Commits · 4f0bf4cf8e66116f368933a98efdbec7703ae2d5 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Feb 09, 2010

Let us be clearer about suggestions vs. necessity · 4f0bf4cf

William A. Rowe Jr authored Feb 09, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907927 13f79535-47bb-0310-9956-ffa450edef68

4f0bf4cf

Track time now for retrieve · 28af1915

William A. Rowe Jr authored Feb 09, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907924 13f79535-47bb-0310-9956-ffa450edef68

28af1915

Do not expire an entire subcache on ->retrieve (doh!); only expire a cache hit · ed326aeb
William A. Rowe Jr authored Feb 09, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907923 13f79535-47bb-0310-9956-ffa450edef68
```
ed326aeb
Catch up ssl to socache store expiry change, and clarify what the code is doing · 53f8a760
William A. Rowe Jr authored Feb 09, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907918 13f79535-47bb-0310-9956-ffa450edef68
```
53f8a760

distcache already demonstrates sub-second resolutions, but much more · a61f2be6

William A. Rowe Jr authored Feb 09, 2010

importantly, let us not introduce more Y2k38 bugs?

Changes the ->store method to take expiry as an apr_time_t, and introduce
a placeholder to implement provider-specific iterators of the current
elements of an socache store.

Cleans up confusion where expiry might be confused with a timeout-period.

Finally clean up some hUngarian noteAtion. Someones' hands need to be slapped.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907917 13f79535-47bb-0310-9956-ffa450edef68

a61f2be6

fix comment typo · c03f3e01

William A. Rowe Jr authored Feb 09, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907880 13f79535-47bb-0310-9956-ffa450edef68

c03f3e01

missing prototype - compile before committing please · 1f3971a4
William A. Rowe Jr authored Feb 09, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907879 13f79535-47bb-0310-9956-ffa450edef68
```
1f3971a4

Feb 08, 2010
- change the preprocessor define ap_accept_mutex_type to upper case · e472cac0
  Jeff Trawick authored Feb 08, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907723 13f79535-47bb-0310-9956-ffa450edef68
```
  e472cac0
Feb 07, 2010
- Style guides at httpd are pretty clear, macro values are UPCASE, please? · bab05ec4
  William A. Rowe Jr authored Feb 07, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907472 13f79535-47bb-0310-9956-ffa450edef68
```
  bab05ec4
Feb 06, 2010

Update. · 669e495f

Lucien Gentis authored Feb 06, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907253 13f79535-47bb-0310-9956-ffa450edef68

669e495f

Note that wildcards in Include directives are not allowed in the · 0ec81caa

Daniel Earl Poirier authored Feb 06, 2010

directory part of the path, only the filename.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907215 13f79535-47bb-0310-9956-ffa450edef68

0ec81caa

Feb 05, 2010

Make the error message correspond to the code, which sets APR_SO_NONBLOCK. · 81ac0fc1
Graham Leggett authored Feb 05, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907105 13f79535-47bb-0310-9956-ffa450edef68
```
81ac0fc1

Print directive name in error message. · e445c16a

Stefan Fritsch authored Feb 05, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@907012 13f79535-47bb-0310-9956-ffa450edef68

e445c16a

Update transforms. · 89dee9c0

Daniel Earl Poirier authored Feb 05, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906780 13f79535-47bb-0310-9956-ffa450edef68

89dee9c0

Be specific about which environment variables can be used in · a99da4f8

Daniel Earl Poirier authored Feb 05, 2010

expansions in the server configuration file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906779 13f79535-47bb-0310-9956-ffa450edef68

a99da4f8

Feb 04, 2010

Resolve cut-n-paste typo from prior commit · 4634ace6

William A. Rowe Jr authored Feb 04, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906625 13f79535-47bb-0310-9956-ffa450edef68

4634ace6

Finish libserf magic · 4dbd63aa

William A. Rowe Jr authored Feb 04, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906612 13f79535-47bb-0310-9956-ffa450edef68

4dbd63aa

Add ap_process_request_after_handler to the exported list for mod_serf · 4f3ddc67
William A. Rowe Jr authored Feb 04, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906606 13f79535-47bb-0310-9956-ffa450edef68
```
4f3ddc67

worker: don't report server has reached MaxClients until it does. · 99bc1a36

Daniel Earl Poirier authored Feb 04, 2010

Add warning when within MinSpareThreads.

PR: 46996


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906535 13f79535-47bb-0310-9956-ffa450edef68

99bc1a36

Update transformations. · c907c891

Joe Orton authored Feb 04, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906495 13f79535-47bb-0310-9956-ffa450edef68

c907c891

* docs/manual/mod/mod_ssl.xml: Document the supported r->notes values. · 4fa762fa
Joe Orton authored Feb 04, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906493 13f79535-47bb-0310-9956-ffa450edef68
```
4fa762fa

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup): Only set the · 6c73f826

Joe Orton authored Feb 04, 2010

"ssl-secure-reneg" note if the server supports secure negotiation,
so that a '0' value is unambiguous.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906491 13f79535-47bb-0310-9956-ffa450edef68

