Commits · 5c7adb368eb841f54a575a95af68c33205b91164 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

28 Oct, 2009 5 commits

* modules/ssl/ssl_toolkit_compat.h: Fold #if checks to enable OCSP · 5c7adb36

Joe Orton authored Oct 28, 2009

  stapling support, and also check that HAVE_OCSP is defined.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830554 13f79535-47bb-0310-9956-ffa450edef68

5c7adb36

* modules/ssl/ssl_util_stapling.c (stapling_cache_response): Use · 5d9a6b80

Joe Orton authored Oct 28, 2009

  apr_time_now() rather than time().

Reported by: rpluem.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830551 13f79535-47bb-0310-9956-ffa450edef68

5d9a6b80

* modules/ssl/ssl_util_stapling.c (stapling_cb): Use mySrvFromConn(), · 56aa33bb

Joe Orton authored Oct 28, 2009

  thanks to rpluem.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830546 13f79535-47bb-0310-9956-ffa450edef68

56aa33bb

* module/ssl/ssl_util_stapling.c: Style fixes, no functional change. · ea39383f
Joe Orton authored Oct 28, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830544 13f79535-47bb-0310-9956-ffa450edef68
```
ea39383f

Fix a lot of doxygen warnings. Thanks to Brad Hards for the patch. · d1c7acf7

Daniel Earl Poirier authored Oct 28, 2009

I added a few more fixes, and there are still more that might
need a doxygen expert.

PR: 48061
Submitted by: Brad Hards
Reviewed by: poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830527 13f79535-47bb-0310-9956-ffa450edef68

d1c7acf7

27 Oct, 2009 9 commits

Add SNI to the glossary · 54b35348

Daniel Earl Poirier authored Oct 27, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830307 13f79535-47bb-0310-9956-ffa450edef68

54b35348

Update transforms · f9a9db07

Daniel Earl Poirier authored Oct 27, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830301 13f79535-47bb-0310-9956-ffa450edef68

f9a9db07

Update the SSL FAQ with regard to Server Name Indication. · 57f88ccf
Daniel Earl Poirier authored Oct 27, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830296 13f79535-47bb-0310-9956-ffa450edef68
```
57f88ccf

fixed dav_hooks_repository_fs struct member order, fixed comments. · 07dc39b3

Guenter Knauf authored Oct 27, 2009

Submitted by brian brianfrance.com.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830284 13f79535-47bb-0310-9956-ffa450edef68

07dc39b3

Update transforms · 789a74c7

Daniel Earl Poirier authored Oct 27, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830259 13f79535-47bb-0310-9956-ffa450edef68

789a74c7

Document that there's a limit on the length of lines in the configuration file. · 5472111d
Daniel Earl Poirier authored Oct 27, 2009
```
PR: 45888


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830237 13f79535-47bb-0310-9956-ffa450edef68
```
5472111d

fixed indents. · b45ed466

Guenter Knauf authored Oct 27, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830175 13f79535-47bb-0310-9956-ffa450edef68

b45ed466

changed property. · 759eaa13

Guenter Knauf authored Oct 27, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830172 13f79535-47bb-0310-9956-ffa450edef68

759eaa13

converted tabs, removed trailing spaces. · b95dc558

Guenter Knauf authored Oct 27, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@830045 13f79535-47bb-0310-9956-ffa450edef68

b95dc558

26 Oct, 2009 1 commit

CompatEnvVars does not exist anymore · 00b3bf22

Stefan Fritsch authored Oct 26, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829921 13f79535-47bb-0310-9956-ffa450edef68

00b3bf22

25 Oct, 2009 5 commits

Hint about disabling translation in subdirectories by setting matching, · 2bcb10ec

Eric Covener authored Oct 25, 2009

but not necessarily correct, Source and Default charsets.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829667 13f79535-47bb-0310-9956-ffa450edef68

2bcb10ec

CharsetOptions NoImplicitAdd wasn't referenced during insert_filter callback. · 5162a438

Eric Covener authored Oct 25, 2009

Doc: Correct defaults, charset_lite inserts itself by as soon as you tell it about
input and output character sets.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829664 13f79535-47bb-0310-9956-ffa450edef68

5162a438

CharsetOptions NoImplicitAdd makes us fall through to the "unknown option" clause · b2ccef3c

Eric Covener authored Oct 25, 2009

due to breaking "else if", making NoImplicitAdd unconfigurable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829657 13f79535-47bb-0310-9956-ffa450edef68

b2ccef3c

Add support for OCSP "stapling": · d4e4d46d

Joe Orton authored Oct 25, 2009

* modules/ssl/ssl_util_stapling.c: New file.

* modules/ssl/config.m4, modules/ssl/mod_ssl.dsp: Build it.

* modules/ssl/ssl_toolkit_compat.h: Define HAVE_OCSP_STAPLING if
  OpenSSL is of suitable version (>= 0.9.8g) and capability (TLS
  extension support enabled).

* modules/ssl/mod_ssl.c: Add config directives.

