New file.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677179 13f79535-47bb-0310-9956-ffa450edef68

Rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677178 13f79535-47bb-0310-9956-ffa450edef68

XML updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677177 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_X509_INFO_load_file -> modssl_X509_INFO_load_file

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677159 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_X509_match_name -> modssl_X509_match_name

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677156 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: Make SSL_X509_getIDs a static function inside the
file ssl_util_ssl.c (no outside callers). Rename to just getIDs().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677155 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_X509_getSAN -> modssl_X509_getSAN

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677154 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_X509_NAME_to_string -> modssl_X509_NAME_to_string

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677153 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: Rename SSL_X509_NAME_ENTRY_to_string to
modssl_X509_NAME_ENTRY_to_string.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677151 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: Make SSL_ASN1_STRING_to_utf8 a static function inside
ssl_util_ssl.c (no callers outside this file). The new static function name
chosen is convert_asn1_to_utf8, based on the assumption that neither SSL_
nor ASN1_ are safe prefixes to use without potential future overlap.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677149 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_X509_getBC -> modssl_X509_getBC

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677146 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_smart_shutdown -> modssl_smart_shutdown

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677145 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: SSL_read_PrivateKey -> modssl_read_privatekey

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677144 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: Rename SSL_init_app_data2_idx, SSL_get_app_data2,
and SSL_set_app_data2 from SSL_* to modssl_*. Update references in
README.dsov.* files. Rename static variable SSL_app_data2_idx to just
app_data2_idx since the symbol is internal to ssl_util_ssl.c.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677143 13f79535-47bb-0310-9956-ffa450edef68

Fix typo.  PR57879

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677116 13f79535-47bb-0310-9956-ffa450edef68

Followup to r1671397 so these will build

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1677096 13f79535-47bb-0310-9956-ffa450edef68

Fix typo

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676924 13f79535-47bb-0310-9956-ffa450edef68

Follow up to r1674542 and r1675410: CHANGES entry.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676842 13f79535-47bb-0310-9956-ffa450edef68

Formatting and wording improvements for ALPN (no code changes)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676709 13f79535-47bb-0310-9956-ffa450edef68

The increased use of UuidCreate() in APR 1.5.2+ introduces an unresolved
reference to UuidCreate() to these support applications that link with
apr-1.lib and do not already link rpcrt4.lib.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676654 13f79535-47bb-0310-9956-ffa450edef68

Give a better hint.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676593 13f79535-47bb-0310-9956-ffa450edef68

Rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676123 13f79535-47bb-0310-9956-ffa450edef68

XML updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676122 13f79535-47bb-0310-9956-ffa450edef68

adjust link to SSL_CONF_cmd man page on www.openssl.org, again

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676088 13f79535-47bb-0310-9956-ffa450edef68

Merge r1650047 from trunk:

Add support for extracting subjectAltName entries of type
rfc822Name and dNSName into SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n
variables.

* docs/manual/mod/mod_ssl.xml: add SSL_*_SAN_*_n entries to the
  environment variables table

* modules/ssl/ssl_engine_kernel.c: in ssl_hook_Fixup, add extraction
  of subjectAltName entries for the "StdEnvVars" case

* modules/ssl/ssl_engine_vars.c: add support for retrieving the
  SSL_{CLIENT,SERVER}_SAN_{Email,DNS}_n variables, either with
  individual on-demand lookup (ssl_var_lookup_ssl_cert_san),
  or with full-list extraction to the environment ("StdEnvVars")

* modules/ssl/ssl_private.h: add modssl_var_extract_san_entries prototype

* modules/ssl/ssl_util_ssl.c: implement SSL_X509_getSAN and
  SSL_ASN1_STRING_to_utf8 helper functions, with factoring out common
  code from SSL_X509_getIDs and SSL_X509_NAME_ENTRY_to_string where
  suitable. Limit SSL_X509_getSAN to the two most common subjectAltName
  entry types appearing in user or server certificates (i.e., rfc822Name
  and dNSName), for the time being.

* modules/ssl/ssl_util_ssl.h: add SSL_ASN1_STRING_to_utf8
  and SSL_X509_getSAN prototypes

Proposed by: kbrand
Reviewed by: ylavic, druggeri

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676087 13f79535-47bb-0310-9956-ffa450edef68

consistently output SSLCertificateChainFile deprecation warnings

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676085 13f79535-47bb-0310-9956-ffa450edef68

Remove NPN support and focus on ALPN (RFC 7301)

* modules/ssl/mod_ssl.c, modules/ssl/mod_ssl.h: drop
  modssl_register_npn optional function and related declarations.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_callbacks):
  no longer set NPN advertisement callback.

* modules/ssl/ssl_engine_io.c (ssl_io_filter_input): remove
  NPN handling.

* modules/ssl/ssl_engine_kernel.c (ssl_callback_AdvertiseNextProtos):
  remove callback.

* modules/ssl/ssl_private.h: remove NPN prototypes, set
  HAVE_TLS_ALPN (OpenSSL 1.0.2 and later) with feature-based detection.

