]>
granicus.if.org Git - apache/log
Eric Covener [Wed, 11 Jul 2012 01:48:48 +0000 (01:48 +0000)]
r1052419 changed the default value of Options to FollowSymlinks,
but inadvertently made "AllowOverride Options" behave like
"AllowOverride Options=FollowSymLinks".
PR53444
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1359976 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Tue, 10 Jul 2012 20:19:03 +0000 (20:19 +0000)]
make varbuf functions treat AP_VARBUF_UNKNOWN consistently, improve docs
ap_varbuf_pdup(): copying the whole buffer in case strlen ==
AP_VARBUF_UNKNOWN does not make sense as the caller can not set
the exact buffer size, only a minimum. No API change as previously
the behavior with AP_VARBUF_UNKNOWN was undocumented.
regsub_core(): Checking for vb->buf is useless, it cannot be NULL
unless ap_varbuf_init has not been called.
ap_varbuf_cfg_getline(): Initially, allocate enough memory to hold
an empty line. If strlen == AP_VARBUF_UNKNOWN, use strlen(buf) instead
of undefined behavior.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1359884 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 10 Jul 2012 20:10:27 +0000 (20:10 +0000)]
style in the neighborhood of a bug
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1359881 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Tue, 10 Jul 2012 19:45:27 +0000 (19:45 +0000)]
style fix
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1359857 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Mon, 9 Jul 2012 10:58:22 +0000 (10:58 +0000)]
Make mod_deflate skip compression if compression is enabled at SSL level.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1359057 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Mon, 9 Jul 2012 07:38:20 +0000 (07:38 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358947 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Mon, 9 Jul 2012 07:36:20 +0000 (07:36 +0000)]
Fix some more whitespace issues with anchors.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358946 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 8 Jul 2012 21:04:12 +0000 (21:04 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358836 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 8 Jul 2012 21:02:13 +0000 (21:02 +0000)]
Fix whitespace issue in links.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358834 13f79535 -47bb-0310-9956-
ffa450edef68
Ben Laurie [Fri, 6 Jul 2012 12:42:00 +0000 (12:42 +0000)]
Revert accidental commit.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358168 13f79535 -47bb-0310-9956-
ffa450edef68
Ben Laurie [Fri, 6 Jul 2012 12:41:10 +0000 (12:41 +0000)]
Work correctly with a development version of OpenSSL. I suspect
something similar is needed when there are two OpenSSL installations,
one in a default location.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358167 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 6 Jul 2012 07:42:32 +0000 (07:42 +0000)]
* modules/ssl/ssl_util_ocsp.c (get_line): Don't set line[-1] to 0
when len == 0.
Submitted by: Jim Meyering <meyering redhat.com>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1358061 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Thu, 5 Jul 2012 21:39:02 +0000 (21:39 +0000)]
xforms ad libitum
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357941 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Thu, 5 Jul 2012 21:29:58 +0000 (21:29 +0000)]
comments.apache.org is live! Changing URL of the javascript to reflect this.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357936 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 5 Jul 2012 15:33:18 +0000 (15:33 +0000)]
* modules/filters/mod_ext_filter.c (ef_unified_filter): Set hit_eos
flag on hitting EOS.
(ef_input_filter): Give back EOS if filter is invoked after hitting
EOS, rather than attempting (and failing) to read from the closed
pipe to the child.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357685 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 4 Jul 2012 14:14:30 +0000 (14:14 +0000)]
zap recent backports
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357274 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 4 Jul 2012 08:36:40 +0000 (08:36 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357170 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 4 Jul 2012 08:33:19 +0000 (08:33 +0000)]
Fix XML error.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357168 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 4 Jul 2012 08:30:37 +0000 (08:30 +0000)]
Add examples of <Files ...> that don't involve regex.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1357167 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 3 Jul 2012 16:19:29 +0000 (16:19 +0000)]
add a pointer to 'rewriteoptions', without giving away the option name, if someone
happens to have rewrite trace on when mod_rewrite declines a non URL-path.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1356813 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 2 Jul 2012 08:52:32 +0000 (08:52 +0000)]
Transforms.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1356118 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 2 Jul 2012 08:51:01 +0000 (08:51 +0000)]
* modules/mappers/mod_rewrite.c (cmd_rewriteoptions, hook_uri2file):
Add "AllowAnyURI" flag which disables the strict URL-path input
string check introduced to fix CVE-2011-3368/CVE-2011-4317.
