Commits · 098c5a233c3c737927d641e74e5c2734147aa0b0 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jun 03, 2003

mod_dav improvement: make dav_method_propfind stream its response, · 098c5a23

Greg Stein authored Jun 03, 2003

rather than cache every <response> object and send the whole 207 at once.

Note:  this patch doesn't affect the mod_dav provider API at all.
Providers still return property results in text-buffers, but mod_dav
then streams them out immediately.

Submitted by: Ben Collins-Sussman <sussman@collab.net>
Reviewed by: gstein, jerenkrantz, sander

* mod_dav.h (dav_walker_ctx): add a brigade field and a scratchpool field.

* mod_dav.c (dav_send_one_response): new helper function to write a
    <DAV:response> into a brigade/filter.  this code has been factorized
    out of dav_send_multistatus.

  (dav_begin_multistatus): new factorized helper func; creates brigade
    and sends initial <multistatus> tag.

  (dav_send_multistatus): create brigade, call dav_begin_multistatus,
    and switch all ap_rputs calls to ap_fputs instead.  call
    dav_send_one_response when looping over response list.  use a
    subpool when iterating.

  (dav_method_propfind): initialize walker ctx's brigade.  initialize
    ctx's scratchpool as a subpool of r->pool.  Send a <multistatus> tag
    before calling the provider's walk() function, and a </multistatus>
    tag afterwards.

  (dav_stream_response): new function, originally based on
    dav_add_repsonse.  don't build linked list of responses in memory;
    just spew each response object into the brigade via
    dav_send_one_response().  take an incoming pool argument to do the
    temporary allocation and streaming.

  (dav_propfind_walker): pass ctx->scratchpool to dav_stream_response,
    and clear the pool when finished.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100164 13f79535-47bb-0310-9956-ffa450edef68

098c5a23

drop more unused image files · 80263b9e

Andre Malo authored Jun 03, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100163 13f79535-47bb-0310-9956-ffa450edef68

80263b9e

this image is not referenced anywhere -> drop it. · 655ea42c

Andre Malo authored Jun 03, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100160 13f79535-47bb-0310-9956-ffa450edef68

