1.8.10 up for testing/signing

2014-08-01 Thread Ben Reser
The 1.8.10 release artifacts are now available for testing/signing. Please get the tarballs from https://dist.apache.org/repos/dist/dev/subversion and add your signatures there. I plan to try and release on August 11th so please try and get your votes/signatures in place by August 9th.

1.7.18 up for testing/signing

2014-08-01 Thread Ben Reser
The 1.7.18 release artifacts are now available for testing/signing. Please get the tarballs from https://dist.apache.org/repos/dist/dev/subversion and add your signatures there. I plan to try and release on August 11th so please try and get your votes/signatures in place by August 9th.

Re: svn commit: r1565531 - /subversion/trunk/subversion/libsvn_ra_serf/util.c

2014-08-01 Thread Ben Reser
On 8/1/14 8:23 AM, Ivan Zhakov wrote: > I think it will be more clear to write code in the following way: > [[ > san = svn_hash_gets(serf_cert, "subjectAltName"); > /* Match server certificate CN with the hostname of the server iff >* we didn't find any subjectAltName fields and

Re: MD5 Collisions and Cached Authentcation

2014-08-01 Thread Ben Reser
On 7/31/14 2:27 PM, Ben Reser wrote: > On 6/5/14 11:29 PM, Ben Reser wrote: >> On 6/5/14, 6:16 PM, Bert Huijben wrote: >>> Do we make sure that we only send the password to an exact match of the >>> realm? >>> Otherwise somebody might be able to theoretically steal passwords by using a >>> special

Re: svn commit: r1612405 - in /subversion/trunk/subversion: include/private/svn_io_private.h libsvn_subr/io.c libsvn_subr/named_atomic.c

2014-08-01 Thread Ivan Zhakov
On 22 July 2014 01:48, wrote: > Author: stefan2 > Date: Mon Jul 21 21:48:35 2014 > New Revision: 1612405 > > URL: http://svn.apache.org/r1612405 > Log: > Follow-up to r1611379: Correctly handle all intermittent errors. > > Since the same code sequence has been used for FSFS since 2007, > factor i

Re: svn commit: r1614052 - in /subversion/branches/authzperf/subversion/libsvn_repos: authz.c authz_pool.c repos.h

2014-08-01 Thread Stefan Fuhrmann
On Fri, Aug 1, 2014 at 4:44 PM, Branko Čibej wrote: > On 01.08.2014 14:49, Stefan Fuhrmann wrote: > > [...] > >* The filtered tree can be constructed more quickly if the >path rules are usually in path-order, i.e. there will soon be > a shortcut that works for sibling paths. Once more

Re: svn commit: r1565531 - /subversion/trunk/subversion/libsvn_ra_serf/util.c

2014-08-01 Thread Ivan Zhakov
On 7 February 2014 08:32, wrote: > Author: breser > Date: Fri Feb 7 04:32:50 2014 > New Revision: 1565531 > > URL: http://svn.apache.org/r1565531 > Log: > ra_serf: Do not compare the CommonName of a certificate if there are > subjectAltName extensions of the DNS type when validating the certific

Re: svn commit: r1614052 - in /subversion/branches/authzperf/subversion/libsvn_repos: authz.c authz_pool.c repos.h

2014-08-01 Thread Branko Čibej
On 01.08.2014 14:49, Stefan Fuhrmann wrote: > * svn_config_enumerate2 accounts for more than 50% > of the model filtering overhead. It's a mix of section lookup, > iteration pool handling, hash iteration etc. end up being a > massive overhead compared to the "is this name relevant" > check

Re: svn commit: r1614080 - in /subversion/branches/authzperf: BRANCH-README subversion/libsvn_repos/authz.c subversion/libsvn_subr/config.c subversion/libsvn_subr/config_impl.h

2014-08-01 Thread Stefan Fuhrmann
On Tue, Jul 29, 2014 at 5:55 PM, Branko Čibej wrote: > On 29.07.2014 15:55, Stefan Fuhrmann wrote: > [...] >So, while you can without doubt parse the file streamily, > you cannot begin to build a data model with authz > semantics from it streamily. We can go down the path > of inventing

Re: svn commit: r1614052 - in /subversion/branches/authzperf/subversion/libsvn_repos: authz.c authz_pool.c repos.h

2014-08-01 Thread Stefan Fuhrmann
On Fri, Aug 1, 2014 at 1:23 PM, Branko Čibej wrote: > On 01.08.2014 13:07, Stefan Fuhrmann wrote: > > [...] > Ack, thanks for the explanation! > > I'm currently working on the improved parser and an in-memory > representation that should make generating the per-user filtered rules much > easi

Re: svn commit: r1614052 - in /subversion/branches/authzperf/subversion/libsvn_repos: authz.c authz_pool.c repos.h

2014-08-01 Thread Branko Čibej
On 01.08.2014 13:07, Stefan Fuhrmann wrote: > On Wed, Jul 30, 2014 at 4:41 PM, Branko Čibej > wrote: > > On 28.07.2014 17:21, stef...@apache.org > wrote: >> Author: stefan2 >> Date: Mon Jul 28 15:21:43 2014 >> New Revision:

Re: svn commit: r1614052 - in /subversion/branches/authzperf/subversion/libsvn_repos: authz.c authz_pool.c repos.h

2014-08-01 Thread Stefan Fuhrmann
On Wed, Jul 30, 2014 at 4:41 PM, Branko Čibej wrote: > On 28.07.2014 17:21, stef...@apache.org wrote: > > Author: stefan2 > Date: Mon Jul 28 15:21:43 2014 > New Revision: 1614052 > > URL: http://svn.apache.org/r1614052 > Log: > On the authzperf branch: Hide the svn_authz_t definition from > the