Repos Server 2.2 released

[solsson]

Hi all,

We've just released version 2.2 to http://reposserver.com/, containing
the new Apache 2.2.8.

The changes compared to Apache 2.2.6 are very small (http://
www.apache.org/dist/httpd/Announcement2.2.html), and I doubt that they
would affect a subversion server, so there's no real need to upgrade.

The big difference with 2.2 over 2.1 is that we've pulled the compiled
binaries from Apachelounge.com. Two reasons:
- We aim to keep Repos Server as true to the original distributions as
possible, and the apachelounge zip is better than the apache.org
installer*.
- This distribution supports mod_perl and ModSecurity. I want to
implement some kind of protection aganist brute force password
guessing, and mod_perl2 input/output filtering looks promising. Just
need to learn Perl first. Or can it be done with ModSecurity?

A note about upgrading: To get fresh web contents, manually delete the
html folder before reinstalling. We noticed with the previous version
that the uninstaller removed html contents even if they were changed
after the installation. That would wipe out your custom css for
svnindex unless you changed the filename. Now it is not removed at
uninstall, and not overwritten at install. We'll try to solve this in
InnoSetup for the next release.

/Staffan


* Look for example at the similarity between your new installed
httpd.conf and http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/docs/conf/httpd.conf.in

[solsson]

One more thing. The new apache binaries require Visual C++ 2005
runtime environment (which many windows systems already have). You can
download from http://www.microsoft.com/downloads/details.aspx?FamilyID=200b2fd9-ae1a-4a14-984d-389c36f85647&DisplayLang=en.

The guys at apachelounge argue that their Apache gives "improvements
in areas like Performance, MemoryManagement and Stability over
the .msi binary from ASF site". I'd prefer not to have any
dependencies for Repos Server, but lets try this for 2.2.

/Staffan