- 07 Nov, 2009 1 commit
-
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833721 13f79535-47bb-0310-9956-ffa450edef68
-
- 06 Nov, 2009 7 commits
-
-
Sander Temme authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833596 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
around bitwise-and. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833593 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
otherwise the pollset-remove can crash (at least with select-based poll, since fd is now -1) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833583 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
Reject client-initiated renegotiations; this is sufficient to prevent the attack for any configuration which does not require renegotiation due to per-directory/per-location access control configuration. Configuration with per-directory/per-location access control requirements (such as "SSLVerifyClient require") are still vulnerable to CVE-2009-3555 with this patch applied (if using OpenSSL <= 0.9.8k). * modules/ssl/ssl_private.h (SSLConnRec): Add reneg_state field. (ssl_callback_Info): Renamed from ssl_callback_LogTracingState. * modules/ssl/ssl_engine_init.c (ssl_init_ctx_callbacks): Install the (renamed) info callback unconditionally. * modules/ssl/ssl_engine_io.c (ssl_filter_ctx_t): Add config pointer to SSLConnRec. (bio_filter_out_write, bio_filter_in_read): Fail with APR_ECONNABORTED if the reneg state is set to RENEG_ABORT. * modules/ssl/ssl_engine_kernel.c (log_tracing_state): Factored out of ssl_callback_LogTracingState. (ssl_callback_Info): New function. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833582 13f79535-47bb-0310-9956-ffa450edef68
-
Sander Temme authored
Reviewed by: sctemme, niq, rpluem git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833477 13f79535-47bb-0310-9956-ffa450edef68
-
Lucien Gentis authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833393 13f79535-47bb-0310-9956-ffa450edef68
-
Tony Stevenson authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833322 13f79535-47bb-0310-9956-ffa450edef68
-
- 05 Nov, 2009 13 commits
-
-
Brian McCallister authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833141 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833139 13f79535-47bb-0310-9956-ffa450edef68
-
Lucien Gentis authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833090 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@833061 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832977 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
can't possibly work, since it contains a fully-qualified URL in the RewriteRule. Feel free to revert iff you can provide a description and a functional rule. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832976 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832973 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832971 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
because that's such an arbitrary designation, and I'm afraid that it will become a catch-all. So if someone wants to do this differently, I certainly won't object. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832962 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
REMOTE_IDENT. Browsers stopped sending REMOTE_IDENT 15 years ago, and even when they did, it wasn't trustworthy. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832952 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832943 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
Please also note that this rule refers to before and after 1.3b6. That's embarrassing. It would be great if someone would apply the relevant changes to the 2.2 and 2.0 docs also. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832935 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832923 13f79535-47bb-0310-9956-ffa450edef68
-
- 04 Nov, 2009 13 commits
-
-
Joe Orton authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832920 13f79535-47bb-0310-9956-ffa450edef68
-
Eric Covener authored
counterintuitively in per-directory context. (lots of mysterious no-op rulesets due to ^/ in htaccess) Tweak QSA text. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832914 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
for natural order string sorting. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832910 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
of MPMs of some type (threaded or share-able or enabled), as suggested by jorton rename some MPM-related variables git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832907 13f79535-47bb-0310-9956-ffa450edef68
-
Brian McCallister authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832905 13f79535-47bb-0310-9956-ffa450edef68
-
Brian McCallister authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832901 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832899 13f79535-47bb-0310-9956-ffa450edef68
-
Joe Orton authored
lazy variables, courtesy of LLVM scan-build. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832886 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832859 13f79535-47bb-0310-9956-ffa450edef68
-
Richard Bowen authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832826 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
as shared modules. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832778 13f79535-47bb-0310-9956-ffa450edef68
-
Eric Covener authored
Additional rewording of vhost details. PR48125 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832759 13f79535-47bb-0310-9956-ffa450edef68
-
Noirin Plunkett authored
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832627 13f79535-47bb-0310-9956-ffa450edef68
-
- 03 Nov, 2009 6 commits
-
-
Jeff Trawick authored
or not it can run as a shared library git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832621 13f79535-47bb-0310-9956-ffa450edef68
-
Guenter Knauf authored
only use if HAVE_OCSP is not yet defined as suggested by rpluem. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832572 13f79535-47bb-0310-9956-ffa450edef68
-
Sander Temme authored
number check. Use a type safe STACK. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832496 13f79535-47bb-0310-9956-ffa450edef68
-
Daniel Earl Poirier authored
version 1.5.8. PR: 48093 Submitted by: Brad Hards Reviewed by: poirier git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832442 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
an MPM as a shared shared or dynamic module, primarily using the APACHE_MPM_MODULE() function. --enable-mpms-shared now builds/installs the MPMs as dynamic modules. (But no LoadModule directives are added.) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832434 13f79535-47bb-0310-9956-ffa450edef68
-
Jeff Trawick authored
. improve messages . check for inconsistent settings git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@832429 13f79535-47bb-0310-9956-ffa450edef68
-