Commits · 02a265c992493a1e1d3de9f31fbb257b20d8b67b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Apr 04, 2014

Remove SSLOCSPUseRequestNonce OpenSSL-0.9.7 requirement (0.9.8 already... · 02a265c9

Yann Ylavic authored Apr 04, 2014

Remove SSLOCSPUseRequestNonce OpenSSL-0.9.7 requirement (0.9.8 already required by httpd-2.4) and set availability to 2.5-dev until further notice.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584665 13f79535-47bb-0310-9956-ffa450edef68

02a265c9

SSLOpenSSLConfCmd is available since httpd 2.4.8. · fd0d6380

Yann Ylavic authored Apr 04, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584658 13f79535-47bb-0310-9956-ffa450edef68

fd0d6380

Remerge r1584555 but without the changes on (un-backportable) SSLOCSPUseRequestNonce. · 2edee9b3
Yann Ylavic authored Apr 04, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584653 13f79535-47bb-0310-9956-ffa450edef68
```
2edee9b3

Revert r1584555 for the time being. · 71c53a65

Yann Ylavic authored Apr 04, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584652 13f79535-47bb-0310-9956-ffa450edef68

71c53a65

Remove compatibility references to httpd < 2.4. · b607c27c

Yann Ylavic authored Apr 04, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584572 13f79535-47bb-0310-9956-ffa450edef68

b607c27c

Remove compatibility references to httpd < 2.4 and OpenSSL < 0.9.8 · e149b632
Yann Ylavic authored Apr 04, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584555 13f79535-47bb-0310-9956-ffa450edef68
```
e149b632

Apr 03, 2014

Move entry already backported to 2.4.8. · 2017d049

Yann Ylavic authored Apr 03, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584443 13f79535-47bb-0310-9956-ffa450edef68

2017d049

Follow up to r1584430. · 06ba82a7

Yann Ylavic authored Apr 03, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584434 13f79535-47bb-0310-9956-ffa450edef68

06ba82a7

mod_expires: don't add Expires header to error responses (4xx/5xx), · bac36915

Yann Ylavic authored Apr 03, 2014

             be they generated or forwarded. PR 55669.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584430 13f79535-47bb-0310-9956-ffa450edef68

bac36915

leave a warning about cc_out · dd93a721

Eric Covener authored Apr 03, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584429 13f79535-47bb-0310-9956-ffa450edef68

dd93a721

add CHANGES for r1584417 · 0dcf2c33

Eric Covener authored Apr 03, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584421 13f79535-47bb-0310-9956-ffa450edef68

0dcf2c33

allow users to workaround the over-agressive backreference · 6ab4f12b

Eric Covener authored Apr 03, 2014

escaping by selecting the characters to escape. 



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584417 13f79535-47bb-0310-9956-ffa450edef68

6ab4f12b

Apr 02, 2014

mod_ssl: follow up to r1583191. · 217ca7e0

Yann Ylavic authored Apr 02, 2014

New SSLOCSPUseRequestNonce directive's manual and CHANGES.

Non functional code changes (modssl_ctx_t's field ocsp_use_request_nonce
grouped with other OCSP ones, nested if turned to a single AND condition).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584098 13f79535-47bb-0310-9956-ffa450edef68

217ca7e0

provide an expression parser example that can control based on http status code, · 295b8f86

Eric Covener authored Apr 02, 2014

rather than just excluding locally generated errors.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584081 13f79535-47bb-0310-9956-ffa450edef68

295b8f86

try to clarify that "onsuccess" is for anything but locally-generated errors, · a99c867e

Eric Covener authored Apr 02, 2014

the module behavior and the doc are equally painful for users.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1584078 13f79535-47bb-0310-9956-ffa450edef68

