]>
granicus.if.org Git - apache/log
Eric Covener [Mon, 24 Nov 2014 03:18:39 +0000 (03:18 +0000)]
surprising but confirmed by comment in mod_proxy
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1641311 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 22 Nov 2014 17:54:08 +0000 (17:54 +0000)]
follow up to r1641077:
one bug was traded for another in r1641077; track the response
length and the cached object length separately to avoid such
confusion
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1641095 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 22 Nov 2014 14:51:01 +0000 (14:51 +0000)]
mod_ssl: Fix recognition of OCSP stapling responses that are encoded
improperly or too large.
The one byte "ok" flag stored with the response was accounted for in
the wrong condition.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1641077 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 20 Nov 2014 21:38:53 +0000 (21:38 +0000)]
mod_reqtimeout: revert r1640758.
Unexpected functional change.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640823 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 20 Nov 2014 16:26:04 +0000 (16:26 +0000)]
mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521, r1640161.
Retain num_buckets and max_buckets accross restarts so that we can determine
whether new buckets were allocated and set their idle_spawn_rate at the same
level as the existing ones (max).
Also, adjust ap_daemons_limit and ap_daemons_to_start lower bounds at mpm_run()
time, once num_buckets is available for the current generation (previously done
at check_config time, hence before num_buckets is computed, and then with the
previous generation's value).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640763 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 20 Nov 2014 15:39:32 +0000 (15:39 +0000)]
mod_reqtimeout: avoid unnecessary calls to apr_socket_timeout_set().
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640758 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Wed, 19 Nov 2014 07:19:13 +0000 (07:19 +0000)]
* mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640495 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Tue, 18 Nov 2014 13:53:24 +0000 (13:53 +0000)]
mod_authnz_fcgi: we don't need to add the trailing '\0' to parse response headers since r1640036.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640345 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 18 Nov 2014 13:13:58 +0000 (13:13 +0000)]
mod_authnz_fcgi is not vulnerable to the CVE-2014-3583 bug
(and it is too late to use the same CVE anyway).
The code changes to mod_authnz_fcgi are retained in order
to keep the similar code in sync between the two modules.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640331 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Tue, 18 Nov 2014 10:13:26 +0000 (10:13 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640296 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Tue, 18 Nov 2014 10:12:02 +0000 (10:12 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640295 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Mon, 17 Nov 2014 16:31:06 +0000 (16:31 +0000)]
mpm_prefork: follow up to r1635521.
Avoid oddity on bucket_make_child_record overflow.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640184 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Mon, 17 Nov 2014 13:59:36 +0000 (13:59 +0000)]
mpm_event(opt), mpm_worker: follow up to r1635521.
Allocate retained idle_spawn_rate vector on the process pool.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640161 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Mon, 17 Nov 2014 11:45:29 +0000 (11:45 +0000)]
mpm_worker, mpm_prefork: follow up to r1635521.
Use one dedicated accept mutex per listeners bucket.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640145 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Nov 2014 22:27:48 +0000 (22:27 +0000)]
Follow up to r1640040: CHANGES entry.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640042 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Nov 2014 22:25:32 +0000 (22:25 +0000)]
mod_proxy_fcgi, mod_authnz_fcgi: stop reading the response and issue an error
when parsing or forwarding the response fails.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640040 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Nov 2014 22:04:39 +0000 (22:04 +0000)]
mod_proxy_fcgi: SECURITY: CVE-2014-3583 (cve.mitre.org)
Fix a potential crash with response headers' size above 8K.
The code changes to mod_authnz_fcgi keep the handle_headers()
function in sync between the two modules. mod_authnz_fcgi
does not have this issue because it allocated a separate byte
for terminating '\0'.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640036 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Nov 2014 21:52:40 +0000 (21:52 +0000)]
Revert r1638818, r1639812, r1639717 and r1639814 for new staging.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640034 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Nov 2014 21:32:48 +0000 (21:32 +0000)]
event, eventopt: follow up to r1638879 and r1639960.
Clear the pool in ap_push_pool() before recycling.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1640031 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sun, 16 Nov 2014 05:55:14 +0000 (05:55 +0000)]
avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs
in several paths where ptrans is being recycled at the end of a request.
Same as r1638879 which was for the event MPM.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639960 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 15 Nov 2014 00:37:13 +0000 (00:37 +0000)]
mod_authnz_fcgi: follow up to r1639717.
Let ap_scan_script_header*() validate the headers.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639814 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 15 Nov 2014 00:35:37 +0000 (00:35 +0000)]
mod_proxy_fcgi: follow up to r1638818.
