Commits · 0b61edca6cdda2737aa1d84a4526c5f9d2e23a8c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Oct 12, 2018

Lucien Gentis authored Oct 12, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843677 13f79535-47bb-0310-9956-ffa450edef68

0b61edca

XML update. · 73d17c7f

Lucien Gentis authored Oct 12, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843676 13f79535-47bb-0310-9956-ffa450edef68

73d17c7f

fr doc rebuild. · 24fba666

Lucien Gentis authored Oct 12, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843671 13f79535-47bb-0310-9956-ffa450edef68

24fba666

XML updates. · ff47687b

Lucien Gentis authored Oct 12, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843670 13f79535-47bb-0310-9956-ffa450edef68

ff47687b

Oct 11, 2018

On the trunk: · 6a345b5a

Stefan Eissing authored Oct 11, 2018

mod_md: eliminating compiler warnings re signedness and unused. Adding a APLOG_WARNING
when the only available ACME challenge is "tls-sni-01" since Let's Encrypt will
disable that completely beginning of 2019.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843543 13f79535-47bb-0310-9956-ffa450edef68

6a345b5a

Oct 10, 2018

mpm_event: avoid AH00484 with idle threads · f1a8c3e5

Eric Covener authored Oct 10, 2018

mpm_event: Stop issuing AH00484 "server reached MaxRequestWorkers..." when
there are still idle threads available. When there are less idle threads than
MinSpareThreads, issue new one-time message AH10159. Matches worker MPM.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843513 13f79535-47bb-0310-9956-ffa450edef68

f1a8c3e5

Eliminating some advanced conversion and shadow declaration compiler warnings. · d28840a6
Stefan Eissing authored Oct 10, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843430 13f79535-47bb-0310-9956-ffa450edef68
```
d28840a6

mod_http2: adding defensive code for stream EOS handling, in case the request handler · 2bebb2c2

Stefan Eissing authored Oct 10, 2018

missed to signal it the normal way (eos buckets). Addresses github issues
https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167
and https://github.com/icing/mod_h2/issues/170.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843426 13f79535-47bb-0310-9956-ffa450edef68

2bebb2c2

mod_http2: bringing some signed/unsigned casting goodness, aligning with github mod-h2 again · 64b98f99
Stefan Eissing authored Oct 10, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843424 13f79535-47bb-0310-9956-ffa450edef68
```
64b98f99

Oct 09, 2018

Add CHANGES entry · 3c485337

Christophe Jaillet authored Oct 09, 2018

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843290 13f79535-47bb-0310-9956-ffa450edef68

3c485337

mod_session_cookie: avoid adding the Set-Cookie header · da8e5a66

Luca Toscano authored Oct 09, 2018

                    in both r->headers_out and r->err_headers_out
                    to avoid duplication.

In session_cookie_save it seems that ap_cookie_write is called
with r->headers_out and r->err_headers_out, ending up in the same
Set-Cookie header on both tables and eventually duplicated in the
HTTP response. I took Emmanuel's patch and trimmed out the bits
that remove the header only from r->err_headers_out (leaving it
to do the work on both tables) as attempt to change this bit of code
in the most conservative way as possible. Sending a commit for
a broader review.

PR: 60910,56098,55278



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843244 13f79535-47bb-0310-9956-ffa450edef68

da8e5a66

mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified · 83f3cd02

Evgeny Kotkov authored Oct 09, 2018

responses allowing these modules to properly set or fix-up the response
headers such as Vary or ETag.

This change follows up on r1837056 that disabled that special handling and
thus resulted in a potential violation of RFC7232, 4.1:

The server generating a 304 response MUST generate any of the following
header fields that would have been sent in a 200 (OK) response to the
same request: Cache-Control, Content-Location, Date, ETag, Expires,
and Vary.)

References:
https://lists.apache.org/thread.html/f5733ca6743757e8aa8b58a0cd9e27680971551c2a20f5606c66507e@%3Cdev.httpd.apache.org%3E
https://tools.ietf.org/html/rfc7232#section-4.1

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843242 13f79535-47bb-0310-9956-ffa450edef68

83f3cd02

Oct 08, 2018

ran `build bootstrap` and rebuild transformation. sorry for the noise. · 71842c0b
André Malo authored Oct 08, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843205 13f79535-47bb-0310-9956-ffa450edef68
```
71842c0b
move es and fr targets to *.utf8 extension. Update transformation · 6a913c6a
André Malo authored Oct 08, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843201 13f79535-47bb-0310-9956-ffa450edef68
```
6a913c6a

Fix xml validation error · 96869c29

André Malo authored Oct 08, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843164 13f79535-47bb-0310-9956-ffa450edef68

96869c29

Oct 05, 2018

Add changes, docs for DefaultStateDir and DavLockDB default change. · c737f2a0
Joe Orton authored Oct 05, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1842938 13f79535-47bb-0310-9956-ffa450edef68
```
c737f2a0