Commits · 22c187eb74034031f9518d510801ad20a2fba754 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 06, 2004

Fix use of mod_ssl as a DSO linked against static SSL libraries; also · 22c187eb

Joe Orton authored Mar 06, 2004

stop linking all of support/* against the SSL libraries:

* acinclude.m4 (APACHE_MODULE): Define MOD_FOO_LDADD which each
module .la library will be linked against.
(APACHE_MODPATH_ADD): Link static modules against the provided libraries.
(APACHE_CHECK_SSL_TOOLKIT): Put SSL libraries in SSL_LIBS and export
that to config_vars.mk.

* support/Makefile.in: Link ab against SSL_LIBS.

* modules/ssl/config.m4: Add SSL_LIBS and distcache libraries to
MOD_SSL_LDADD.

PR: 17217


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102870 13f79535-47bb-0310-9956-ffa450edef68

22c187eb

* include/mpm_common.h (ap_pod_t): Remove 'sa' field. · ade23cd9

Joe Orton authored Mar 06, 2004

* server/mpm_common.c (ap_mpm_pod_open, dummy_connection): Use
ap_listeners->bind_addr for the dummy connection rather than doing a
name lookup on the first listener's hostname and using one of the
addresses returned.

PR: 27313


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102869 13f79535-47bb-0310-9956-ffa450edef68

ade23cd9

Mar 05, 2004

Add maxmemfree as a default for the netware mpm · dceaec11

Bradley Nicholes authored Mar 05, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102866 13f79535-47bb-0310-9956-ffa450edef68

dceaec11

Revert a change to the link flags that were accidentally committed. · fe20162b
Sander Striker authored Mar 05, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102864 13f79535-47bb-0310-9956-ffa450edef68
```
fe20162b

Allow the enabled flag to be set to more than just TRUE or FALSE so that · aee1c6e7

Bradley Nicholes authored Mar 05, 2004

the OPTIONAL flag can be correctly merged within the
ssl_config_server_merge() function.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102860 13f79535-47bb-0310-9956-ffa450edef68

aee1c6e7

Allow the enabled flag to be set to more that just TRUE or FALSE so that · 2a046817

Bradley Nicholes authored Mar 05, 2004

the OPTIONAL flag is correctly merged within the
ssl_config_server_merge() function.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102859 13f79535-47bb-0310-9956-ffa450edef68

2a046817

Mar 04, 2004

* modules/ssl/ssl_engine_init.c (ssl_init_Engine): Log the OpenSSL · 7e137916

Joe Orton authored Mar 04, 2004

error stack contents if engine load/init fails.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102857 13f79535-47bb-0310-9956-ffa450edef68

7e137916

* modules/ssl/ssl_engine_log.c (ssl_log_ssl_error): Use %lu to print · 7ad48f9b

Joe Orton authored Mar 04, 2004

an unsigned long.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102856 13f79535-47bb-0310-9956-ffa450edef68

7ad48f9b

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup, · 31470743

Joe Orton authored Mar 04, 2004

ssl_var_lookup_ssl_cipher): Use apr_itoa instead of psprintf %d.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102855 13f79535-47bb-0310-9956-ffa450edef68

31470743

* modules/ssl/ssl_engine_vars (ssl_var_lookup): const'ify result and · bbce8d6c

Joe Orton authored Mar 04, 2004

drop a bunch of casts; use apr_table_get directly in place of
ssl_var_lookup_header.
(ssl_var_lookup_header): Remove function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102854 13f79535-47bb-0310-9956-ffa450edef68

bbce8d6c

* modules/ssl/ssl_engine_vars (ssl_var_lookup): Optimise such that · 8003008a

Joe Orton authored Mar 04, 2004

lookup of SSL_* variables (the common case) requires 2 rather than 29
strcasecmp calls before getting to ssl_var_lookup_ssl().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102851 13f79535-47bb-0310-9956-ffa450edef68

8003008a

* modules/ssl/mod_ssl.h: Declare ssl_is_https optional function. · b662a4f3

Joe Orton authored Mar 04, 2004

* modules/ssl/ssl_engine_vars (ssl_is_https): New function.
(ssl_var_register): Register it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102850 13f79535-47bb-0310-9956-ffa450edef68

b662a4f3

* modules/ssl/ssl_engine_vars (ssl_var_lookup): Fix potential · 0e6305b9

Joe Orton authored Mar 04, 2004

segfaults if called with r=NULL, c!=NULL, spotted by Andr��.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102849 13f79535-47bb-0310-9956-ffa450edef68

0e6305b9

Mar 03, 2004

sync with 2.0.49-dev · c62b189a

Jeff Trawick authored Mar 03, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102846 13f79535-47bb-0310-9956-ffa450edef68

c62b189a

Mar 01, 2004

· 62f71b40

Paul J. Reder authored Mar 01, 2004

 *) Remove compile-time length limit on request strings. Length is
    now enforced solely with the LimitRequestLine config directive.
    [Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102840 13f79535-47bb-0310-9956-ffa450edef68

62f71b40

fix windows build: add path to mod_ssl.h · 215a8d5c

Allan K. Edwards authored Mar 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102837 13f79535-47bb-0310-9956-ffa450edef68

215a8d5c

add eoc_bucket.c to project · b221b179

Allan K. Edwards authored Mar 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102834 13f79535-47bb-0310-9956-ffa450edef68

b221b179

enable IPv6 for Windows XP and 2003. In addition this this · dc9717b4

Allan K. Edwards authored Mar 01, 2004

we need a way to set APR_HAVE_IPV6 at build time in apr.hw


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102833 13f79535-47bb-0310-9956-ffa450edef68

dc9717b4

* modules/metadata/mod_headers.c (header_inout_cmd): Remove redundant · 24169665

Joe Orton authored Mar 01, 2004

conditional.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102832 13f79535-47bb-0310-9956-ffa450edef68

24169665

Feb 29, 2004

update transformation · e107b3c3

Andre Malo authored Feb 29, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102828 13f79535-47bb-0310-9956-ffa450edef68

e107b3c3

Win32: Taking down the child process on accept errors opens the possibility of a DoS attack. · 38888c09
Bill Stoddard authored Feb 29, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102827 13f79535-47bb-0310-9956-ffa450edef68
```
38888c09

sync with stable branch · 40ebf7fc

Jeff Trawick authored Feb 29, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102826 13f79535-47bb-0310-9956-ffa450edef68