Let ap_scan_script_header*() validate the headers.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639812 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 14 Nov 2014 18:18:15 +0000 (18:18 +0000)]
mod_authnz_fcgi: Fix a potential crash with response headers' size above 8K.
(similar to r1638818 for mod_proxy_fcgi).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639717 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 14 Nov 2014 12:04:46 +0000 (12:04 +0000)]
don't call notify_suspend() in a worker thread after
start_lingering_close_common may have put the socket back
into the pollset.
If it becomes readable too quickly, cs can be
free'ed or accessed concurrently.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639614 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 14 Nov 2014 02:24:40 +0000 (02:24 +0000)]
revert r1638691, more comprehensive followup planned shortly.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1639564 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 12 Nov 2014 17:32:24 +0000 (17:32 +0000)]
avoid dereferencing a recently apr_pool_clear()'ed event_conn_state_t *cs
in several paths where ptrans is being recycled at the end of a request.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638879 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Wed, 12 Nov 2014 15:41:07 +0000 (15:41 +0000)]
mod_proxy_fcgi: CVE-2014-3583: Fix a potential crash with response headers'
size above 8K.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638818 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Wed, 12 Nov 2014 12:27:09 +0000 (12:27 +0000)]
* mod_ssl: call ERR_free_strings() with OpenSSL >= 0.9.8e. Fixes memory leak
in mod_ssl on graceful restart. PR 53435.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638772 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 12 Nov 2014 02:29:38 +0000 (02:29 +0000)]
Fix a bug in r1604350 that can lead to crashes in the event MPM under load.
if start_lingering_close_blocking() returns 0, notify_suspend() will
write a 1 into some potentially recently free'd memory from
ptrans (cs->suspended).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638691 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 12 Nov 2014 01:46:28 +0000 (01:46 +0000)]
see your doctor about any rashes since r1608202.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638687 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 11 Nov 2014 21:16:11 +0000 (21:16 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638412 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 11 Nov 2014 15:40:06 +0000 (15:40 +0000)]
Fix style
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638188 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 11 Nov 2014 15:20:49 +0000 (15:20 +0000)]
Fix indent.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638159 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Tue, 11 Nov 2014 12:06:53 +0000 (12:06 +0000)]
* server/scoreboard.c: Check for child_num < 0 also in ap_update_child_status
and ap_update_child_status_from_conn. PR 56767.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638073 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Tue, 11 Nov 2014 12:00:17 +0000 (12:00 +0000)]
mod_auth_basic: Fix comment mentioning 403 instead of 401.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1638072 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 10 Nov 2014 22:43:53 +0000 (22:43 +0000)]
Resolve rashes with LDAP authz and non-LDAP authn since r1608202.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637990 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 10 Nov 2014 01:21:47 +0000 (01:21 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637771 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 10 Nov 2014 01:06:10 +0000 (01:06 +0000)]
fix copy/paste error for CacheSocacheMinTime, rest of content is correct.
http://httpd.apache.org/docs/trunk/mod/mod_cache_socache.html#comment_3247
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637768 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 9 Nov 2014 17:15:26 +0000 (17:15 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637697 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 9 Nov 2014 17:14:03 +0000 (17:14 +0000)]
XML updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637696 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 6 Nov 2014 14:18:46 +0000 (14:18 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637113 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 6 Nov 2014 14:17:56 +0000 (14:17 +0000)]
mention the cmake-based build
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1637112 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sun, 2 Nov 2014 21:15:40 +0000 (21:15 +0000)]
namded captures show up in the env with a MATCH_ prefix.
http://httpd.apache.org/docs/2.4/sections.html#comment_3193
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1636195 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sun, 2 Nov 2014 21:01:05 +0000 (21:01 +0000)]
add a -in wordlist example, change 'string list' to wordlist so you can jump to the grammar.
leave a hint about line endings (uncommitted change in my tree)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1636189 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 1 Nov 2014 18:03:22 +0000 (18:03 +0000)]
remove some more recent 2.4 backports.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1636007 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 1 Nov 2014 17:59:42 +0000 (17:59 +0000)]
remove two recently backported items
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1636004 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 31 Oct 2014 20:41:29 +0000 (20:41 +0000)]
* Add missing include for ap_pglobal
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635859 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 31 Oct 2014 13:17:38 +0000 (13:17 +0000)]
Support custom ErrorDocuments for HTTP 501 and 414 status codes.
PR 57167 [Edward Lu <Chaosed0 gmail.com>]
Submitted By: Edward Lu <Chaosed0 gmail.com>
Committed By: covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635762 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 31 Oct 2014 00:07:06 +0000 (00:07 +0000)]
mod_proxy_connect: Don't issue AH02447 on sockets hangups, let the read
determine whether it is a normal close or a real error. PR 57168.
