Commits · 53e9895b087c5476e60705ea80c0f359113440f6 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

01 Nov, 2015 2 commits

update mod_ssl.html.en transformation · 53e9895b

Kaspar Brand authored Nov 01, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711730 13f79535-47bb-0310-9956-ffa450edef68

53e9895b

For the "SSLStaplingReturnResponderErrors off" case, make sure to only · 0781f242

Kaspar Brand authored Nov 01, 2015

staple responses with certificate status "good". Also avoids including
inaccurate responses when the OCSP responder is not completely up
to date in terms of the CA-issued certificates (and provides interim
"unknown" or "extended revoked" [RFC 6960] status replies).

Log a certificate status other than "good" in stapling_check_response().

Propagate the "ok" status from stapling_check_response() back via both
stapling_renew_response() and get_and_check_cached_response() to the
callback code in stapling_cb(), enabling the decision whether to include
or skip the response.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711728 13f79535-47bb-0310-9956-ffa450edef68

0781f242

31 Oct, 2015 1 commit

Follow up to r1709008: CHANGES entry. · fc95e078

Yann Ylavic authored Oct 31, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711648 13f79535-47bb-0310-9956-ffa450edef68

fc95e078

30 Oct, 2015 6 commits

Constify + save a few bytes in conf pool · 8a6f4c1f

Christophe Jaillet authored Oct 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711553 13f79535-47bb-0310-9956-ffa450edef68

8a6f4c1f

xform · 9054098e

Christophe Jaillet authored Oct 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711548 13f79535-47bb-0310-9956-ffa450edef68

9054098e

Fix a typo in doc as spotted by ceving in online doc · 64553aa8

Christophe Jaillet authored Oct 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711547 13f79535-47bb-0310-9956-ffa450edef68

64553aa8

improved h2c write performance · 2d09beb4

Stefan Eissing authored Oct 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711503 13f79535-47bb-0310-9956-ffa450edef68

2d09beb4

Fix crash in ap_mpm_pod_check call caused by NULL dereference of its parameter · 52566f75

Jan Kaluža authored Oct 30, 2015

when starting httpd as single process (httpd -X).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711479 13f79535-47bb-0310-9956-ffa450edef68

52566f75

fixing unbuffered output handling for h2c · 1adb7df9

Stefan Eissing authored Oct 30, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711451 13f79535-47bb-0310-9956-ffa450edef68

1adb7df9

29 Oct, 2015 2 commits

some tuning of buffer/write record sizes · d001a0c2

Stefan Eissing authored Oct 29, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711283 13f79535-47bb-0310-9956-ffa450edef68

d001a0c2

inserting needed flush buckets on master connections again, rewrite task queue... · 9f5317d8

Stefan Eissing authored Oct 29, 2015

inserting needed flush buckets on master connections again, rewrite task queue for better mem usage and less copying

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711235 13f79535-47bb-0310-9956-ffa450edef68

9f5317d8

28 Oct, 2015 4 commits

Generated doc changes · 45ad3bfb

Mike Rumph authored Oct 28, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711096 13f79535-47bb-0310-9956-ffa450edef68

45ad3bfb

Add compatibility note to mod_http2 doc · b9346ae4

Mike Rumph authored Oct 28, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711094 13f79535-47bb-0310-9956-ffa450edef68

b9346ae4

Generated doc changes · 2860b9b6

Mike Rumph authored Oct 28, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711090 13f79535-47bb-0310-9956-ffa450edef68

2860b9b6

http2 priority based scheduling of stream execution in each session · 62c2c6c4
Stefan Eissing authored Oct 28, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1711044 13f79535-47bb-0310-9956-ffa450edef68
```
62c2c6c4

27 Oct, 2015 2 commits

http2 TLS record size handling configuration, improved output write frequency · 42fe5bda
Stefan Eissing authored Oct 27, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710825 13f79535-47bb-0310-9956-ffa450edef68
```
42fe5bda

RFC2616 defines #rules as: · f5634846

Christophe Jaillet authored Oct 27, 2015

   #rule
      A construct "#" is defined, similar to "*", for defining lists of
      elements. The full form is "<n>#<m>element" indicating at least
      <n> and at most <m> elements, each separated by one or more commas
      (",") and OPTIONAL linear white space (LWS). This makes the usual
      form of lists very easy; a rule such as
         ( *LWS element *( *LWS "," *LWS element ))
      can be shown as
         1#element

It also defines Linear White Space (LWS) as:
   LWS            = [CRLF] 1*( SP | HT )


The actual implementation only accepts SP (Space) and not HT (Horizontal Tab) when parsing cache related header fields (i.e. "Vary", "Cache-Control" and "Pragma")

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710723 13f79535-47bb-0310-9956-ffa450edef68

f5634846

26 Oct, 2015 6 commits
- improvements in stream reset handling and early stream close · 954fefac
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710616 13f79535-47bb-0310-9956-ffa450edef68
```
  954fefac
- fix for null connection states · 562d3c18
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710597 13f79535-47bb-0310-9956-ffa450edef68
```
  562d3c18
- improved timeout handling on main connection, shorter lingering close, conn_state set before read · e86339f8
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710594 13f79535-47bb-0310-9956-ffa450edef68
```
  e86339f8
- lowering log level for common client connection issues · 4cdab795
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710584 13f79535-47bb-0310-9956-ffa450edef68
```
  4cdab795
- first request on master connection only reports more preferred protocols in Upgrade header · 4d1b1d06
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710583 13f79535-47bb-0310-9956-ffa450edef68
```
  4d1b1d06
- disabling protocol upgrades on slave connections · 89f2cad4
  Stefan Eissing authored Oct 26, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710572 13f79535-47bb-0310-9956-ffa450edef68
```
  89f2cad4
25 Oct, 2015 3 commits

