1. 30 Dec, 2009 1 commit
  2. 29 Dec, 2009 15 commits
  3. 27 Dec, 2009 4 commits
  4. 26 Dec, 2009 2 commits
  5. 25 Dec, 2009 3 commits
  6. 23 Dec, 2009 2 commits
  7. 22 Dec, 2009 2 commits
  8. 21 Dec, 2009 4 commits
  9. 20 Dec, 2009 1 commit
  10. 18 Dec, 2009 5 commits
  11. 16 Dec, 2009 1 commit
    • Joe Orton's avatar
      Further mitigation for the TLS renegotation attack, CVE-2009-3555: · 0a4c1543
      Joe Orton authored
      * modules/ssl/ssl_engine_kernel.c (has_buffered_data): New function.
        (ssl_hook_Access): Forcibly disable keepalive for the connection if
        there is any buffered data readable from the input filter stack.
      
      * modules/ssl/ssl_engine_io.c (ssl_io_filter_input): Ensure that the
        BIO uses blocking operations when invoked outside direct control of
        the httpd filter stack.
      
      Thanks to Hartmut Keil <Hartmut.Keil adnovum.ch> for proposing this
      technique.
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@891282 13f79535-47bb-0310-9956-ffa450edef68
      0a4c1543