Abort the client or backend connection on polling errors, but don't forcibly
abort the client side at the end (the core filters will do that otherwise
when necessary), so that lingering close and SSL shutdown can occur on normal
close.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635645 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 30 Oct 2014 23:56:27 +0000 (23:56 +0000)]
mod_proxy_wstunnel: abort backend connection on polling error to avoid
further processing (lingering close, SSL shutdown).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635644 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 30 Oct 2014 18:31:53 +0000 (18:31 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635580 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 30 Oct 2014 17:33:31 +0000 (17:33 +0000)]
show a bit more of openssl's -status display
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635558 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 30 Oct 2014 15:24:58 +0000 (15:24 +0000)]
MPMs, core: make duplicated listeners (SO_REUSEPORT) introduced in r1599531
less intrusive.
Submitted by: Yingqi Lu <yingqi.lu@intel.com>
Modified/Committed by: ylavic
Add ListenCoresBucketsRatio which is a configurable ratio between the number of
CPU cores (online) and the number of listeners buckets to create, defaulting to
zero (so that listeners buckets become an opt-in, ie. ncpus / ratio > 1).
This could also be made an opt-out by using the previous hardcoded value (8) as
default.
Make ap_close_listeners() act on all the listeners (including duplicated ones),
since the function is also called externally (eg. mod_cgid, mod_ssl_ct and
possibly any third party module) to cleanup opened descriptors when a process
is forked (the duplicated listeners are kept in a scoped/static variable).
Add ap_close_listeners_ex() to close a single bucket of listeners, used by the
children to close unused duplicates and internally by ap_close_listeners().
Make ap_duplicate_listeners() compute the number of buckets to be used, instead
of each MPM. This number is now based on the above ratio and will not change
unless asked to (given *num_buckets < 1, that is when the MPM does not run in
one-process mode nor after a graceful restart).
Remove some global variables (mpm_listen, enable_default_listeners) previously
used to communicate between MPMs and ap_listen, since ap_duplicate_listeners()
API can now be used to do so.
Also rename num_buckets as ap_num_listen_buckets, and prefix have_so_reuseport
with ap_ (both printed by ap_log_common(), hence kept global).
Detect ap_have_so_reuseport once only at startup.
Restore dummy_connection() as before r1599531 since sending POD signals should
not depend on the number of listeners buckets (there is still one single socket
receiving the connections).
For each MPM (concerned), move the bucket data (pod, listeners and eventually
accept mutex) into a struct and instanciate an array of them (sized by the
number of buckets), for each child to use its own data according to its bucket
index, and the parent to maintain the whole.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635521 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 30 Oct 2014 14:24:01 +0000 (14:24 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635511 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 30 Oct 2014 14:23:01 +0000 (14:23 +0000)]
more hints for OCSP Stapling:
* when a different cache mechanism is used...
* testing that your server sends an OCSP response
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635510 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Thu, 30 Oct 2014 08:34:12 +0000 (08:34 +0000)]
core: Do not match files when using DirectoryMatch. PR41867.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1635428 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Tue, 28 Oct 2014 10:18:43 +0000 (10:18 +0000)]
Follow up to r1632742: CHANGES entry.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634836 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Tue, 28 Oct 2014 06:44:46 +0000 (06:44 +0000)]
Fix compatibility note
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634791 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Mon, 27 Oct 2014 23:18:16 +0000 (23:18 +0000)]
Remove commented-out SSLStaplingForceURL at global scope.
Global or not, its use is specialized and those that need it won't need a sample,
and others may be confused.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634736 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 27 Oct 2014 00:55:20 +0000 (00:55 +0000)]
When using EBCDIC encoding, HTTPS through ProxyPass and ProxyRemote doesn't
work correctly. PR 57092
Submitted By: Edward Lu
Committed By: covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634425 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 25 Oct 2014 17:45:30 +0000 (17:45 +0000)]
fix another case of 304 response sent to an unconditional request
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634237 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 25 Oct 2014 13:11:05 +0000 (13:11 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634223 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 25 Oct 2014 13:10:06 +0000 (13:10 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634222 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 24 Oct 2014 19:00:10 +0000 (19:00 +0000)]
* Use the correct server name for SNI in case the backend SSL connection itself
is established via a proxy server.
