Commits · 5162a4383848bae3a650dcdb2e892bd453045187 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Oct 25, 2009

CharsetOptions NoImplicitAdd wasn't referenced during insert_filter callback. · 5162a438

Eric Covener authored Oct 25, 2009

Doc: Correct defaults, charset_lite inserts itself by as soon as you tell it about
input and output character sets.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829664 13f79535-47bb-0310-9956-ffa450edef68

5162a438

CharsetOptions NoImplicitAdd makes us fall through to the "unknown option" clause · b2ccef3c

Eric Covener authored Oct 25, 2009

due to breaking "else if", making NoImplicitAdd unconfigurable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829657 13f79535-47bb-0310-9956-ffa450edef68

b2ccef3c

Add support for OCSP "stapling": · d4e4d46d

Joe Orton authored Oct 25, 2009

* modules/ssl/ssl_util_stapling.c: New file.

* modules/ssl/config.m4, modules/ssl/mod_ssl.dsp: Build it.

* modules/ssl/ssl_toolkit_compat.h: Define HAVE_OCSP_STAPLING if
  OpenSSL is of suitable version (>= 0.9.8g) and capability (TLS
  extension support enabled).

* modules/ssl/mod_ssl.c: Add config directives.

* modules/ssl/ssl_private.h: Add prototypes for new functions.
  (SSLModConfigRec): Add fields for stapling socache instance and
  associated mutex.
  (modssl_ctx_t): Add config fields for stapling.

* modules/ssl/ssl_engine_init.c (ssl_init_Module, ssl_init_Child):
  Call the stapling initialization functions.

* modules/ssl/ssl_engine_config.c: Add config hooks.

* modules/ssl/ssl_scache.c: Create, initialize and destroy the socache
  instance for OCSP responses.

Submitted by: Dr Stephen Henson <shenson oss-institute.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829619 13f79535-47bb-0310-9956-ffa450edef68

d4e4d46d

Add a note about the DPI rewrite flag, available from 2.2.12 only. · 8d738e71
Vincent Deffontaines authored Oct 25, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829520 13f79535-47bb-0310-9956-ffa450edef68
```
8d738e71

Oct 24, 2009

Fix brown-paper-bag bug. · 2a72182a

Stefan Fritsch authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829431 13f79535-47bb-0310-9956-ffa450edef68

2a72182a

Only allow parens in filename if cachesize is given. Return error otherwise · b597d62d

Stefan Fritsch authored Oct 24, 2009

to catch missing parens.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829362 13f79535-47bb-0310-9956-ffa450edef68

b597d62d

Verify that password has been truncated before printing a warning. · a1c2bfd2
Stefan Fritsch authored Oct 24, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829355 13f79535-47bb-0310-9956-ffa450edef68
```
a1c2bfd2

New .fr translation for mod_deflate doc. · 04797145

Vincent Deffontaines authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829329 13f79535-47bb-0310-9956-ffa450edef68

04797145

New .fr translation for mod_expires doc. · 3c0e5ec3

Vincent Deffontaines authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829309 13f79535-47bb-0310-9956-ffa450edef68

3c0e5ec3

Oct 23, 2009

829271 was incomplete. This fixes it. · 9cd72d11

Vincent Deffontaines authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829272 13f79535-47bb-0310-9956-ffa450edef68

9cd72d11

New .fr translation for mod_sed doc. · a66ddf5e

Vincent Deffontaines authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829271 13f79535-47bb-0310-9956-ffa450edef68

a66ddf5e

update transformation · 1e0cf23d

Andre Malo authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829251 13f79535-47bb-0310-9956-ffa450edef68

1e0cf23d

svn:eol-style = native · f5721f15

Andre Malo authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829212 13f79535-47bb-0310-9956-ffa450edef68

f5721f15

Only parse cache size in parens at the end of the string. Fixes SSLSessionCache · b43a1802

Stefan Fritsch authored Oct 23, 2009

directive mis-parsing parens in pathname.

PR: 47945


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829185 13f79535-47bb-0310-9956-ffa450edef68

b43a1802

Print a warning if a password is truncated by crypt. · b5c47a0b

Stefan Fritsch authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829162 13f79535-47bb-0310-9956-ffa450edef68

b5c47a0b

Oct 22, 2009

New .fr translations · 0adfd4a7

Vincent Deffontaines authored Oct 22, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@828856 13f79535-47bb-0310-9956-ffa450edef68

0adfd4a7

Oct 19, 2009

htpasswd: Improve out of disk space handling · 2c9a9d53

Stefan Fritsch authored Oct 19, 2009

PR: 30877


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826822 13f79535-47bb-0310-9956-ffa450edef68

2c9a9d53

update transformations · 89031ddc

Stefan Fritsch authored Oct 19, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826808 13f79535-47bb-0310-9956-ffa450edef68

89031ddc

Change the default algorithm for htpasswd to MD5 on all platforms. Crypt · 5a827336

Stefan Fritsch authored Oct 19, 2009

with its 8 character limit is not useful anymore.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826805 13f79535-47bb-0310-9956-ffa450edef68

5a827336

* Reduce memory consumption when processing very long lines by at least · 9c175a59

Ruediger Pluem authored Oct 19, 2009

  doubleing the size of the new buffer each time.

