Commits · 237e1afff9aa48f331d983f0be2e08e8d4453f55 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Apr 01, 2002

Made AB's use of the Host: header rfc2616 compliant as · 237e1aff

Dirk-Willem van Gulik authored Apr 01, 2002

reported by Taisuke Yamada <tai@iij.ad.jp>

PR:
Obtained from: Mailing list
Submitted by: Taisuke Yamada <tai@iij.ad.jp>
Reviewed by: Dirk-Willem van Gulik


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94355 13f79535-47bb-0310-9956-ffa450edef68

237e1aff

A bunch of Perchild changes. · 569d08a7

Ryan Bloom authored Apr 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94353 13f79535-47bb-0310-9956-ffa450edef68

569d08a7

Make perchild work with the new bucket_allocation API. Also, allow · 3aad7838

Ryan Bloom authored Apr 01, 2002

the Perchild directives to take both numerical UID/GID and the
logical user name/group name.
PR:	9784
Submitted by:	named UID/GID logic: Scott Lamb <slamb@slamb.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94352 13f79535-47bb-0310-9956-ffa450edef68

3aad7838

· 1339115d

William A. Rowe Jr authored Apr 01, 2002

pointer subtraction yeilds a ssize_t, fix emit by notating the
expression in terms of addition

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94351 13f79535-47bb-0310-9956-ffa450edef68

1339115d

· f971306a

William A. Rowe Jr authored Apr 01, 2002

  Fix another linkage error for 2.0.34 and cvs head


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94350 13f79535-47bb-0310-9956-ffa450edef68

f971306a

Get the Perchild MPM to compile and serve pages again. There are a lot · dd2c27f4

Ryan Bloom authored Apr 01, 2002

of bugs left in this, but I am taking things one step at a time.  This
will work again.  This also gets perchild using the correct variable for
MaxRequestsPerChild

PR:     9856, 9855, 9052


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94349 13f79535-47bb-0310-9956-ffa450edef68

dd2c27f4

Mar 31, 2002

it is sunny and warm in tahoe, still plenty of snow on the mountains · 5dbcde05
Doug MacEachern authored Mar 31, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94348 13f79535-47bb-0310-9956-ffa450edef68
```
5dbcde05

· b9ce107d

William A. Rowe Jr authored Mar 31, 2002

  Roll these changes into 2.0.34


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94347 13f79535-47bb-0310-9956-ffa450edef68

b9ce107d

Handle CR/LF terminated lines from CGI scripts. · b25ef72a

Brian Havard authored Mar 31, 2002

Reviewed by: Brian Pane


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94346 13f79535-47bb-0310-9956-ffa450edef68

b25ef72a

Mar 30, 2002

Removed the single-byte header reads from mod_cgid · 9bd04318

Brian Pane authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94344 13f79535-47bb-0310-9956-ffa450edef68

9bd04318

Fixed script error logging, which I'd left commented out after making · 409f928a

Brian Pane authored Mar 30, 2002

the changes to use a brigade to read the script headers
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94343 13f79535-47bb-0310-9956-ffa450edef68

409f928a

Fix for a bug that I introduced when eliminating the single-byte · 700dc9ac

Brian Pane authored Mar 30, 2002

reads in mod_cgi: eof wasn't treated as an error condition when
reading the script headers, so we were delivering a 200 when a
CGI script produced no output.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94342 13f79535-47bb-0310-9956-ffa450edef68

700dc9ac

add/use EVP_PKEY_reference_inc and X509_reference_inc compat macros · 50520944

Doug MacEachern authored Mar 30, 2002

to get these changes working with sslc


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94341 13f79535-47bb-0310-9956-ffa450edef68

50520944

add sslc compat for sk_X509_INFO_free · 9ee3dd99

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94340 13f79535-47bb-0310-9956-ffa450edef68

9ee3dd99

add SSLProxyCARevocation{File,Path} directives to support CRLs in the proxy · 482d6c95
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94338 13f79535-47bb-0310-9956-ffa450edef68
```
482d6c95

pass sc to myCtxConfig macro · 95209119

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94337 13f79535-47bb-0310-9956-ffa450edef68

95209119

make it possible for proxy to use CRL callback · 6f967851

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94336 13f79535-47bb-0310-9956-ffa450edef68

6f967851

enable the verify callback for proxy · e977f287

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94334 13f79535-47bb-0310-9956-ffa450edef68

e977f287

ap_proxy_http_request needs to check the return status of ap_pass_brigade · 305e19be
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94333 13f79535-47bb-0310-9956-ffa450edef68
```
305e19be

change sc->server references to myCtxConfig, so proxy can use the · ed6d34bd

Doug MacEachern authored Mar 30, 2002

verify callback.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94332 13f79535-47bb-0310-9956-ffa450edef68

ed6d34bd

add myCtxConfig macro · f6c69be7

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94331 13f79535-47bb-0310-9956-ffa450edef68

f6c69be7

implement proxy client certificate callback · 50aebdaf

Doug MacEachern authored Mar 30, 2002

(uses SSLProxyMachineCertificate{File,Cert} when downstream server
requires a client certificate)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94329 13f79535-47bb-0310-9956-ffa450edef68

50aebdaf

input filter should not return failure when ssl runtime wants to read more · 9815373b
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94328 13f79535-47bb-0310-9956-ffa450edef68
```
9815373b