Remove more backported items from trunk CHANGES. · 88fe0863

Rainer Jung authored Oct 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710437 13f79535-47bb-0310-9956-ffa450edef68

88fe0863

Remove backported items. · be1839a9

asf-sync-process authored Oct 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710436 13f79535-47bb-0310-9956-ffa450edef68

be1839a9

fixing compilation issue for older platform · 1946e251

Stefan Eissing authored Oct 25, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710419 13f79535-47bb-0310-9956-ffa450edef68

1946e251

24 Oct, 2015 3 commits
- block bcrypt on EBCDIC -- lots of ascii-isms in apr-util's bcrypt. · fca6cc6f
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710403 13f79535-47bb-0310-9956-ffa450edef68
```
  fca6cc6f
- followup to r1710380 -- refactored name and didn't have 'make depend' · 4c8c7d48
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710391 13f79535-47bb-0310-9956-ffa450edef68
```
  4c8c7d48
- Make the fix for fully qualifying REDIRECT_URL from PR#57785 opt-in. · e13061c1
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710380 13f79535-47bb-0310-9956-ffa450edef68
```
  e13061c1
23 Oct, 2015 3 commits

announce protocol choices on first request · ac9b04a3

Stefan Eissing authored Oct 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710231 13f79535-47bb-0310-9956-ffa450edef68

ac9b04a3

improvements in http2 connection and worker shutdown, hopefully addressing high load segfaults · 3944c1e9
Stefan Eissing authored Oct 23, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710185 13f79535-47bb-0310-9956-ffa450edef68
```
3944c1e9

changelog update re r1709995 · 47d3cb7c

Stefan Eissing authored Oct 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710141 13f79535-47bb-0310-9956-ffa450edef68

47d3cb7c

22 Oct, 2015 4 commits

core: follow up to r1710095. · c1894f6d

Yann Ylavic authored Oct 22, 2015

Simplify logic in check_pipeline(), and log unexpected errors.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710105 13f79535-47bb-0310-9956-ffa450edef68

c1894f6d

core: Limit to ten the number of tolerated empty lines between request, · f00bacf3

Yann Ylavic authored Oct 22, 2015

and consume them before the pipelining check to avoid possible response
delay when reading the next request without flushing.

Before this commit, the maximum number of empty lines was the same as
configured LimitRequestFields, defaulting to 100, which was way too much.
We now use a fixed/hard limit of 10 (DEFAULT_LIMIT_BLANK_LINES).

check_pipeline() is changed to check for (up to the limit) and comsume the
trailing [CR]LFs so that they won't be interpreted as pipelined requests,
otherwise we would block on the next read without flushing data, and hence
possibly delay pending response(s) until the next/real request comes in or
the keepalive timeout expires.

Finally, when the maximum number of empty line is reached in
read_request_line(), or that request line does not contains at least a method
and an (valid) URI, we can fail early and avoid some failure detected in
further processing.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710095 13f79535-47bb-0310-9956-ffa450edef68

f00bacf3

mod_http2: no longer messing with mod_ssl config in slave connections, special... · 9715f3be

Stefan Eissing authored Oct 22, 2015

mod_http2: no longer messing with mod_ssl config in slave connections, special RST_STREAM failures when 403 responses are due to prohibited TLS renegotiations

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710014 13f79535-47bb-0310-9956-ffa450edef68

9715f3be

mod_ssl: check request-server for TLS settings compatible to handshake server,... · 75b798df

Stefan Eissing authored Oct 22, 2015

mod_ssl: check request-server for TLS settings compatible to handshake server, allow request if equal, renegotiation checks: remember last used cipher_suite for optimizations, deny any regnegotiation in presence of master connection

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709995 13f79535-47bb-0310-9956-ffa450edef68

75b798df

20 Oct, 2015 3 commits

moved ssl handshake trigger from mod_http2 to new process_connection hook in mod_ssl · 2fdabd24
Stefan Eissing authored Oct 20, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709602 13f79535-47bb-0310-9956-ffa450edef68
```
2fdabd24

Bump version for the expression parser SSL fix. · 79e8e8a2

Graham Leggett authored Oct 20, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709596 13f79535-47bb-0310-9956-ffa450edef68

79e8e8a2

new ap_is_allowed_protocol() for testing configured protocols, added H2Upgrade... · 6cdf0c3e

Stefan Eissing authored Oct 20, 2015

new ap_is_allowed_protocol() for testing configured protocols, added H2Upgrade on/off directive, changed H2Direct default back to on when h2c is in Protocols

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709587 13f79535-47bb-0310-9956-ffa450edef68

6cdf0c3e

17 Oct, 2015 1 commit

Rebuil. · 004c9866

Lucien Gentis authored Oct 17, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709173 13f79535-47bb-0310-9956-ffa450edef68

004c9866