6c73f826

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup): Set · 79851c26

Joe Orton authored Feb 04, 2010

an "ssl-secure-reneg" note indicating whether the client
supports the secure renegotiation TLS extension.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906485 13f79535-47bb-0310-9956-ffa450edef68

79851c26

* docs/manual/mod/mod_ssl.xml: Warn more clearly about · 672180f8

Joe Orton authored Feb 04, 2010

the security impact of SSLInsecureRenegotiation.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906454 13f79535-47bb-0310-9956-ffa450edef68

672180f8

Folks, this is not C++. Please, pay attention to your patches · 20968a68

William A. Rowe Jr authored Feb 04, 2010

and don't leave trunk deliberately broken.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906357 13f79535-47bb-0310-9956-ffa450edef68

20968a68

Add mod_serf.dsp at last, based on the patch available in; · aa8fca46

William A. Rowe Jr authored Feb 04, 2010

http://people.apache.org/~wrowe/fixserf-win32-0.3.0.patch
although there is trouble here, and pollset troubleshooting ahead.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906327 13f79535-47bb-0310-9956-ffa450edef68

aa8fca46

Feb 03, 2010

Remove reference to the Match directive, which was removed in r726082 / · ce8efc57

Stefan Fritsch authored Feb 03, 2010

r728126.

PR: 46494
Submitted by:  Bob Ionescu


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906266 13f79535-47bb-0310-9956-ffa450edef68

ce8efc57

Fix CHANGES entry to reflect change in r904853 · 30a1ce13

Stefan Fritsch authored Feb 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906261 13f79535-47bb-0310-9956-ffa450edef68

30a1ce13

Add docstring for ap_pregsub() · 9c7ee1ac

Stefan Fritsch authored Feb 03, 2010

PR: 48265
Submitted by: Peter Poeml


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906242 13f79535-47bb-0310-9956-ffa450edef68

9c7ee1ac

Regenerate docs. · 37656c1c

Joe Orton authored Feb 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906077 13f79535-47bb-0310-9956-ffa450edef68

37656c1c

* mod_ssl.xml: Document the SSL_SECURE_RENEG envvar, and SSLInsecureRenegotiation. · bef349ae
Joe Orton authored Feb 03, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906067 13f79535-47bb-0310-9956-ffa450edef68
```
bef349ae

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl): Add · e7239fc4

Joe Orton authored Feb 03, 2010

  SSL_SECURE_RENEG variable to indicate support for secure reneg.

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup_vars): Export
  SSL_SECURE_RENEG in the default set of variable.s


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906057 13f79535-47bb-0310-9956-ffa450edef68

e7239fc4

New releases of OpenSSL will only allow secure renegotiation by · 20ebf99c

Joe Orton authored Feb 03, 2010

default.  Add an "SSLInsecureRenegotiation" directive to enable
renegotiation against unpatched clients, to ease transition:

* modules/ssl/ssl_private.h (struct SSLSrvConfigRec): Add
  insecure_reneg field.

* modules/ssl/ssl_engine_config.c (ssl_config_server_new,
  ssl_config_server_merge): Handle the insecure_reneg flag.
  (ssl_cmd_SSLInsecureRenegotiation): New function.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Set the
  SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION option if insecure_reneg is
  enabled.

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Log level of
  support for secure reneg.

* modules/ssl/mod_ssl.c: Add the directive definition.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906039 13f79535-47bb-0310-9956-ffa450edef68

20ebf99c

Feb 02, 2010

* Use loglevel value for parsing · fb453f41

Ruediger Pluem authored Feb 02, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905546 13f79535-47bb-0310-9956-ffa450edef68

fb453f41

mod_session: Session expiry was being initialised, but not updated · 85f2731d

Graham Leggett authored Feb 02, 2010

on each session save, resulting in timed out sessions when there
should not have been. Fixed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905490 13f79535-47bb-0310-9956-ffa450edef68

85f2731d

Update transformations. · 5da4e391

Graham Leggett authored Feb 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905482 13f79535-47bb-0310-9956-ffa450edef68

5da4e391

Feb 01, 2010

replace duplicate code with new function ap_parse_log_level() · f7b70dab
Stefan Fritsch authored Feb 01, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905454 13f79535-47bb-0310-9956-ffa450edef68
```
f7b70dab

mod_log_config: Add the R option to log the handler used within the · 9e61eb23

Graham Leggett authored Feb 01, 2010

request.
Submitted by: Christian Folini <christian.folini netnea com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905420 13f79535-47bb-0310-9956-ffa450edef68

9e61eb23

Allow fine control over the removal of Last-Modified and ETag headers · 5d4f3cd9

Graham Leggett authored Feb 01, 2010

within the INCLUDES filter, making it possible to cache responses if
desired. Fix the default value of the SSIAccessEnable directive.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905406 13f79535-47bb-0310-9956-ffa450edef68

5d4f3cd9

Jan 31, 2010
- Updates for french files, and a little typo in manual/mod/mod_autoindex.xml. · 084bc75c
  Lucien Gentis authored Jan 31, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905041 13f79535-47bb-0310-9956-ffa450edef68
```
  084bc75c