a99c867e

Mar 30, 2014

mod_ssl: send OCSP request's nonce according to SSLOCSPUseRequestNonce on/off. PR 56233. · dee75cca
Yann Ylavic authored Mar 30, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583191 13f79535-47bb-0310-9956-ffa450edef68
```
dee75cca

Fix segfault in mod_alias introduced in r1132494. · e3fb9053

Rainer Jung authored Mar 30, 2014

AliasMatch does not append unmatched parts of the
original URI to the  new URI. So no need to subtract
anything from the new URI length.

The existing code crashed when using
"AliasMatch / /some/thing" and sending a request
with a long URI.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583175 13f79535-47bb-0310-9956-ffa450edef68

e3fb9053

Mar 29, 2014

Describe issue with multiple OpenSSL installs · 00e75eba

Jeff Trawick authored Mar 29, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583027 13f79535-47bb-0310-9956-ffa450edef68

00e75eba

Update. · 45927357

Lucien Gentis authored Mar 29, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583011 13f79535-47bb-0310-9956-ffa450edef68

45927357

s/comment/self-documenting/ · 73cfa6e2

Jeff Trawick authored Mar 29, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583008 13f79535-47bb-0310-9956-ffa450edef68

73cfa6e2

don't log bogus rv · ed937d6a

Jeff Trawick authored Mar 29, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583007 13f79535-47bb-0310-9956-ffa450edef68

ed937d6a

Report OpenSSL directories in configuration summary · eb8b071a

Jeff Trawick authored Mar 29, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1583005 13f79535-47bb-0310-9956-ffa450edef68

eb8b071a

Mar 28, 2014

Add a note on t->r checking, as per Rüdiger's email. · 37677e6b

Daniel Gruno authored Mar 28, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582881 13f79535-47bb-0310-9956-ffa450edef68

37677e6b

mod_lua: Since c->notes is the only place where r will be NULL, we don't need... · aeb40f7f

Daniel Gruno authored Mar 28, 2014

mod_lua: Since c->notes is the only place where r will be NULL, we don't need to check a second time, since we'll never meddle with tables named 'notes'

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582877 13f79535-47bb-0310-9956-ffa450edef68

aeb40f7f

mod_lua: Redesign the table construction/access mechanism, so we pass on a... · 6c32aedc

Daniel Gruno authored Mar 28, 2014

mod_lua: Redesign the table construction/access mechanism, so we pass on a struct with the request_rec, the table pointer and the table name instead of just the table pointer. This allows us to use the request_rec for logging/editing purposes, as well as inform the user which exact table in the request_rec was modified.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582858 13f79535-47bb-0310-9956-ffa450edef68

6c32aedc

Mar 27, 2014

mod_lua: Prevent HTTP Response Splitting by not allowing tables in the... · a639de59

Daniel Gruno authored Mar 27, 2014

mod_lua: Prevent HTTP Response Splitting by not allowing tables in the request_rec to be set with values containing newlines. This is a semi-ugly hack, but it will have to do until we find another way of setting these values.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582262 13f79535-47bb-0310-9956-ffa450edef68

a639de59

mod_lua: escape key/value pairs when setting cookies to prevent header... · 6d272fe0

Daniel Gruno authored Mar 27, 2014

mod_lua: escape key/value pairs when setting cookies to prevent header splitting with tainted cookies.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582253 13f79535-47bb-0310-9956-ffa450edef68

6d272fe0

mod_lua: Reformat and escape script error output. · 613ce8f8

Daniel Gruno authored Mar 27, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1582247 13f79535-47bb-0310-9956-ffa450edef68

613ce8f8

Mar 24, 2014

Rebuild · 4f048915

Richard Bowen authored Mar 24, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1581013 13f79535-47bb-0310-9956-ffa450edef68

4f048915

It does more than just a ProxyPass, but also looks at the HOST header, · fe3d616a

Richard Bowen authored Mar 24, 2014

so this gives somewhat deeper insight into what the end result looks
like.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1581011 13f79535-47bb-0310-9956-ffa450edef68

fe3d616a

rebuild · a504391a

Richard Bowen authored Mar 24, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1580936 13f79535-47bb-0310-9956-ffa450edef68

a504391a

* support/ab.c: Revert accidental version bump in r1580928. · 61c033cf

Joe Orton authored Mar 24, 2014

  (Although it seems likely this *should* have been bumped sometime
   since 2006?)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1580935 13f79535-47bb-0310-9956-ffa450edef68

61c033cf

* support/ab.c (write_request): Avoid redundant write(,,0) preceding · b41ad589

Joe Orton authored Mar 24, 2014

  the write() of the request.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1580928 13f79535-47bb-0310-9956-ffa450edef68

b41ad589

Suggest the 'require expr' syntax as an alternate way to do something. · e97ed455
Richard Bowen authored Mar 24, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1580895 13f79535-47bb-0310-9956-ffa450edef68
```
e97ed455

Mar 23, 2014

mod_reqtimeout: Resolve unexpected timeouts on keepalive requests · 05d5264c

Eric Covener authored Mar 23, 2014

under the Event MPM. PR56216.  

Submitted By: Frank Meier <frank meier ergon ch>
Committed By: covener




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1580568 13f79535-47bb-0310-9956-ffa450edef68

05d5264c

Mar 19, 2014

And use #error if we get past configure... · e89235fe

Jim Jagielski authored Mar 19, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1579267 13f79535-47bb-0310-9956-ffa450edef68

e89235fe

Check if PCRE_DUPNAMES exists at configure time · 24df3922

Jim Jagielski authored Mar 19, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1579259 13f79535-47bb-0310-9956-ffa450edef68

24df3922

Mar 18, 2014

typo fix · c905fda9

Vincent Deffontaines authored Mar 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1578895 13f79535-47bb-0310-9956-ffa450edef68

c905fda9

fix message number · 6f84625f

Daniel Gruno authored Mar 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1578882 13f79535-47bb-0310-9956-ffa450edef68

6f84625f

mod_lua: Actually check whether interpreting the base structure of a file... · 9966cfbe

Daniel Gruno authored Mar 18, 2014

mod_lua: Actually check whether interpreting the base structure of a file works or not, don't just assume it works.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1578870 13f79535-47bb-0310-9956-ffa450edef68

9966cfbe