ssl_io_input_read needs to return something other than APR_SUCCESS · d1c282b6

Doug MacEachern authored Mar 30, 2002

when bucket read from socket was successful,
but there was an error within the ssl runtime.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94327 13f79535-47bb-0310-9956-ffa450edef68

d1c282b6

load SSLProxyMachineCertificate{File,Path} · e4c98eb5

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94324 13f79535-47bb-0310-9956-ffa450edef68

e4c98eb5

enable/cleanup SSL_X509_INFO_load_{file,path} functions for use in · d818b898

Doug MacEachern authored Mar 30, 2002

proxy context


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94323 13f79535-47bb-0310-9956-ffa450edef68

d818b898

Fix the version string. We want to end up with "mod_ssl/2.0.xx", not · a7043344

Cliff Woolley authored Mar 30, 2002

"mod_ssl/Apache/2.0.xx".


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94320 13f79535-47bb-0310-9956-ffa450edef68

a7043344

Mar 29, 2002

Cloudy today. · a5480f9d

Joshua Slive authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94317 13f79535-47bb-0310-9956-ffa450edef68

a5480f9d

Removed email address on request - as obviscation was slammed down on the list... · eecbb192

Dirk-Willem van Gulik authored Mar 29, 2002

Removed email address on request - as obviscation was slammed down on the list - and Google is your friend in any case


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94315 13f79535-47bb-0310-9956-ffa450edef68

eecbb192

add SSLProxyEngine directive. this was not required in the 1.x based · 69e18950

Doug MacEachern authored Mar 29, 2002

mod_ssl because the SSL_CTX was created and configured for *every*
request. unlike in 2.0 where we configure the proxy SSL_CTX at
startup time, which is much better for performance. but we don't want
to configure a proxy context for every vhost if it isn't going to be
used, for the same reasons we don't create a server context for every
vhost unless SSLEngine is on.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94314 13f79535-47bb-0310-9956-ffa450edef68

69e18950

check the return value of ap_proxy_ssl_enable · 10bda6ff

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94313 13f79535-47bb-0310-9956-ffa450edef68

10bda6ff

Syncing makes no sense now · 87e69bb3

Jim Jagielski authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94309 13f79535-47bb-0310-9956-ffa450edef68

87e69bb3

· d41edaec

Paul J. Reder authored Mar 29, 2002

PR:
Obtained from:
Submitted by:	Paul J. Reder
Reviewed by:

Remove the MPM_SYNC_CHILD_TABLE macro since there is no longer a scoreboard
file that needs to be synched.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94308 13f79535-47bb-0310-9956-ffa450edef68

d41edaec

The old, legacy (and unused) code in which the scoreboard was totally · 0c8afb14

Jim Jagielski authored Mar 29, 2002

and completely contained in a file (SCOREBOARD_FILE) has been
removed. This does not affect scoreboards which are *mapped* to
files using named-shared-memory at all. This implies that scoreboards
must be based, at some level, on native shared memory (mmap, shm_open,
shmget, whatever), but the code has assumed that for quite awhile
now. Having the scoreboard be *based* on a file makes no sense today.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94306 13f79535-47bb-0310-9956-ffa450edef68

0c8afb14

BUCKET FREELISTS · d6e02ee3

Cliff Woolley authored Mar 29, 2002

Add an allocator-passing mechanism throughout the bucket brigades API.

From Apache's standpoint, the apr_bucket_alloc_t* used throughout a given
connection is stored in the conn_rec by the create_connection hook. That
means it's the MPM's job to optimize recycling of apr_bucket_alloc_t's --
the MPM must ensure that no two threads can ever use the same one at the
same time, for instance.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94304 13f79535-47bb-0310-9956-ffa450edef68

d6e02ee3

import ssl_proxy_enable in the post config phase, otherwise LoadModule · 7cfb2f35

Doug MacEachern authored Mar 29, 2002

order may leave us without the function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94303 13f79535-47bb-0310-9956-ffa450edef68

7cfb2f35

remove ssl_engine_ext.c · e783d880

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94302 13f79535-47bb-0310-9956-ffa450edef68

e783d880

removing old proxy extension code · a733daf7

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94301 13f79535-47bb-0310-9956-ffa450edef68

a733daf7

hook into mod_ssl for https support · c8f573be

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94300 13f79535-47bb-0310-9956-ffa450edef68

c8f573be

need to flush output buffer before reading in proxy mode · 3ec6b50c

Doug MacEachern authored Mar 29, 2002

need to call ssl_hook_process_connection in the output filter in proxy
mode, since proxy hits the output filter before the input filter

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94299 13f79535-47bb-0310-9956-ffa450edef68

3ec6b50c