Commits · 0d8ba9c9d9ab71529e73c8a9e942e92832caea51 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

08 Jul, 2016 1 commit

Eric Covener authored Jul 08, 2016

http://httpd.apache.org/docs/2.4/howto/cgi.html#comment_5623


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751930 13f79535-47bb-0310-9956-ffa450edef68

0d8ba9c9

04 Jul, 2016 3 commits

rebuild · f59bbe7a

Rich Bowen authored Jul 04, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751353 13f79535-47bb-0310-9956-ffa450edef68

f59bbe7a

Remove reference to long-dead website that once upon a time used this functionality. · 1c7e2445
Rich Bowen authored Jul 04, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751352 13f79535-47bb-0310-9956-ffa450edef68
```
1c7e2445

Give an example of converting a password file from one format to the · b728ac22

Rich Bowen authored Jul 04, 2016

other.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751351 13f79535-47bb-0310-9956-ffa450edef68

b728ac22

03 Jul, 2016 3 commits

Updated description of the change to reflect the last patch · a61cd9bd
Luca Toscano authored Jul 03, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751147 13f79535-47bb-0310-9956-ffa450edef68
```
a61cd9bd

Updated credits after Yann's patch · 06bc42a3

Luca Toscano authored Jul 03, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751139 13f79535-47bb-0310-9956-ffa450edef68

06bc42a3

Improve the FCGI/CGI Last-Modified header value handling. · c83b65ee

Luca Toscano authored Jul 03, 2016

Patch from Yann after a discussion on the dev@ mailing list. 
ap_scan_script_header_err_core_ex is now using apr_date_parse_rfc 
in order to recognize non-GMT datestr following RFC822/1123
and transforming them to GMT rather than replacing the value
with GMT now (that could add httpd's processing time to the
original value). Logging has also been improved from my initial
solution.
 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751138 13f79535-47bb-0310-9956-ffa450edef68

c83b65ee

02 Jul, 2016 2 commits

Rebuild. · aad93b99

Lucien Gentis authored Jul 02, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751065 13f79535-47bb-0310-9956-ffa450edef68

aad93b99

XML update. · 88e73247

Lucien Gentis authored Jul 02, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1751064 13f79535-47bb-0310-9956-ffa450edef68

88e73247

01 Jul, 2016 4 commits

ab: follow up to r1750854: still better naming, and a C89 fix. · 91ec402f
Yann Ylavic authored Jul 01, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750960 13f79535-47bb-0310-9956-ffa450edef68
```
91ec402f

ab: follow up to r1750854: some comments and better naming. · 67f972b3

Yann Ylavic authored Jul 01, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750955 13f79535-47bb-0310-9956-ffa450edef68

67f972b3

Fixed typo in log message, wrong RFC mentioned. · f1f241a0

Luca Toscano authored Jul 01, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750953 13f79535-47bb-0310-9956-ffa450edef68

f1f241a0

ab: follow up to r1750854. · 6f9a40a0

Yann Ylavic authored Jul 01, 2016

Use SNI when available by default, and invert -I logic to now disable it.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750947 13f79535-47bb-0310-9956-ffa450edef68

6f9a40a0

30 Jun, 2016 7 commits

ab: follow up to r1750854: put the -I at the right place for apr_getopt(). · f7e37bb6
Yann Ylavic authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750855 13f79535-47bb-0310-9956-ffa450edef68
```
f7e37bb6

ab: add SNI support when available. · 3bcbe95d

Yann Ylavic authored Jun 30, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750854 13f79535-47bb-0310-9956-ffa450edef68

3bcbe95d

modssl: reset client-verify state when renegotiation is aborted · 2d0e4eff
Stefan Eissing authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750779 13f79535-47bb-0310-9956-ffa450edef68
```
2d0e4eff

Update transformations. · a8777b25

Joe Orton authored Jun 30, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750751 13f79535-47bb-0310-9956-ffa450edef68

a8777b25

Update language on impact of disabling TRACE, remove reference to compliance. · eea17fde

Joe Orton authored Jun 30, 2016

Reviewed by: wrowe, covener, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750750 13f79535-47bb-0310-9956-ffa450edef68

eea17fde

Fix indentation and extra spaces of my previous commit, apologies. · b25e4fbb
Luca Toscano authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750749 13f79535-47bb-0310-9956-ffa450edef68
```
b25e4fbb

