summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Some additional new feature goodness to be part of 2.4. Please reviewSander Temme2009-11-071-3/+29
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833596 13f79535-47bb-0310-9956-ffa450edef68
* * modules/ssl/ssl_engine_kernel.c (ssl_callback_Info): Add parenthesesJoe Orton2009-11-061-1/+1
| | | | | | | around bitwise-and. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833593 13f79535-47bb-0310-9956-ffa450edef68
* update pollset to reflect changed connection state before closing the socket;Jeff Trawick2009-11-061-1/+1
| | | | | | | | otherwise the pollset-remove can crash (at least with select-based poll, since fd is now -1) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833583 13f79535-47bb-0310-9956-ffa450edef68
* SECURITY: Partial fix for CVE-2009-3555:Joe Orton2009-11-064-65/+122
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Reject client-initiated renegotiations; this is sufficient to prevent the attack for any configuration which does not require renegotiation due to per-directory/per-location access control configuration. Configuration with per-directory/per-location access control requirements (such as "SSLVerifyClient require") are still vulnerable to CVE-2009-3555 with this patch applied (if using OpenSSL <= 0.9.8k). * modules/ssl/ssl_private.h (SSLConnRec): Add reneg_state field. (ssl_callback_Info): Renamed from ssl_callback_LogTracingState. * modules/ssl/ssl_engine_init.c (ssl_init_ctx_callbacks): Install the (renamed) info callback unconditionally. * modules/ssl/ssl_engine_io.c (ssl_filter_ctx_t): Add config pointer to SSLConnRec. (bio_filter_out_write, bio_filter_in_read): Fail with APR_ECONNABORTED if the reneg state is set to RENEG_ABORT. * modules/ssl/ssl_engine_kernel.c (log_tracing_state): Factored out of ssl_callback_LogTracingState. (ssl_callback_Info): New function. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833582 13f79535-47bb-0310-9956-ffa450edef68
* Remove mod_unique_id from the default build.Sander Temme2009-11-061-1/+1
| | | | | | | Reviewed by: sctemme, niq, rpluem git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833477 13f79535-47bb-0310-9956-ffa450edef68
* Update.Lucien Gentis2009-11-061-6/+21
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833393 13f79535-47bb-0310-9956-ffa450edef68
* Touch file, SVN testing. Eeek =) Tony Stevenson2009-11-061-0/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833322 13f79535-47bb-0310-9956-ffa450edef68
* expose r->notes to luaBrian McCallister2009-11-051-0/+8
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833141 13f79535-47bb-0310-9956-ffa450edef68
* seealso list in all the various docs.Rich Bowen2009-11-0512-15/+31
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833139 13f79535-47bb-0310-9956-ffa450edef68
* Little typo.Lucien Gentis2009-11-051-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833090 13f79535-47bb-0310-9956-ffa450edef68
* Moves the "canonial URL" example to remappingRich Bowen2009-11-054-73/+91
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833061 13f79535-47bb-0310-9956-ffa450edef68
* Moves the "dynamically regenerated" rule to advanced.Rich Bowen2009-11-054-90/+85
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832977 13f79535-47bb-0310-9956-ffa450edef68
* Removing a ruleset that not only doesn't have a description, but alsoRich Bowen2009-11-052-45/+0
| | | | | | | | | can't possibly work, since it contains a fully-qualified URL in the RewriteRule. Feel free to revert iff you can provide a description and a functional rule. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832976 13f79535-47bb-0310-9956-ffa450edef68
* Moves the 'browser-specific' rule into remapping.Rich Bowen2009-11-055-205/+81
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832973 13f79535-47bb-0310-9956-ffa450edef68
* Moves the 'sharding' rule into the 'advanced' doc.Rich Bowen2009-11-052-1/+114
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832971 13f79535-47bb-0310-9956-ffa450edef68
* I'm actually not terribly thrilled with the notion of an "advanced" doc,Rich Bowen2009-11-056-0/+105
