From rcritten at redhat.com Mon Dec 3 20:30:12 2018 From: rcritten at redhat.com (Rob Crittenden) Date: Mon, 3 Dec 2018 15:30:12 -0500 Subject: [Mod_nss-list] date for 1.0.18 release? In-Reply-To: References: Message-ID: James Chamberlain wrote: > Hello, > > I was wondering if there is a planned release date for mod_nss 1.0.18? I > am using a newer version of httpd w/ mod_proxy and am looking for a > release with the following fix:?https://pagure.io/mod_nss/issue/45 I had been holding off to see if anything else came up. It hasn't. I'll do a release sometime this week. rob From james.chamberlain at gmail.com Mon Dec 3 21:19:05 2018 From: james.chamberlain at gmail.com (James Chamberlain) Date: Mon, 3 Dec 2018 16:19:05 -0500 Subject: [Mod_nss-list] date for 1.0.18 release? In-Reply-To: References: Message-ID: Thank you On Mon, Dec 3, 2018 at 3:30 PM Rob Crittenden wrote: > James Chamberlain wrote: > > Hello, > > > > I was wondering if there is a planned release date for mod_nss 1.0.18? I > > am using a newer version of httpd w/ mod_proxy and am looking for a > > release with the following fix: https://pagure.io/mod_nss/issue/45 > > I had been holding off to see if anything else came up. It hasn't. I'll > do a release sometime this week. > > rob > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Tue Dec 4 20:09:43 2018 From: rcritten at redhat.com (Rob Crittenden) Date: Tue, 4 Dec 2018 15:09:43 -0500 Subject: [Mod_nss-list] mod_nss 1.0.18 released Message-ID: I just released mod_nss 1.0.18. You can pick up the source at https://pagure.io/mod_nss/releases This adds support for the new mod_proxy function ssl_engine_set() so reverse proxies should work again. It also fixes a few minor issues discovered by clang. Detailed changelog: Rob Crittenden (5): Initial support for new mod_proxy function ssl_engine_set clang: Dead initialization clang: Dereference of null pointer clang: Memory leak Become 1.0.18 From james.chamberlain at gmail.com Mon Dec 17 16:42:17 2018 From: james.chamberlain at gmail.com (James Chamberlain) Date: Mon, 17 Dec 2018 11:42:17 -0500 Subject: [Mod_nss-list] Having problems with 1.0.18 Message-ID: Hello, I am testing out mod_nss 1.0.18 using the following combo: Server: Apache/2.4.20, Interface: mod_nss/1.0.18, Library: NSS/3.40.1 The requests from clients are coming in via https and being reverse proxied to an http endpoint using mod_proxy. The response to the browser takes a long time, but eventually the following is returned: Bad Request Your browser sent a request that this server could not understand. Here is an excerpt from the httpd error log: [Mon Dec 17 15:58:13.927232 2018] [:info] [pid 24535:tid 140117113034496] SSL library error 0 writing data [Mon Dec 17 15:58:13.927274 2018] [:info] [pid 24535:tid 140117113034496] SSL Library Error: 0 Unknown [Mon Dec 17 15:58:13.927331 2018] [proxy:error] [pid 24535:tid 140117113034496] (20014)Internal error (specific information not available): [client 192.168.20.1:52182] AH01084: pass request body failed to 127.0.0.1:6400 (127.0.0.1) [Mon Dec 17 15:58:13.927369 2018] [proxy_http:error] [pid 24535:tid 140117113034496] [client 192.168.20.1:52182] AH01097: pass request body failed to 127.0.0.1:6400 (127.0.0.1) from 192.168.20.1 (testclient) [Mon Dec 17 15:58:13.927382 2018] [proxy:debug] [pid 24535:tid 140117113034496] proxy_util.c(2330): AH00943: HTTP: has released connection for (127.0.0.1) [Mon Dec 17 15:58:13.927398 2018] [:debug] [pid 24535:tid 140117113034496] nss_engine_io.c(666): SSL connection destroyed without being closed I'm not sure where to look for the problem. This all used to work just fine. Can anybody point me in the right direction? Thank you, -James -------------- next part -------------- An HTML attachment was scrubbed... URL: