Commits · 4f0b06b12e1e0148ed7f058ec4c65c36a30cdf2d · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Aug 17, 2001

· 4f0b06b1

William A. Rowe Jr authored Aug 17, 2001

Given a choice between chasing my tail to keep these updated, and rolling
a set when we actually roll a tarball, I'll take the later, thank you.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90268 13f79535-47bb-0310-9956-ffa450edef68

4f0b06b1

Aug 16, 2001

· 11f86444

William A. Rowe Jr authored Aug 16, 2001

  Ignore goodness


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90250 13f79535-47bb-0310-9956-ffa450edef68

11f86444

check for timeout on socket read when we check for ECONNRESET and eof · 5139fca7

Jeff Trawick authored Aug 16, 2001

previously, we'd die on an assert() (really nasty for threaded MPM) when
we hit a keepalive timeout for a browser like netscape which keeps the
connection open

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90244 13f79535-47bb-0310-9956-ffa450edef68

5139fca7

fix a few mod_ssl warnings for stuff like function which were neither · 99e9764c

Jeff Trawick authored Aug 16, 2001

static nor prototyped, char * vs. const char *, etc.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90238 13f79535-47bb-0310-9956-ffa450edef68

99e9764c

at least make a note of SSL_R_HTTP_REQUEST error (until this is properly dealt with) · 14e815d8
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90229 13f79535-47bb-0310-9956-ffa450edef68
```
14e815d8
if ssl shutdown happens earlier than expected, filter code needs be aware · ae5ce915
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90227 13f79535-47bb-0310-9956-ffa450edef68
```
ae5ce915
need to remove buckets from the output brigade, since we will be passing a different brigade · 9061e2ab
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90225 13f79535-47bb-0310-9956-ffa450edef68
```
9061e2ab

· d8bbd974

William A. Rowe Jr authored Aug 16, 2001

  More Versioning


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90208 13f79535-47bb-0310-9956-ffa450edef68

d8bbd974

enable ssl Translate, UserCheck, Access and Auth hooks · 41973558

Doug MacEachern authored Aug 16, 2001

add support for renegotiation during the Access hook
this requires hooking into the read and write SSL BIOs in order to
flush data to the client and read from the filter chain

this also requires that the ssl filters become "aware" that
renegotitation is in progress so that the BIOs are left alone for
SSL_renegotiate/SSL_do_handshake in ssl_hook_Access to deal with

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90185 13f79535-47bb-0310-9956-ffa450edef68

41973558

Aug 14, 2001

need to check return value of ssl_hook_process_connection · 3f07c272

Doug MacEachern authored Aug 14, 2001

if != APR_SUCCESS the ssl connection has been shutdown
(for example client cert was revoked)
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90155 13f79535-47bb-0310-9956-ffa450edef68

3f07c272

Aug 08, 2001

from madhu: no longer need to force eReadType and eMode · 459b594e

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90030 13f79535-47bb-0310-9956-ffa450edef68

459b594e

get POST requests working with mod_ssl · a8fb25b6

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90027 13f79535-47bb-0310-9956-ffa450edef68

a8fb25b6

drop a brace inside #if 0 so emacs can indent properly · 2a556b97

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90023 13f79535-47bb-0310-9956-ffa450edef68

2a556b97

s/apr_size_t/apr_off_t/ for input filter · 2c46fefd

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90022 13f79535-47bb-0310-9956-ffa450edef68

2c46fefd

Aug 07, 2001

· 257ea32d

William A. Rowe Jr authored Aug 07, 2001

  Update for the 2.0.23 tag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89994 13f79535-47bb-0310-9956-ffa450edef68

257ea32d

Remove all warnings from the input filtering stack. · ce327dda

Ryan Bloom authored Aug 07, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89987 13f79535-47bb-0310-9956-ffa450edef68

ce327dda

Aug 02, 2001

· 819909fa

William A. Rowe Jr authored Aug 02, 2001

  Fix typo in prior commit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89873 13f79535-47bb-0310-9956-ffa450edef68

819909fa

· 627761f7

William A. Rowe Jr authored Aug 02, 2001

  Adapt to changed declaration of apr_pool_sub_make()


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89871 13f79535-47bb-0310-9956-ffa450edef68

627761f7

Jul 31, 2001

· 312a48fc

William A. Rowe Jr authored Jul 31, 2001

  Ooops... my fooness.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89843 13f79535-47bb-0310-9956-ffa450edef68

312a48fc

· 544593e5

William A. Rowe Jr authored Jul 31, 2001

  Another huge file check, and one fewer emits


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89833 13f79535-47bb-0310-9956-ffa450edef68

544593e5

· 2f99a153

William A. Rowe Jr authored Jul 31, 2001

  Clean up some emits


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89832 13f79535-47bb-0310-9956-ffa450edef68

2f99a153

· 9fa922e5

William A. Rowe Jr authored Jul 31, 2001

Ok... for _today_ ...

This patch conditionally builds against openssl 0.9.6b _if_ openssl is
unpacked and properly built (using pretty much the defaults) in the
srclib/openssl/ directory. Someday soon this needs to be more exhaustive,
but this should solve the 80% problem :)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89823 13f79535-47bb-0310-9956-ffa450edef68

9fa922e5

· 49bb424a

William A. Rowe Jr authored Jul 31, 2001

  Missed a small bit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89822 13f79535-47bb-0310-9956-ffa450edef68

49bb424a

· 3da3de6f

William A. Rowe Jr authored Jul 31, 2001

enables the use of the ssl_var_lookup functionality in the various source
files in modules/ssl. The ap_hook_* functions are still not yet ported to
Apache 2.0 style

Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89819 13f79535-47bb-0310-9956-ffa450edef68

3da3de6f

· ae43f146

William A. Rowe Jr authored Jul 31, 2001

This patch eliminates the direct use of OS library calls (fopen and
other depreciated Apache 1.3 library utilities) from ssl_engine_pphrase.c
and ssl_util_ssl.c.

Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89818 13f79535-47bb-0310-9956-ffa450edef68

ae43f146

· 5c5fde92

William A. Rowe Jr authored Jul 31, 2001

- eliminated the use of ssl_log - it used to cause seg faults during cleanup
since the conn_rec will no longer be valid.
- eliminated the "for (;;)" processing loop in ssl_io_filter_Output() -
we'll have to do that in churn_output() if required, so that any remaining
OpenSSL data (if available) is transferred before we call the
CloseConnection.
- Any remaining data in SSL should be cleaned up ideally in the
APR_BUCKET_IS_EOS() processing stage itself, as we close the SSL connection
here.


Submitted by:	Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	William Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89816 13f79535-47bb-0310-9956-ffa450edef68

5c5fde92

· 7b6e9a80

William A. Rowe Jr authored Jul 31, 2001

  Activate ssl_hook_pre_config


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89815 13f79535-47bb-0310-9956-ffa450edef68

7b6e9a80

· 12092064

William A. Rowe Jr authored Jul 31, 2001

  Change lib locations for openssl's debugging default targets


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89814 13f79535-47bb-0310-9956-ffa450edef68

12092064

un-win32ize · dd94320e

Doug MacEachern authored Jul 31, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89812 13f79535-47bb-0310-9956-ffa450edef68

dd94320e

s/seperate/separate/ · a9b6778e

Cliff Woolley authored Jul 31, 2001

Also consolidate the two hints


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89811 13f79535-47bb-0310-9956-ffa450edef68

a9b6778e

· 6faff19c

William A. Rowe Jr authored Jul 31, 2001

Thanks Madhu, I think backing out the last bit, and using this instead,
may be a bit simpler. Could still exist a problem feel free to fix.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89810 13f79535-47bb-0310-9956-ffa450edef68

6faff19c

Jul 30, 2001

· 952fd8b5

William A. Rowe Jr authored Jul 30, 2001

Register for %X, %c (we gotta make a decision, please vote if you care...
use %c's meaning from the historical SSL modules, or Bill Stoddard's
connection-terminated meaning? One will have to give.)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89807 13f79535-47bb-0310-9956-ffa450edef68

952fd8b5

· c93031c4

William A. Rowe Jr authored Jul 30, 2001

  The short term hack.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89806 13f79535-47bb-0310-9956-ffa450edef68

c93031c4

· b8c29732

William A. Rowe Jr authored Jul 30, 2001

  More XHTML foo.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89805 13f79535-47bb-0310-9956-ffa450edef68

b8c29732

Allow us to build ssl on beos... · c398ff40

David Reid authored Jul 30, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89803 13f79535-47bb-0310-9956-ffa450edef68

c398ff40

Jul 26, 2001

· edf4d41b

William A. Rowe Jr authored Jul 26, 2001

  Update make file for win32


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89733 13f79535-47bb-0310-9956-ffa450edef68

edf4d41b

Jul 25, 2001

Avoid uninitialized variable due to still disabled code · 7419d4f9

Ralf S. Engelschall authored Jul 25, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89705 13f79535-47bb-0310-9956-ffa450edef68

7419d4f9

Jul 24, 2001

bandaid for segv in ssl_io_filter_Output · ba00f593

Doug MacEachern authored Jul 24, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89681 13f79535-47bb-0310-9956-ffa450edef68

ba00f593

Jul 20, 2001

· b9b2b454

William A. Rowe Jr authored Jul 20, 2001

  Update for latest structure changes for 2.0.21


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89644 13f79535-47bb-0310-9956-ffa450edef68

b9b2b454

Jul 19, 2001

· 9266d5c5

William A. Rowe Jr authored Jul 19, 2001

That's it. Adjust for our pcre transition, and the whole thing links
once again.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89631 13f79535-47bb-0310-9956-ffa450edef68

9266d5c5