Skip to content
  1. Dec 15, 2008
  2. Dec 12, 2008
  3. Dec 09, 2008
    • Joe Orton's avatar
      Improve mod_ssl's environment variable extraction to correctly handle · 514cab60
      Joe Orton authored
      DNs with duplicate tags:
      
      * modules/ssl/ssl_engine_vars.c:
        Augment the ssl_var_lookup_ssl_cert_dn_rec table with a flag
        to indicate whether RDNs of the given NID should be extracted
        to the environment.
        (extract_dn, modssl_var_extract_dns): New functions.
      
      * modules/ssl/ssl_private.h (modssl_var_extract_dns): Add prototype.
      
      * modules/ssl/ssl_engine_kernel.c: Remove SSL_*_DN_ from the list
        of variables to insert into the environment.
        (ssl_hook_Fixup): Use modssl_var_extract_dns to insert the
        SSL_*_DN_ variables efficiently and accurately, handling
        certs with duplicate RDN tags correctly.
      
      PR: 45875
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@724717 13f79535-47bb-0310-9956-ffa450edef68
      514cab60
  4. Dec 07, 2008
  5. Dec 05, 2008
  6. Dec 03, 2008
  7. Dec 02, 2008
  8. Dec 01, 2008
  9. Nov 29, 2008
  10. Nov 26, 2008
  11. Nov 24, 2008
  12. Nov 16, 2008
  13. Nov 15, 2008
  14. Nov 14, 2008
  15. Nov 11, 2008
  16. Nov 10, 2008
  17. Nov 09, 2008
  18. Nov 06, 2008
  19. Nov 02, 2008
  20. Nov 01, 2008
  21. Oct 31, 2008
  22. Oct 29, 2008
    • Nick Kew's avatar
      Introduce modules/system, and mod_unixd.c · 97b31524
      Nick Kew authored
      mod_unixd.c is only os/unix/unixd.c, turned into a module.
      (or more accurately, an ugly hack).  Work in progress, and the
      old unixd will have to go once the module build stuff is in place.
      
      This re-introduces some of the unixd stuff (set user, group and chroot)
      to mpm_simple, and should work equally well with existing MPMs.
      It also paves the way for alternative privilege management schemes,
      which can be implemented in alternative modules: this´ll be
      necessary to run mpm_simple on non-unix-family platforms, and
      of interest for alternative Unix implementations.  By relegating
      everything to a child_init hook, we can mix-and-match, though
      weĺl need to add a regime that prevents just going right ahead
      with nothing and running as root.
      
      Round tuits permitting, we should be able to simplify unixd.h too,
      and look towards eliminating it.
      
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@708935 13f79535-47bb-0310-9956-ffa450edef68
      97b31524
  23. Oct 22, 2008