Rename SSLAlpnPreference to SSLALPNPreference, and add documentation.

Previous commits related to NPN and ALPN, for reference purposes:

r1332643 - Add support for TLS Next Protocol Negotiation
r1487772 - mod_ssl: Redesign NPN (Next Protocol Negotiation) API
           to avoid use of hooks API and inter-module hard linkage
r1670397 - ALPN support, based on mod_spdy/mod_h2 patch set
r1670434 - More ALPN goodness

(plus some minor tweaks: r1670578, r1670440, r1670578,
 r1670738, r1675459, and r1675549)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1676004 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675936 13f79535-47bb-0310-9956-ffa450edef68

Work around issues w/ "broken" BSD Makefile translation...
If we have gmake, then prefer that.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675819 13f79535-47bb-0310-9956-ffa450edef68

* mod_journald: Remove JournaldCustomLog. It is not needed now when
  mod_log_config can use mod_journald as errorlog provider.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675797 13f79535-47bb-0310-9956-ffa450edef68

* mod_journald: use -lsystemd instead of -lsystemd-journald when found

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675701 13f79535-47bb-0310-9956-ffa450edef68

Generated doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675686 13f79535-47bb-0310-9956-ffa450edef68

Simplify. Checking for OPENSSL_NO_TLSEXT already
happens in a surrounding block.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675549 13f79535-47bb-0310-9956-ffa450edef68

mod_log_config: Fix a bug introduced by r1674261, when using a log provider
the return of ap_default_log_writer was an uninitialized variable.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675534 13f79535-47bb-0310-9956-ffa450edef68

mod_log_config: Add %M format to output request duration in milliseconds.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675533 13f79535-47bb-0310-9956-ffa450edef68

Generated doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675500 13f79535-47bb-0310-9956-ffa450edef68

Grammar improvements in performance tuning doc

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675498 13f79535-47bb-0310-9956-ffa450edef68

xforms

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675493 13f79535-47bb-0310-9956-ffa450edef68

validate

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675491 13f79535-47bb-0310-9956-ffa450edef68

reword per feedback

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675471 13f79535-47bb-0310-9956-ffa450edef68

HAVE_TLS_NPN was defined twice in this file.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675459 13f79535-47bb-0310-9956-ffa450edef68

fix syntax

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675455 13f79535-47bb-0310-9956-ffa450edef68

Generated doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675446 13f79535-47bb-0310-9956-ffa450edef68

no --with-perl since 1.3

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675441 13f79535-47bb-0310-9956-ffa450edef68

xforms

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675437 13f79535-47bb-0310-9956-ffa450edef68

add a prominent caveat about the effect of caching.

PR55089

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675436 13f79535-47bb-0310-9956-ffa450edef68

xforms

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675430 13f79535-47bb-0310-9956-ffa450edef68

typoes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675429 13f79535-47bb-0310-9956-ffa450edef68

PR57778

document legacy AddType/ForceType magic types as Handler names
for the curious.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675426 13f79535-47bb-0310-9956-ffa450edef68

Applies patch from bz56214 thanks to Javier Llorente - updates spanish
translation of error docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675420 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: Make the config parser complain if SSLRandomSeed specifies
the Entropy Gathering Daemon (EGD) as source while the underlying
SSL library does not support EGD (e.g. in case of LibreSSL).

Suggested and reviewed by: kbrand

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675410 13f79535-47bb-0310-9956-ffa450edef68

add PR

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675105 13f79535-47bb-0310-9956-ffa450edef68

If a directory exists but no indexes can be resolved, the fallback resource
should be attempted first before giving up.

Submitted By: Jack <tjerk.meesters gmail.com> , covener
Committed By: covener

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675103 13f79535-47bb-0310-9956-ffa450edef68

Generated doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675005 13f79535-47bb-0310-9956-ffa450edef68

Grammar improvements in performance tuning doc

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1675004 13f79535-47bb-0310-9956-ffa450edef68

Generated doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674969 13f79535-47bb-0310-9956-ffa450edef68

mpm_event: follow up to r1666468 and r1666618.
We don't need to return 0 in the compare function, but for debugging purpose
which we could implement later if necessary (in a separate function).
For now, keep the function simple as in 2.4.x to ease backport, and add a
comment about why we never return 0 here.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674697 13f79535-47bb-0310-9956-ffa450edef68

Rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674642 13f79535-47bb-0310-9956-ffa450edef68

XML updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674641 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy_wstunnel: Bypass the handler while the connection is not
upgraded to WebSocket, so that other modules can possibly take over
the leading HTTP requests.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674632 13f79535-47bb-0310-9956-ffa450edef68

build

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674611 13f79535-47bb-0310-9956-ffa450edef68

motorz: add missing (fix duplicated) APLOGNOs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674609 13f79535-47bb-0310-9956-ffa450edef68

Fix doc as spotted by Falco Schwarz in online doc

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674608 13f79535-47bb-0310-9956-ffa450edef68

Fix duplicated APLOGNOs from r1661067 and r1661448.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674606 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: Check for RAND_egd() at configure time and only use it if present.
Fixes the build with LibreSSL which does not provide this function.