* docs/manual: Update docs.
Inspired by: covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1356115 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:36:46 +0000 (15:36 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355936 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:35:14 +0000 (15:35 +0000)]
Add 'require' as a keyword for Lua scripts
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355935 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:34:18 +0000 (15:34 +0000)]
Fix titles of examples
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355934 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:21:25 +0000 (15:21 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355931 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:19:14 +0000 (15:19 +0000)]
Re-add r:parsebody() as a valid function
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355929 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 1 Jul 2012 15:16:29 +0000 (15:16 +0000)]
Add LuaAuthzProvider as a valid Directive.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355924 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 30 Jun 2012 22:50:15 +0000 (22:50 +0000)]
bump CVE to the top of CHANGES
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355831 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 30 Jun 2012 17:04:32 +0000 (17:04 +0000)]
Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1355768 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 27 Jun 2012 11:19:43 +0000 (11:19 +0000)]
re-emphasize this paragraph in ProxyRequests is for fwd proxy
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1354427 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 26 Jun 2012 16:14:44 +0000 (16:14 +0000)]
Fixes to XML. rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1354086 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 26 Jun 2012 14:13:11 +0000 (14:13 +0000)]
Applies patch from PR 53201, from Walter (wgoulet)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1354027 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 26 Jun 2012 11:16:36 +0000 (11:16 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353958 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 26 Jun 2012 11:15:11 +0000 (11:15 +0000)]
Updates
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353955 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 26 Jun 2012 06:45:17 +0000 (06:45 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353829 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 26 Jun 2012 06:43:26 +0000 (06:43 +0000)]
Move SSLCACertificate* into the correct (allowed) context in the examples.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353828 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Mon, 25 Jun 2012 13:01:57 +0000 (13:01 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353505 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Mon, 25 Jun 2012 13:01:12 +0000 (13:01 +0000)]
Fix the wording of r1353263 a bit.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353503 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 24 Jun 2012 13:14:25 +0000 (13:14 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353264 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 24 Jun 2012 13:13:10 +0000 (13:13 +0000)]
Add a link to sections.html and change the example to accomodate suggestions in PR20414.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353263 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 24 Jun 2012 12:49:01 +0000 (12:49 +0000)]
Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353258 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 24 Jun 2012 11:52:01 +0000 (11:52 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353252 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sun, 24 Jun 2012 11:49:00 +0000 (11:49 +0000)]
Add a note about DirectoryIndex adding resources instead of replacing them when called twice or more within the same context.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1353250 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 22 Jun 2012 15:15:59 +0000 (15:15 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352921 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 22 Jun 2012 14:58:19 +0000 (14:58 +0000)]
The compiled in limit has been removed in r149269, as noted by Bojan
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352912 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 22 Jun 2012 14:57:30 +0000 (14:57 +0000)]
Make sure that a triggering LimitRequestFieldSize is always logged, even if the
first read already exeeds the limit and ap_rgetline does not return a header
name.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352911 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 22 Jun 2012 14:56:44 +0000 (14:56 +0000)]
note more prominently that SHA and crypt are insecure
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352910 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 22 Jun 2012 14:55:07 +0000 (14:55 +0000)]
improve dump_allocator, add dump_one_pool
- dump_one_pool dumps the size of a pool not including child pools
- dump_allocator now dumps the size of the memnodes and not the last used
free size. Also dump the total size.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352909 13f79535 -47bb-0310-9956-
ffa450edef68
Ben Laurie [Thu, 21 Jun 2012 16:17:41 +0000 (16:17 +0000)]
RFC 5878 support.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352596 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Thu, 21 Jun 2012 16:07:42 +0000 (16:07 +0000)]
Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352589 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 21 Jun 2012 14:01:57 +0000 (14:01 +0000)]
* modules/cache/cache_util.c (write_write_order): Remove redundant
double assignment, caught by Coverity. No functional change.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352534 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 14:20:11 +0000 (14:20 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352123 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 14:19:45 +0000 (14:19 +0000)]
Update (fix) the POST data retrieval example.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352122 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 20 Jun 2012 13:12:36 +0000 (13:12 +0000)]
add a warning in the LDAP AuthnProviderAlias and expecting to have a configured
LDAP authorization provider.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352084 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 11:26:16 +0000 (11:26 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352049 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 11:24:28 +0000 (11:24 +0000)]
Add back the parsebody reference in the handler example.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352048 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 11:20:36 +0000 (11:20 +0000)]
Add the missing parsebody function to mod_lua, for parsing POST data.