* modules/ssl/ssl_private.h: Add prototypes for new functions.
  (SSLModConfigRec): Add fields for stapling socache instance and
  associated mutex.
  (modssl_ctx_t): Add config fields for stapling.

* modules/ssl/ssl_engine_init.c (ssl_init_Module, ssl_init_Child):
  Call the stapling initialization functions.

* modules/ssl/ssl_engine_config.c: Add config hooks.

* modules/ssl/ssl_scache.c: Create, initialize and destroy the socache
  instance for OCSP responses.

Submitted by: Dr Stephen Henson <shenson oss-institute.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829619 13f79535-47bb-0310-9956-ffa450edef68

d4e4d46d

Add a note about the DPI rewrite flag, available from 2.2.12 only. · 8d738e71
Vincent Deffontaines authored Oct 25, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829520 13f79535-47bb-0310-9956-ffa450edef68
```
8d738e71

24 Oct, 2009 5 commits

Fix brown-paper-bag bug. · 2a72182a

Stefan Fritsch authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829431 13f79535-47bb-0310-9956-ffa450edef68

2a72182a

Only allow parens in filename if cachesize is given. Return error otherwise · b597d62d

Stefan Fritsch authored Oct 24, 2009

to catch missing parens.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829362 13f79535-47bb-0310-9956-ffa450edef68

b597d62d

Verify that password has been truncated before printing a warning. · a1c2bfd2
Stefan Fritsch authored Oct 24, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829355 13f79535-47bb-0310-9956-ffa450edef68
```
a1c2bfd2

New .fr translation for mod_deflate doc. · 04797145

Vincent Deffontaines authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829329 13f79535-47bb-0310-9956-ffa450edef68

04797145

New .fr translation for mod_expires doc. · 3c0e5ec3

Vincent Deffontaines authored Oct 24, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829309 13f79535-47bb-0310-9956-ffa450edef68

3c0e5ec3

23 Oct, 2009 6 commits

829271 was incomplete. This fixes it. · 9cd72d11

Vincent Deffontaines authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829272 13f79535-47bb-0310-9956-ffa450edef68

9cd72d11

New .fr translation for mod_sed doc. · a66ddf5e

Vincent Deffontaines authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829271 13f79535-47bb-0310-9956-ffa450edef68

a66ddf5e

update transformation · 1e0cf23d

Andre Malo authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829251 13f79535-47bb-0310-9956-ffa450edef68

1e0cf23d

svn:eol-style = native · f5721f15

Andre Malo authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829212 13f79535-47bb-0310-9956-ffa450edef68

f5721f15

Only parse cache size in parens at the end of the string. Fixes SSLSessionCache · b43a1802

Stefan Fritsch authored Oct 23, 2009

directive mis-parsing parens in pathname.

PR: 47945


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829185 13f79535-47bb-0310-9956-ffa450edef68

b43a1802

Print a warning if a password is truncated by crypt. · b5c47a0b

Stefan Fritsch authored Oct 23, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@829162 13f79535-47bb-0310-9956-ffa450edef68

b5c47a0b

22 Oct, 2009 1 commit

New .fr translations · 0adfd4a7

Vincent Deffontaines authored Oct 22, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@828856 13f79535-47bb-0310-9956-ffa450edef68

0adfd4a7

19 Oct, 2009 4 commits

htpasswd: Improve out of disk space handling · 2c9a9d53

Stefan Fritsch authored Oct 19, 2009

PR: 30877


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826822 13f79535-47bb-0310-9956-ffa450edef68

2c9a9d53

update transformations · 89031ddc

Stefan Fritsch authored Oct 19, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826808 13f79535-47bb-0310-9956-ffa450edef68

89031ddc

Change the default algorithm for htpasswd to MD5 on all platforms. Crypt · 5a827336

Stefan Fritsch authored Oct 19, 2009

with its 8 character limit is not useful anymore.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826805 13f79535-47bb-0310-9956-ffa450edef68

5a827336

* Reduce memory consumption when processing very long lines by at least · 9c175a59

Ruediger Pluem authored Oct 19, 2009

  doubleing the size of the new buffer each time.

PR: 48024
Submitted by: Basant Kumar Kukreja <basant.kukreja sun.com>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826772 13f79535-47bb-0310-9956-ffa450edef68

9c175a59

18 Oct, 2009 4 commits

Use the new ap_update_child_status_from_conn() to put the client IP into the · 6424ae6f

Stefan Fritsch authored Oct 18, 2009

scoreboard (and show it in mod_status) as soon as we start reading the request.

Empty the vhost and request fields in ap_update_child_status_from_conn so that
mod_status does not display outdated data if the connection closes without
the request being completely read.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826530 13f79535-47bb-0310-9956-ffa450edef68

6424ae6f

Actually use the whole buffer for reading. · a5cc3811

Stefan Fritsch authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826528 13f79535-47bb-0310-9956-ffa450edef68

a5cc3811

update transformation · 2a26da03

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826524 13f79535-47bb-0310-9956-ffa450edef68

2a26da03

fix context list tokens · cec68461

Andre Malo authored Oct 18, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@826523 13f79535-47bb-0310-9956-ffa450edef68

cec68461