Log CGI/FCGI Last-Modified header value changes. · eb06d305

Luca Toscano authored Jun 30, 2016

The Last-Modified header coming from a backend FCGI/CGI script is inspected
by util_script.c to enforce RFC2616 (https://tools.ietf.org/html/rfc2616#section-14.29).
The Last-Modified header also needs to be compliant with RFC882/1123 as stated in
https://tools.ietf.org/html/rfc2616#section-3.3.1, and one important assumption that
httpd makes (correctly, as the RFC suggests) is to assume the GMT timezone. If the datestr
returned by the FCGI/CGI script is set with a different timezone, then the value might be considered
"in the future" and replaced with GMT now() as calculated by httpd. Adding a trace log might
help sysadmins while debugging these kind of issues. This is a follow up of r1748379.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750747 13f79535-47bb-0310-9956-ffa450edef68

eb06d305

28 Jun, 2016 13 commits

update transformation · ce24bc2f

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750574 13f79535-47bb-0310-9956-ffa450edef68

ce24bc2f

svn:eol-style = native · a1c9c285

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750568 13f79535-47bb-0310-9956-ffa450edef68

a1c9c285

--enable-mods-[shared|static]=none has *never* done anything special. · bda99fad
William A. Rowe Jr authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750567 13f79535-47bb-0310-9956-ffa450edef68
```
bda99fad

update transformation · 8f5c3d8b

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750563 13f79535-47bb-0310-9956-ffa450edef68

8f5c3d8b

svn:eol-style = native · b991111e

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750560 13f79535-47bb-0310-9956-ffa450edef68

b991111e

Small change to r952007, ensure we don't wipe out the $enable_foomod value · 77eb70e1

William A. Rowe Jr authored Jun 28, 2016

when that value is 'shared'. The 'yes', 'shared', 'static' and 'no' values
are all valid.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750553 13f79535-47bb-0310-9956-ffa450edef68

77eb70e1

mod_proxy: follow up to r1750392 and r1750474. · 73842ba5

Yann Ylavic authored Jun 28, 2016

Restore PROXY_WORKER_IS_USABLE() check in ap_proxy_connect_backend(), we must
obviously (un)put backend in error state based on the result of the actual
connect(), and don't change it in ap_proxy_check_backend()...
APR_SUCCESS return by ap_proxy_check_backend(), i.e. a usable worker and an
established connection, is enough for modules to continue w/o calling
ap_proxy_connect_backend(), still.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750508 13f79535-47bb-0310-9956-ffa450edef68

73842ba5

Fix proxy balancer lbmethod --enable defaults to follow proxy_balancer · c809c1c9
William A. Rowe Jr authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750507 13f79535-47bb-0310-9956-ffa450edef68
```
c809c1c9
mod_proxy: follow up to r1750392: comment on proxy_conn_rec->tmp_bb. · 3c17cf27
Yann Ylavic authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750494 13f79535-47bb-0310-9956-ffa450edef68
```
3c17cf27

mod_proxy: follow up to r1750392. · 38b465ae

Yann Ylavic authored Jun 28, 2016

Avoid double checking the connection in ap_proxy_connect_backend() when
ap_proxy_check_backend() says it is up and good to go.

This can be done by moving the PROXY_WORKER_IS_USABLE() check in
ap_proxy_check_backend(), since it is called by ap_proxy_connect_backend(),
and not calling the latter if the former succeeded (for the modules using it).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750474 13f79535-47bb-0310-9956-ffa450edef68

38b465ae

xforms · 0b1618fa

Christophe Jaillet authored Jun 28, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750445 13f79535-47bb-0310-9956-ffa450edef68

0b1618fa

Be more consistent in <highlight> block layout in XML. · d13da683

Christophe Jaillet authored Jun 28, 2016

No visual change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750441 13f79535-47bb-0310-9956-ffa450edef68

d13da683

Fix typo as spotted by Wolfgang in online doc · e5980c07

Christophe Jaillet authored Jun 28, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750439 13f79535-47bb-0310-9956-ffa450edef68

e5980c07

27 Jun, 2016 7 commits

This is not C code... no semi, a colon is a noop · bc59dc28

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750420 13f79535-47bb-0310-9956-ffa450edef68

bc59dc28

Undo r1750418, miscommitted a local test · 7ef8e1e6

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750419 13f79535-47bb-0310-9956-ffa450edef68

7ef8e1e6

This isn't C ;) Colon for noop · 1b553447

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750418 13f79535-47bb-0310-9956-ffa450edef68

1b553447

mod_proxy: we don't need ap_proxy_ssl_connection_cleanup() anymore with · b803da8c

Yann Ylavic authored Jun 27, 2016

ap_proxy_check_backend() used at connection reuse time, so remove its last call and deprecate it.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750416 13f79535-47bb-0310-9956-ffa450edef68

b803da8c

mod_proxy_http2: don't use ap_proxy_ssl_connection_cleanup(), there may be · c0f35387

Yann Ylavic authored Jun 27, 2016

data available on the backend connection before we reuse it (e.g. PING or SETTINGS change).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750414 13f79535-47bb-0310-9956-ffa450edef68

c0f35387

mod_proxy: use proxy_conn_rec->tmp_bb where appopriate to avoid temporary · b635c58b

Yann Ylavic authored Jun 27, 2016

brigade create/destroy.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750412 13f79535-47bb-0310-9956-ffa450edef68

b635c58b

Account for explicit enable- cases of 'shared', 'few', 'all', 'reallyall' · a534b98f
William A. Rowe Jr authored Jun 27, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750407 13f79535-47bb-0310-9956-ffa450edef68
```
a534b98f