PR: 48024
Submitted by: Basant Kumar Kukreja <basant.kukreja sun.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826772 13f79535-47bb-0310-9956-ffa450edef68

9c175a59

Oct 18, 2009

Use the new ap_update_child_status_from_conn() to put the client IP into the · 6424ae6f

Stefan Fritsch authored Oct 18, 2009

scoreboard (and show it in mod_status) as soon as we start reading the request.

Empty the vhost and request fields in ap_update_child_status_from_conn so that
mod_status does not display outdated data if the connection closes without
the request being completely read.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826530 13f79535-47bb-0310-9956-ffa450edef68

6424ae6f

Actually use the whole buffer for reading. · a5cc3811

Stefan Fritsch authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826528 13f79535-47bb-0310-9956-ffa450edef68

a5cc3811

update transformation · 2a26da03

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826524 13f79535-47bb-0310-9956-ffa450edef68

2a26da03

fix context list tokens · cec68461

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826523 13f79535-47bb-0310-9956-ffa450edef68

cec68461

Fix some more overflows spotted by Ruediger Pluem · 1c271959

Stefan Fritsch authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826520 13f79535-47bb-0310-9956-ffa450edef68

1c271959

svn:eol-style = native · 0e8e45e7

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826519 13f79535-47bb-0310-9956-ffa450edef68

0e8e45e7

detab · 7e936753

Stefan Fritsch authored Oct 18, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826507 13f79535-47bb-0310-9956-ffa450edef68

7e936753

htdigest: Fix possible overflow in command line processing. htdigest is not · 4bedda4b

Stefan Fritsch authored Oct 18, 2009

supposed to be suid save, therefore not treated as a security issue.

CVE-2005-1344
Submitted by: Adam Conrad
Reviewed by: Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826506 13f79535-47bb-0310-9956-ffa450edef68

4bedda4b

ab: Fix segfault in case the argument for -n is a very large number. · d55490d0

Stefan Fritsch authored Oct 18, 2009

PR: 47178
Submitted by: Philipp Hagemeister <oss phihag.de>
Reviewed by: Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826497 13f79535-47bb-0310-9956-ffa450edef68

d55490d0

Oct 17, 2009

Update. · 9537cd50

Lucien Gentis authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826268 13f79535-47bb-0310-9956-ffa450edef68

9537cd50

New .fr translation for mod_cache trunk doc · dcca60e5

Vincent Deffontaines authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826211 13f79535-47bb-0310-9956-ffa450edef68

dcca60e5

update transformation · ac2654ab

Nilgun Belma Buguner authored Oct 17, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826166 13f79535-47bb-0310-9956-ffa450edef68

ac2654ab

update for sync with English docs. · 18d19e6d

Nilgun Belma Buguner authored Oct 17, 2009

Translated by: Nilgün Belma Bugüner <nilgun belgeler.org>
Reviewed by: Orhan Berent <berent belgeler.org>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826165 13f79535-47bb-0310-9956-ffa450edef68

18d19e6d

fix validation error · 0b32efb9

Nilgun Belma Buguner authored Oct 17, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826164 13f79535-47bb-0310-9956-ffa450edef68

0b32efb9

commented out non-existing directory. · 89939f29

Guenter Knauf authored Oct 17, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826161 13f79535-47bb-0310-9956-ffa450edef68

89939f29

Oct 16, 2009

A handful of new french translations for trunk docs. · 483ed7d8
Vincent Deffontaines authored Oct 16, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826124 13f79535-47bb-0310-9956-ffa450edef68
```
483ed7d8

mention that "Header onsuccess" is the default and reword the description · 1a565abf

Eric Covener authored Oct 16, 2009

of "Header always" to talk less about implementation details and more about
the FAQ of redirects or 401's.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826005 13f79535-47bb-0310-9956-ffa450edef68

1a565abf

Adds the frequently-requested example of relaxing authentication for a · 2cd63ce1

Richard Bowen authored Oct 16, 2009

subdirectory. Whether this is actually a *good* idea is left as an
exercise for the reader.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825898 13f79535-47bb-0310-9956-ffa450edef68

2cd63ce1

Oct 14, 2009

* Update transformation · c4b9fbff

Ruediger Pluem authored Oct 14, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825230 13f79535-47bb-0310-9956-ffa450edef68

c4b9fbff

Rename ReqTimeout into RequestTimeout, to be more in line with other · 2950738a

Stefan Fritsch authored Oct 14, 2009

directives.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@825177 13f79535-47bb-0310-9956-ffa450edef68

2950738a