40ebf7fc

Win32: find_read_listeners was not correctly handling multiple listeners on... · 41d77dec

Bill Stoddard authored Feb 29, 2004

Win32: find_read_listeners was not correctly handling multiple listeners on the Win32DisableAcceptEx path


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102823 13f79535-47bb-0310-9956-ffa450edef68

41d77dec

* Makefile.in: Link httpd against user-supplied $(LIBS). · fd8874d6

Joe Orton authored Feb 29, 2004

PR: 7882


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102820 13f79535-47bb-0310-9956-ffa450edef68

fd8874d6

* modules/ssl/ssl_engine_io.c (ssl_io_filter_disable, · 1239563b

Joe Orton authored Feb 29, 2004

ssl_io_filter_error): Clear the SSL * pointer in the SSLConnRec too.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102819 13f79535-47bb-0310-9956-ffa450edef68

1239563b

* server/core.c (core_output_filter): Avoid using EOC bucket after · 95e1d657

Joe Orton authored Feb 29, 2004

deleting it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102818 13f79535-47bb-0310-9956-ffa450edef68

95e1d657

Feb 28, 2004

Attempt to document the new cert DN lookup feature. · 13db5b10

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102817 13f79535-47bb-0310-9956-ffa450edef68

13db5b10

Document the %s format specifier. · 7fba869b

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102816 13f79535-47bb-0310-9956-ffa450edef68

7fba869b

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn): Simplify · 398c35ea

Joe Orton authored Feb 28, 2004

to use apr_pstrmemdup.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102815 13f79535-47bb-0310-9956-ffa450edef68

398c35ea

sync · 7fecd656

Andre Malo authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102814 13f79535-47bb-0310-9956-ffa450edef68

7fecd656

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn): For a DN · 4dd63e03

Joe Orton authored Feb 28, 2004

which includes several RDNs with the same OID, allow lookup of any
particular RDN using an "_<n>" suffix on the name.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102813 13f79535-47bb-0310-9956-ffa450edef68

4dd63e03

update transformaation · d5b383e2

Andre Malo authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102812 13f79535-47bb-0310-9956-ffa450edef68

d5b383e2

Add 's' format tag to mod_headers to allow access to mod_ssl variables · f5d75207

Joe Orton authored Feb 28, 2004

without the overhead of SSLOptions +StdEnvVars/+ExportCertData; also
ensure that any multi-line envvars are unwrapped onto a single line.

* modules/metadata/mod_headers.c (header_request_ssl_var, unwrap_header,
header_post_config): New functions.
(header_pre_config): Register the 's' tag type.
(register_hooks): Add the post_config hook.

PR: 23223


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102809 13f79535-47bb-0310-9956-ffa450edef68

f5d75207

Win32: Log each listener thread · bd0e2037

Bill Stoddard authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102806 13f79535-47bb-0310-9956-ffa450edef68

bd0e2037

Win32: Eliminate a Sleep(100) that always occurs on certain errors on... · 1b49d2bf

Bill Stoddard authored Feb 28, 2004

Win32: Eliminate a Sleep(100) that always occurs on certain errors on AcceptEx(). Apply err_count threshold to all AcceptEx error conditions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102805 13f79535-47bb-0310-9956-ffa450edef68

1b49d2bf

Win32: Shutdown the server on critical child failures that will prevent the server from operating · 5a427cb8
Bill Stoddard authored Feb 28, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102804 13f79535-47bb-0310-9956-ffa450edef68
```
5a427cb8

Move mod_ssl-internal interfaces into ssl_private.h; allow mod_ssl.h · 8a7132c9

Joe Orton authored Feb 28, 2004

to be included even when mod_ssl is not enabled.

* Makefile.in (install-include): Only install mod_ssl.h.

* modules/ssl/ssl_private.h: New file.

* modules/ssl/mod_ssl.h: Move everything apart from than the optional
hook definitions into ssl_private.h.

* modules/ssl/*.c: Include ssl_private.h not mod_ssl.h

* modules/ssl/config.m4: Always add the mod_ssl directory to the
include path so other modules can find mod_ssl.h.

* modules/proxy/mod_proxy.c: Include mod_ssl.h to pick up the optional
hook definitions rather than copy'n'pasting them.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102803 13f79535-47bb-0310-9956-ffa450edef68

8a7132c9

Use SSL_CLIENT_CERT_CHAIN_<n> with an underscore before the <n>. · 73017cb6
Joe Orton authored Feb 28, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102802 13f79535-47bb-0310-9956-ffa450edef68
```
73017cb6

* server/connection.c (ap_flush_conn): Fix typo. · 5ee52546

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102800 13f79535-47bb-0310-9956-ffa450edef68

5ee52546

Relicense. · 5fca09a9

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102799 13f79535-47bb-0310-9956-ffa450edef68

5fca09a9