Randy,
>
> On Thursday 16 January 2014 09:31:28 Randy MacLeod wrote:
>> You asked me about dropping this patch and I've done a bit of digging.
>>
>> My conclusion is that the  patch is not integrated into 2.4.7 and
>> it would be "nice to have" since we've supported it so far.
>> It seems that apache2-2.6.x will include the patch.
>>
>> The intended use is primarily to support SPDY as described here:
>>      https://technotes.googlecode.com/git/nextprotoneg.html
>> and I skimmed though this:
>>
>> http://googledevelopers.blogspot.ca/2012/04/add-spdy-support-to-your-apache-> server.html
>>
>>
>> As for generating a new patch, the STATUS file in 2.4.7 says:
>> ...
>>      * mod_ssl: Add support for Next Protocol Negotiation.
>>        Trunk patch:
>>          http://svn.apache.org/viewvc?view=revision&revision=1332643
>>        2.4.x patch:
>>          Trunk patch works.
>>        +1: ben
>>        sf says: Needs r1345599, too.
>>             And wrowe's comment about the 2.2 patch is also valid for 2.4:
>>             http://svn.apache.org/viewvc?view=revision&revision=1354823
>>
>>
>> Does that help? Do you want someone @WR to work on the patch, the
>> mod_spdy module and testing? A few more comments and links given
>> below.
>>
>> ../Randy
>>
>> ---
>>
>> This patch has:
>>      Upstream-Status: Backport
>> and I do see the _reworked_ feature and our patch upstream
>> in the git-svn repo:
>>      https://github.com/apache/httpd.git
>> specifically, the re-worked commit here:
>>
>> https://github.com/apache/httpd/commit/afa9bc99edf96a8ff3a81786cc4ef52a9f3cf
>> 310
>>
>> and a commit with identical content to our patch here:
>>
>> https://github.com/apache/httpd/commit/79d4d4d3ce586bf526178ed6d05e1b0dca705
>> 1c4
>>
>> but they are both on the trunk branch (aka 2.5) so
>> they are not include in 2.4.7.
>>
>> The original defect is:
>>      https://issues.apache.org/bugzilla/show_bug.cgi?id=52210
>>
>>      OpenSSL 1.0.1 added support for TLS Next Protocol Negotiation (NPN)
>>      [1], a feature which allows client and server to negotiate what
>>      protocol should be used over the secure connection.  I propose
>>      adding hooks into mod_ssl to allow other modules to access
>>      this feature.
>
>
> Thanks for looking deeper into this. I'm not quite sure what they mean by
> "Trunk patch works" but I just retrieved the trunk patch and tried to apply it
> but there are conflicts; I also tried a cherry-pick on that git repository but
> that didn't work either.
>
> I suspect that it would be good to have someone else who knows more about this
> feature create and test a new patch, so if you have someone who could do that
> that would be great.

Will do. It may have to wait until after the Chinese Spring festival but
we'll get it on the "to do" list.

../Randy
>
> Cheers,
> Paul
>


-- 
# Randy MacLeod. SMTS, Linux, Wind River
Direct: 613.963.1350