PR: 57139
Submitted by: Szabolcs Gyurko <szabolcs gyurko.org>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1634120 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 23 Oct 2014 11:52:17 +0000 (11:52 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633794 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 23 Oct 2014 11:32:40 +0000 (11:32 +0000)]
trying to enable OCSP Stapling without certificate chain
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633793 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 23 Oct 2014 01:08:16 +0000 (01:08 +0000)]
add hint on discovering that OCSP Stapling cache is too small
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633731 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 23 Oct 2014 00:59:40 +0000 (00:59 +0000)]
add OCSP Stapling configuration, disabled by default
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633730 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:25:23 +0000 (05:25 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633531 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:25:02 +0000 (05:25 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633530 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:24:05 +0000 (05:24 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633529 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:22:09 +0000 (05:22 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633528 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:21:22 +0000 (05:21 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633527 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 05:12:51 +0000 (05:12 +0000)]
tab vs space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633525 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 22 Oct 2014 04:54:52 +0000 (04:54 +0000)]
Fix indent.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633522 13f79535 -47bb-0310-9956-
ffa450edef68
Jan Kaluža [Mon, 20 Oct 2014 09:18:22 +0000 (09:18 +0000)]
mod_ssl: Fix SSL_CLIENT_VERIFY value when "SSLVerifyClient optional_no_ca" and
SSLSessionCache are used and SSL session is resumed. SSL_CLIENT_VERIFY value
has been set to SUCCESS on resumption even when originally it was set to
GENEROUS. PR 53193.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633085 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Mon, 20 Oct 2014 04:37:06 +0000 (04:37 +0000)]
Fix strange indent.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1633031 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 18 Oct 2014 16:29:36 +0000 (16:29 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632817 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 18 Oct 2014 16:28:30 +0000 (16:28 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632816 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 18 Oct 2014 08:50:05 +0000 (08:50 +0000)]
mod_buffer: avoid unlikely access to freed memory and forward flushed buckets
immediatly.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632742 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 18 Oct 2014 08:46:42 +0000 (08:46 +0000)]
mod_cache: avoid unlikely access to freed memory.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632740 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 17 Oct 2014 00:32:45 +0000 (00:32 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632456 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 17 Oct 2014 00:31:24 +0000 (00:31 +0000)]
Add how-to guide for OCSP Stapling
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632454 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 16 Oct 2014 21:50:08 +0000 (21:50 +0000)]
Remove some backported item
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1632443 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 15 Oct 2014 10:02:31 +0000 (10:02 +0000)]
mod_substitute: No real functional change, but:
- define default for maximum line length
indepenent of MAX_STRING_LEN
- Clarify line length check with a comment
- add supported 'b' suffix to directive
description
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631983 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 14 Oct 2014 21:05:35 +0000 (21:05 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631886 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 14 Oct 2014 21:03:59 +0000 (21:03 +0000)]
very minor improvements to OCSP-related doc
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631885 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 14 Oct 2014 20:45:40 +0000 (20:45 +0000)]
SSLOCSPUseRequestNonce already in 2.4.x branch
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631880 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Tue, 14 Oct 2014 00:11:52 +0000 (00:11 +0000)]
include mod_ssl_ct
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631603 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 13 Oct 2014 19:24:34 +0000 (19:24 +0000)]
the hard-coded limit on LimitRequestLine has been gone since 2.1.x, see r819480
and r102840. PR57009
Submitted By: Ed Lu
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631516 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 11 Oct 2014 15:16:30 +0000 (15:16 +0000)]
Rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631056 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 11 Oct 2014 15:14:43 +0000 (15:14 +0000)]
XML Update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631055 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 11 Oct 2014 05:47:02 +0000 (05:47 +0000)]
Style ('{' on same line as function definition)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1631021 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Fri, 10 Oct 2014 20:37:16 +0000 (20:37 +0000)]
Style (space before ending ';')
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630981 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Fri, 10 Oct 2014 19:53:02 +0000 (19:53 +0000)]
Revert style changes
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630971 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 10 Oct 2014 17:54:33 +0000 (17:54 +0000)]
* Check if we are having an SSL connection before looking up SSL related
variables during expression evaluation to avoid a crash. If not return
an empty string.
PR: 57070
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630947 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 10 Oct 2014 00:19:08 +0000 (00:19 +0000)]
xform
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630626 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 10 Oct 2014 00:17:33 +0000 (00:17 +0000)]
mod_ssl_ct: Update the doc for the recent sync with current OpenSSL 1.0.2
and Certificate Transparency tools, as well as a few other clarifications.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630625 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 10 Oct 2014 00:16:05 +0000 (00:16 +0000)]
mod_ssl_ct: Work with current Certificate Transparency tools
(e.g., as of certificate-transparency commit
3f03188fe89974d45345fddee64a8227bd2ec26a )
The interface to the "ct" tool now requires the log's URL and
public key, resulting in a bit of refactoring in the module.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630624 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 9 Oct 2014 21:22:20 +0000 (21:22 +0000)]
make docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1630594 13f79535 -47bb-0310-9956-
ffa450edef68