[users@httpd] Misbehaving CustomLog logger causing local denial-of-service, intended behaviour?

Hello, I’ve encountered an interesting local DOS issue on Apache 2.4.48, and I am not sure whether this is intended behavior. Symptom: - Apache2 hangs indefinitely (stops processing incoming requests) Setup: - Apache 2.4.48 built from source, running on Debian 10 - A dummy CustomLog program tha

Re: [users@httpd] Misbehaving CustomLog logger causing local denial-of-service, intended behaviour?

On Friday 04 June 2021 at 11:09:33, Olli Pasanen wrote: > Hello, > > I’ve encountered an interesting local DOS issue on Apache 2.4.48, and I am > not sure whether this is intended behavior. > > Symptom: > - Apache2 hangs indefinitely (stops processing incoming requests) > > Setup: > - Apache 2.

Re: [users@httpd] Newer Apache does not offer TLS cipher with TLSv1 anymore

Hildegard, I believe this is the result of a deliberate change in the OpenSSL API when going to version 1.1.0. In earlier versions of OpenSSL one could switch on/off individual protocols, whereas now one specifies a minimum and maximum TLS version to use. In Apache, the configuration handling

[users@httpd] How to compile Apache 2.4 source to get mod_shib_24.so

Hello. We have an Apache 2.2 server running on an old Windows 2008 server. We are upgrading to Apache 2.4, but we are having an issue with shibboleth that the module mod_shib_2.4.so is missing. I was told that it would have to be compiled, but I haven't found any information on how to do this