PR 53064.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1352047 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 07:43:37 +0000 (07:43 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351969 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 20 Jun 2012 07:40:20 +0000 (07:40 +0000)]
Fix a whitespace issue
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351967 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 19 Jun 2012 15:13:37 +0000 (15:13 +0000)]
* support/ab.c (test, start_connect): Only bind the local end of the
socket (and look up an address for it) if -B is specified.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351737 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 17 Jun 2012 12:26:34 +0000 (12:26 +0000)]
Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351097 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 17 Jun 2012 08:46:56 +0000 (08:46 +0000)]
Log the actual problem if parsing of 'Require expr' fails
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351074 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 17 Jun 2012 08:43:45 +0000 (08:43 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351073 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 17 Jun 2012 08:39:45 +0000 (08:39 +0000)]
If an expression in "Require expr" returns denied and
references %{REMOTE_USER}, trigger authentication and retry
PR: 52892
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351072 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 17 Jun 2012 08:34:01 +0000 (08:34 +0000)]
Log error if 'Require expr' fails
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351071 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:53:33 +0000 (22:53 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351021 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:51:19 +0000 (22:51 +0000)]
Add new directive LuaAuthzProvider to allow implementing an
authorization provider in lua
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351020 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:47:48 +0000 (22:47 +0000)]
use macro to make definition of integer fields more compact
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351019 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:46:30 +0000 (22:46 +0000)]
factor common code into utility function
also improve logging a bit and adjust some log levels
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351018 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:45:33 +0000 (22:45 +0000)]
change various strings from char * to const char *
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351017 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:44:36 +0000 (22:44 +0000)]
pass the provider name to parse_require_line as pool userdata
This allows a single C function to implement several authz providers.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351016 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:42:15 +0000 (22:42 +0000)]
Adjust log message: Condition can be caused by configuration error
not only by bugs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351015 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:41:01 +0000 (22:41 +0000)]
mod_lua: Add a few missing request_rec fields. Rename remote_ip to
client_ip to match conn_rec
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351014 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:39:54 +0000 (22:39 +0000)]
allow tail call optimization in log methods, remove foo method
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351013 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sat, 16 Jun 2012 22:38:58 +0000 (22:38 +0000)]
Change prototype of vm_construct, to work around gcc bug which
causes a segfault.
PR: 52779
Submitted by: Dick Snippe <Dick Snippe tech omroep nl>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1351012 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Thu, 14 Jun 2012 20:22:41 +0000 (20:22 +0000)]
Expand the SRP reference documentation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1350386 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Wed, 13 Jun 2012 15:33:48 +0000 (15:33 +0000)]
SECURITY: CVE-2012-2687 (cve.mitre.org):
mod_negotiation: Escape filenames in variant list to prevent an
possible XSS for a site where untrusted users can upload files to a
location with MultiViews enabled.
* modules/mappers/mod_negotiation.c (make_variant_list): Escape
filenames in variant list.