| | | | | | | | | because that's such an arbitrary designation, and I'm afraid that it will become a catch-all. So if someone wants to do this differently, I certainly won't object. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832962 13f79535-47bb-0310-9956-ffa450edef68
* Removing this rule entirely, because it's not meaningful. It relies onRich Bowen2009-11-052-65/+0
| | | | | | | | REMOTE_IDENT. Browsers stopped sending REMOTE_IDENT 15 years ago, and even when they did, it wasn't trustworthy. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832952 13f79535-47bb-0310-9956-ffa450edef68
* * modules/ssl/ssl_toolkit_compat.h: Fix compat with older OpenSSL.Joe Orton2009-11-051-0/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832943 13f79535-47bb-0310-9956-ffa450edef68
* Relocates another rule.Rich Bowen2009-11-054-112/+106
| | | | | | | | | Please also note that this rule refers to before and after 1.3b6. That's embarrassing. It would be great if someone would apply the relevant changes to the 2.2 and 2.0 docs also. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832935 13f79535-47bb-0310-9956-ffa450edef68
* Relocates another recipe, and updates it.Rich Bowen2009-11-054-67/+87
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832923 13f79535-47bb-0310-9956-ffa450edef68
* * server/mpm/simple: Ignore more.Joe Orton2009-11-050-0/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832920 13f79535-47bb-0310-9956-ffa450edef68
* add an early note about the Pattern in a rewriterule behaving Eric Covener2009-11-052-12/+38
| | | | | | | | | | | counterintuitively in per-directory context. (lots of mysterious no-op rulesets due to ^/ in htaccess) Tweak QSA text. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832914 13f79535-47bb-0310-9956-ffa450edef68
* * modules/lua/: s/apr_strnatcmp/strcmp/ - strnat*cmp functions areJoe Orton2009-11-053-16/+16
| | | | | | | for natural order string sorting. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832910 13f79535-47bb-0310-9956-ffa450edef68
* tweak MPM configure to avoid having to grep for MPM names in listsJeff Trawick2009-11-052-14/+21
| | | | | | | | | | of MPMs of some type (threaded or share-able or enabled), as suggested by jorton rename some MPM-related variables git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832907 13f79535-47bb-0310-9956-ffa450edef68
* allow setting of r->user from luaBrian McCallister2009-11-051-0/+6
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832905 13f79535-47bb-0310-9956-ffa450edef68
* map r->err_headers_out into luaBrian McCallister2009-11-051-3/+7
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832901 13f79535-47bb-0310-9956-ffa450edef68
* * server/mpm/*: Ignore generated files with MPM DSO builds.Joe Orton2009-11-050-0/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832899 13f79535-47bb-0310-9956-ffa450edef68
* * modules/filters/mod_include.c (handle_printenv): Fix handling ofJoe Orton2009-11-041-1/+1
| | | | | | | lazy variables, courtesy of LLVM scan-build. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832886 13f79535-47bb-0310-9956-ffa450edef68
* document --enable-mpms-sharedJeff Trawick2009-11-041-10/+43
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832859 13f79535-47bb-0310-9956-ffa450edef68
* Should be a leading slash on that regex. Thanks to Bob Ionescu.Rich Bowen2009-11-042-2/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832826 13f79535-47bb-0310-9956-ffa450edef68
* Add a LoadModule directive for the default MPM to the conf file when ↵Jeff Trawick2009-11-041-0/+4
| | | | | | | | | building MPMs as shared modules. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832778 13f79535-47bb-0310-9956-ffa450edef68
* ServerAlias and Listen accumulate, not supercede. The latter of course is ↵Eric Covener2009-11-042-82/+60
| | | | | | | | | | | n/a to vhosts! Additional rewording of vhost details. PR48125 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832759 13f79535-47bb-0310-9956-ffa450edef68
* Split RewriteCond into two sections, brought TestString section up to date.Noirin Plunkett2009-11-042-267/+185
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832627 13f79535-47bb-0310-9956-ffa450edef68
* respect the MPM's indication passed on APACHE_MPM_SUPPORTED() of whetherJeff Trawick2009-11-042-3/+19