655ea42c

Simplify the per-thread pool handling in the NetWare MPM · 0d036ce7
Bradley Nicholes authored Jun 03, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100156 13f79535-47bb-0310-9956-ffa450edef68
```
0d036ce7

use german stylesheet · 2f5cdabe

Astrid Kessler authored Jun 03, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100155 13f79535-47bb-0310-9956-ffa450edef68

2f5cdabe

Win32: Whack the fully qualified names that appear in the log when · 2048f325

Bill Stoddard authored Jun 03, 2003

loglevel debug is being used.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100153 13f79535-47bb-0310-9956-ffa450edef68

2048f325

Be more consistant in how we label security issues · 1f37c225

Mark J. Cox authored Jun 03, 2003

Promote the issues that have been allocated a full CVE name (to replace CAN)
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100151 13f79535-47bb-0310-9956-ffa450edef68

1f37c225

Apply missing security fix CHANGELOG entries to head · 3aac15e2

Mark J. Cox authored Jun 03, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100150 13f79535-47bb-0310-9956-ffa450edef68

3aac15e2

Update transformations. · 8ba71afd

Yoshiki Hayashi authored Jun 03, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100148 13f79535-47bb-0310-9956-ffa450edef68

8ba71afd

Update Japanese translations. · f40a8f09

Yoshiki Hayashi authored Jun 03, 2003

Submitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100147 13f79535-47bb-0310-9956-ffa450edef68

f40a8f09

Jun 02, 2003

don't wrap in legend tables (looks ugly) · 5a106c85

Andre Malo authored Jun 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100139 13f79535-47bb-0310-9956-ffa450edef68

5a106c85

Allow for an unclean shutdown of SSL ports to avoid timeout conditions · 03a9d4f1

Bradley Nicholes authored Jun 02, 2003

between the client and the server.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100138 13f79535-47bb-0310-9956-ffa450edef68

03a9d4f1

· 177a974e

William A. Rowe Jr authored Jun 02, 2003

The right patch (thanks to Eric for identifying the wrong patch) to move
SSL_library_init() into the register hooks phase. OpenSSL_add_ssl_algorithms
devolves to SSL_library_init, which is the same for most toolkits (and would
be accomodated in ssl_toolkit_config.h if not.)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100136 13f79535-47bb-0310-9956-ffa450edef68

177a974e

preserve const-ness while searching for a char in a string · 841827b7

Jeff Trawick authored Jun 02, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100135 13f79535-47bb-0310-9956-ffa450edef68

841827b7

Jun 01, 2003

"Comment out .gz etc. AddEncoding lines in our default configuration. · f1b2289b

Erik Abele authored Jun 01, 2003

Current browsers have a tendency to decompress the data when no one really
wants it to do that. If you want the old behavior that leads to transparent
decompression by modern browsers, uncomment these lines. But, this
shouldn't be our default." (see httpd-std.conf.in r1.32, jerenkrantz)

Reviewed by: wrowe, slive, nd, erik

Also removed the corresponding entry from STATUS.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100131 13f79535-47bb-0310-9956-ffa450edef68

f1b2289b

Added a note, a vote and a section about some necessary doco · 776c7155

Erik Abele authored Jun 01, 2003

improvements.

Removed a section about building the man pages from XML source.
Also removed a section about possible cross references between the
different languages. Both was fixed by Andre recently.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100130 13f79535-47bb-0310-9956-ffa450edef68

776c7155

new german translation · 436ecbfb

Astrid Kessler authored Jun 01, 2003

Reviewed by nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100129 13f79535-47bb-0310-9956-ffa450edef68

436ecbfb

markup imrovement · df2d3879

Astrid Kessler authored Jun 01, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100128 13f79535-47bb-0310-9956-ffa450edef68

df2d3879

· 93310ddf

Ken Coar authored Jun 01, 2003

	Allow ExpiresByType to accept and understand minor-type wildcards
	(e.g., text/*).  They'll be used if an exact type match isn't
	found; if there's no wildcard match, the expiry falls back to any
	ExpiresDefault setting as usual.

PR:		7991


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100126 13f79535-47bb-0310-9956-ffa450edef68

93310ddf

May 31, 2003

As per repeated discussion on this point, I don't think that anybody · b6790166

Richard Bowen authored May 31, 2003

wants to do the maintenance work necessary to keep the FAQ correct if a
million monkeys are submitting content. So, to keep it from coming up
Yet Again, removing the remark.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100125 13f79535-47bb-0310-9956-ffa450edef68

b6790166

More mod_expires tuning. Replace the fixup hook with an insert filter · 3111af83
Bill Stoddard authored May 31, 2003
```
hook.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100124 13f79535-47bb-0310-9956-ffa450edef68
```
3111af83

Revert revision 1.81 which called non-existent SSL_load_library. · 7eafe3bd

Justin Erenkrantz authored May 31, 2003

No idea where this was seen, but OpenSSL 0.9.7b does not have this. This
gets mod_ssl working again.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100122 13f79535-47bb-0310-9956-ffa450edef68

7eafe3bd

some markup improvement · a99f8b28

Astrid Kessler authored May 31, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100118 13f79535-47bb-0310-9956-ffa450edef68

a99f8b28

May 30, 2003

Fixing up the NetWare headers to be compatible with the GNU compiler · 4b544bd9

Bradley Nicholes authored May 30, 2003

Submitted by: G�nter Knauf <gk@gknw.de>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100116 13f79535-47bb-0310-9956-ffa450edef68

4b544bd9

Add mod_charset_lite to the NetWare build. · 59c82533

Bradley Nicholes authored May 30, 2003

Submitted by: G�nter Knauf <gk@gknw.de>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100113 13f79535-47bb-0310-9956-ffa450edef68

59c82533

· 2fc3a493

William A. Rowe Jr authored May 30, 2003

OpenSSL_add_all_algorithms is simply an alias for SSL_load_library.

Note that the entire schema of what-we-load-how follows from
OpenSSL 0.9.7's own apps/ example applications. More review
is greatly desired, but that's where I believed I should
start looking for the 'correct' order of operations.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100110 13f79535-47bb-0310-9956-ffa450edef68

2fc3a493

· 50f2b97d

William A. Rowe Jr authored May 30, 2003

Provide a far more useful explanation when SSLCryptoDevice fails to
find a device. Still would be nice to implement dynamic:{options}
but this gets us to display the usual, builtin devices.

We now load builtin engines up front, in the pre_config phase, because
this and any other config cmd processor must have an already valid
library config. So loading builtin engines becomes redundant in this
cmd handler.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100108 13f79535-47bb-0310-9956-ffa450edef68

50f2b97d

· 45bd4aff

William A. Rowe Jr authored May 30, 2003

Solve a pretty horrific bug in SSLCryptoDevice and other places where
the config cmd processors should be examining the SSL context. We must
initialize the SSL library before we can actually obtain any useful
information from the SSL library.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100107 13f79535-47bb-0310-9956-ffa450edef68

45bd4aff

· 5ed2f55c

William A. Rowe Jr authored May 30, 2003

Based on list discussion between myself and Geoff, it seems prudent
to check for both the existence of the openssl/engine.h header file
and some 'expected function' such as ENGINE_init() (better suggestions
are welcome.) Also clear up some confusion; so long as we have
ENGINE_load_builtin_engines() we should attempt to preload those.

This patch protects all ENGINE-based code within the tests for the
engine header and function, and changes a version test into a
function test.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100104 13f79535-47bb-0310-9956-ffa450edef68

5ed2f55c

Use apr_table_overlap. Add note about additional brokeness of fast-redirect · 39ded5da
Bill Stoddard authored May 30, 2003
```
fooness


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100102 13f79535-47bb-0310-9956-ffa450edef68
```
39ded5da

sync · 0dc3c474

Andre Malo authored May 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100101 13f79535-47bb-0310-9956-ffa450edef68

0dc3c474

May 29, 2003

Rework of the recursion stopper - collapse recursion counters into one function · ca09a320