Submitted by: Niels Heinen <heinenn google.com>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1349905 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 10 Jun 2012 21:00:39 +0000 (21:00 +0000)]
Pass the server_rec to ssl_die() and use it to log a message to the main error
log, pointing to the appropriate virtual host error log
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348660 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 10 Jun 2012 20:21:38 +0000 (20:21 +0000)]
If OPENSSL_NO_COMP is defined, omit merging the compression flag.
Also make some code more compact, as suggested by kbrand.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348656 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Sun, 10 Jun 2012 19:50:25 +0000 (19:50 +0000)]
Add some improvements as suggested by Kaspar
- expand comment in config file
- check username == NULL
- detect SRP support via SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB, not via openssl
version
- rename rv variable
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348653 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 10 Jun 2012 15:22:19 +0000 (15:22 +0000)]
Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348614 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 8 Jun 2012 17:58:10 +0000 (17:58 +0000)]
Remove some backported or reverted items
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348170 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 8 Jun 2012 12:19:30 +0000 (12:19 +0000)]
* include/util_ldap.h: Treat LDAP_UNAVAILABLE as a transient error
with non-MS LDAP SDKs; seen with OpenLDAP against Novell eDirectory.
Submitted by: Filip Valder <filip.valder vsb.cz> (via RH bugzilla)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1348036 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 8 Jun 2012 10:04:44 +0000 (10:04 +0000)]
* configure.in: Enforce 1.4.0 as minimum APR version requirement.
PR: 52748
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1347998 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 8 Jun 2012 09:46:50 +0000 (09:46 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1347983 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Fritsch [Fri, 8 Jun 2012 09:38:44 +0000 (09:38 +0000)]
Add support for TLS-SRP (Secure Remote Password key exchange
for TLS, RFC 5054).
PR: 51075
Submitted by: Quinn Slack <sqs cs stanford edu>, Christophe Renou,
Peter Sylvester
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1347980 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 8 Jun 2012 07:25:54 +0000 (07:25 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1347904 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 8 Jun 2012 07:23:55 +0000 (07:23 +0000)]
Fix a broken link
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1347903 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 6 Jun 2012 15:30:13 +0000 (15:30 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346945 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 6 Jun 2012 15:28:21 +0000 (15:28 +0000)]
Add a note that VirtualDocumentRoot will override DocumentRoot in the current scope (and thus also in all virtual hosts if defined in the global server scope)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346943 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Wed, 6 Jun 2012 14:20:27 +0000 (14:20 +0000)]
* support/htpasswd.c (mkrecord): Handle crypt() failure.
* support/htdbm.c (htdbm_make): Handle crypt() failure.
Submitted by: Paul Wouters <pwouters redhat.com>, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346905 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 5 Jun 2012 15:24:42 +0000 (15:24 +0000)]
Sorry about that. Broke the comments stuff in that last commit. Fixed.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346420 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 5 Jun 2012 15:15:54 +0000 (15:15 +0000)]
rebuild docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346416 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 5 Jun 2012 15:04:49 +0000 (15:04 +0000)]
Rebuild authz_host edit.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346408 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Tue, 5 Jun 2012 15:00:02 +0000 (15:00 +0000)]
Adds a security remark regarding proxied content and the host address,
and reference to mod_remoteip, as per comment added by Allard Hoeve to
doc.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346405 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 5 Jun 2012 11:27:34 +0000 (11:27 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346351 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 5 Jun 2012 11:19:00 +0000 (11:19 +0000)]
Use HTTPS for the comments instead of HTTP (and yay for commit number 500)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346344 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 5 Jun 2012 08:36:05 +0000 (08:36 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346289 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Tue, 5 Jun 2012 08:35:05 +0000 (08:35 +0000)]
Fix up the wording, so it leaves no doubt that status codes outside the 300-399 range are also perfectly fine.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@
1346288 13f79535 -47bb-0310-9956-
ffa450edef68