| | | | | | | or not it can run as a shared library git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832621 13f79535-47bb-0310-9956-ffa450edef68
* added back HAVE_OCSP define hack for non-configure platforms, butGuenter Knauf2009-11-031-0/+4
| | | | | | | only use if HAVE_OCSP is not yet defined as suggested by rpluem. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832572 13f79535-47bb-0310-9956-ffa450edef68
* We now check for OCSP support in configure, so we can lose an OpenSSL versionSander Temme2009-11-032-4/+3
| | | | | | | number check. Use a type safe STACK. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832496 13f79535-47bb-0310-9956-ffa450edef68
* Fix remaining doxygen warnings. "make dox" is now clean with doxygenDaniel Earl Poirier2009-11-035-12/+14
| | | | | | | | | | | version 1.5.8. PR: 48093 Submitted by: Brad Hards Reviewed by: poirier git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832442 13f79535-47bb-0310-9956-ffa450edef68
* Change the configure-based MPM build mechanism to support buildingJeff Trawick2009-11-0315-51/+80
| | | | | | | | | | | an MPM as a shared shared or dynamic module, primarily using the APACHE_MPM_MODULE() function. --enable-mpms-shared now builds/installs the MPMs as dynamic modules. (But no LoadModule directives are added.) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832434 13f79535-47bb-0310-9956-ffa450edef68
* --with-mpm and --enable-mpms-shared:Jeff Trawick2009-11-031-3/+12
| | | | | | | | . improve messages . check for inconsistent settings git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832429 13f79535-47bb-0310-9956-ffa450edef68
* Brind OS/2 MPM up to date with current API.Brian Havard2009-11-034-57/+52
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832409 13f79535-47bb-0310-9956-ffa450edef68
* update transformationNilgun Belma Buguner2009-11-0317-88/+136
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832316 13f79535-47bb-0310-9956-ffa450edef68
* update for sync with English docs.Nilgun Belma Buguner2009-11-035-39/+128
| | | | | | | Translated by: Nilgün Belma Bugüner <nilgun belgeler.org> Reviewed by: Orhan Berent <berent belgeler.org> git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832315 13f79535-47bb-0310-9956-ffa450edef68
* fixed validation error:Nilgun Belma Buguner2009-11-031-37/+0
| | | | | | | Attribute value "proxy-deny" of type ID must be unique within the document. Possibly a copy&paste error git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832314 13f79535-47bb-0310-9956-ffa450edef68
* The hostname requires a http:// on the front of it, since we'reRich Bowen2009-11-032-2/+2
| | | | | | | redirecting to it. This recipe has apparently been wrong for years. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832310 13f79535-47bb-0310-9956-ffa450edef68
* Build Colm's 'sharding' recipe.Rich Bowen2009-11-031-40/+29
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832309 13f79535-47bb-0310-9956-ffa450edef68
* Correct the time-range for the time-based rewrite rule and warn about the ↵Colm MacCarthaigh2009-11-031-1/+8
| | | | | | effects of caches. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832278 13f79535-47bb-0310-9956-ffa450edef68
* Adding missed </p>Colm MacCarthaigh2009-11-031-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832270 13f79535-47bb-0310-9956-ffa450edef68
* Fixup for two grammar nits - pluralisation and articulation.Colm MacCarthaigh2009-11-031-3/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832263 13f79535-47bb-0310-9956-ffa450edef68
* Rewrite the "cluster" section of the rewrite docs. Changes;Colm MacCarthaigh2009-11-031-38/+20
| | | | | | | | | | | | | | | | * Call the technique "sharding" - like the rest of the world does. * Simplify to just one example use-case, sharding users. * Make the usage of the term "physical host" consistent. * Remove unreachable nonsense rewrite rules * Remove redundant sentences. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832261 13f79535-47bb-0310-9956-ffa450edef68
* Removing more cruft, rewriting what's leftNoirin Plunkett2009-11-032-150/+39
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832239 13f79535-47bb-0310-9956-ffa450edef68