Submitted by: Bernard Spil <pil.oss gmail com>, stsp
Committed by: stsp

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674542 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl namespacing: Rename ssl_util_ssl.h macros from SSL_foo to MODSSL_foo.
For related discussion, see the dev@ thread starting at:
http://mail-archives.apache.org/mod_mbox/httpd-dev/201504.mbox/%3C20150415163613.GC15209%40fintan.stsp.name%3E

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674538 13f79535-47bb-0310-9956-ffa450edef68

Rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674531 13f79535-47bb-0310-9956-ffa450edef68

XML updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674530 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy_scgi: ProxySCGIInternalRedirect now allows an alternate
response header to be used by the application, for when the application
or framework is unable to return Location in the internal-redirect
form.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674510 13f79535-47bb-0310-9956-ffa450edef68

rebuild docs with meta element enabled

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674393 13f79535-47bb-0310-9956-ffa450edef68

The good thing about standards is that there are so many to choose from.

Fix https://bz.apache.org/bugzilla/show_bug.cgi?id=55741

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674382 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674380 13f79535-47bb-0310-9956-ffa450edef68

* mod_log_config: Allow using ErrorLog providers for CustomLog.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674261 13f79535-47bb-0310-9956-ffa450edef68

* mod_dav_fs: set default value of DavLockDB using installation layout

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674222 13f79535-47bb-0310-9956-ffa450edef68

tab vs space

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674214 13f79535-47bb-0310-9956-ffa450edef68

Quote log-sink arguments for {Custom,Error,Transfer}Log directive.
Except syslog and journal, which are keywords.  There's no harm
in quoting those, but no real point to it, either.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674195 13f79535-47bb-0310-9956-ffa450edef68

Rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674130 13f79535-47bb-0310-9956-ffa450edef68

Rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674128 13f79535-47bb-0310-9956-ffa450edef68

Applies fix recommended in bz56346

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674126 13f79535-47bb-0310-9956-ffa450edef68

Per bz57584, ensure that this isn't just .cgi, ..cgi, ...cgi, and so on.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674099 13f79535-47bb-0310-9956-ffa450edef68

Rebuild a crapload of xdocs

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674088 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy_ajp: Rename output_failed to client_failed in ap_proxy_ajp_request().
Since any read/write error is caught by this flag, it really means "dialog with
client <ip:port> failed" (as per the associated log message), whereas write to
client (output) errors need not be handled differently than any error occuring
after some bytes have already been sent to the client, which is the purpose of
the data_sent flag.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674056 13f79535-47bb-0310-9956-ffa450edef68

Remove entries for fixes/features already merged to 2.4.x branch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1674047 13f79535-47bb-0310-9956-ffa450edef68

slight improvement to wording

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673977 13f79535-47bb-0310-9956-ffa450edef68

Correct a regex so that it doesn't match the file named '.cgi'

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673954 13f79535-47bb-0310-9956-ffa450edef68

Resolves bz55123 - spaces around emdashes.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673952 13f79535-47bb-0310-9956-ffa450edef68

Simply remove trailing whitespace.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673947 13f79535-47bb-0310-9956-ffa450edef68

* Remove trailing whitespace from a bunch of *.xml files
* Quoted arguments to Rewrite{Base,Cond,Map,Rule}.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673945 13f79535-47bb-0310-9956-ffa450edef68

Break <highlight language="commit">foo</highlight> into separate lines.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673932 13f79535-47bb-0310-9956-ffa450edef68

Quote path/URL arguments to Proxy* directives.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673930 13f79535-47bb-0310-9956-ffa450edef68

Quote ScriptAlias and DocumentRoot arguments.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673917 13f79535-47bb-0310-9956-ffa450edef68

Quote {Alias,Redirect,ScriptAlias}{,Match} arguments.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673908 13f79535-47bb-0310-9956-ffa450edef68

Enclose parameters in quotation marks for <{Files,Directory,Location}{,Match}>
containers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673892 13f79535-47bb-0310-9956-ffa450edef68

Mention which indexoptions need fancyindexing. Rsesolves bz56985

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673877 13f79535-47bb-0310-9956-ffa450edef68

We need moar emails - format change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673872 13f79535-47bb-0310-9956-ffa450edef68

Flip directives and topics sections after discussion around ordering

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673867 13f79535-47bb-0310-9956-ffa450edef68

Rebuilds Daniel's change to the order of directictives vs topics in
manual docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673854 13f79535-47bb-0310-9956-ffa450edef68

Adjust template to align page content with table of contents

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673846 13f79535-47bb-0310-9956-ffa450edef68

Rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673840 13f79535-47bb-0310-9956-ffa450edef68

Revert r1672014 - doesn't work as advertised (would break configs
where the per-vhost log level is different from the global level)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1673838 13f79535-47bb-0310-9956-ffa450edef68