Commits · 681febc3cdfd9dab3d2fcb935ae920d93822252c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

06 Nov, 2010 2 commits

Replace ap_expr with a parser derived from mod_ssl's parser. Make mod_ssl use · d7507a50

Stefan Fritsch authored Nov 06, 2010

the new parser. Rework ap_expr's public interface and provide hooks for modules
to add variables and functions.

The Netware and Windows build files still need to be adjusted

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1032073 13f79535-47bb-0310-9956-ffa450edef68

d7507a50

Fix hook sorting for the pre_config hook. · cf9b7d7c

Stefan Fritsch authored Nov 06, 2010

Move modules/http/config2.m4 back to modules/http/config.m4, since this was
only done as work-around in r88887 for the broken hook-sorting.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1032002 13f79535-47bb-0310-9956-ffa450edef68

cf9b7d7c

05 Nov, 2010 5 commits

PR49823: Make the hardcoded default for AllowOverride match the default config -- None. · eddd6878
Eric Covener authored Nov 05, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1031776 13f79535-47bb-0310-9956-ffa450edef68
```
eddd6878

PR47765: ProxyPass and ProxyPassReverse should not be accepted in · d0a63fb5

Eric Covener authored Nov 05, 2010

Directory or Files sections.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1031758 13f79535-47bb-0310-9956-ffa450edef68

d0a63fb5

PR#47782: compiled-in default for MaxConnectionsPerChild is 10,000 vs the · cb2e0362

Eric Covener authored Nov 05, 2010

recommendations in the default conf and the manual.

Principle of least astonishment says to use a baked-in value of zero until
an admin asks for processes to exit this way.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1031657 13f79535-47bb-0310-9956-ffa450edef68

cb2e0362

PR50220: keep on chugging after EINTR in mod_proxy_connect · f88d6ccb

Eric Covener authored Nov 05, 2010



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1031551 13f79535-47bb-0310-9956-ffa450edef68

f88d6ccb

PR#47766 mod_autoindex directives not merged into sections with no autoindex directives. · 2e020ec9

Eric Covener authored Nov 05, 2010

This is due to an empty "opts" field looking just like one that has specified "None". None is always
alone, so simplify and test for equality.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1031430 13f79535-47bb-0310-9956-ffa450edef68

2e020ec9

03 Nov, 2010 1 commit

mod_cache: correctly parse quoted strings in cache headers. · 12bfd1b3

Nick Kew authored Nov 03, 2010

PR 50199


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1030299 13f79535-47bb-0310-9956-ffa450edef68

12bfd1b3

29 Oct, 2010 1 commit

Add an END flag to RewriteRule that acts like L=LAST but also prevents · feb480ec

Eric Covener authored Oct 29, 2010

further rounds of rewrite processing due to per-directory substitutions.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1028778 13f79535-47bb-0310-9956-ffa450edef68

feb480ec

24 Oct, 2010 3 commits

Make sure to always log an error if loading of CA certificates fails · b8c839ee

Stefan Fritsch authored Oct 24, 2010

PR: 40312
Submitted by: Paul Tiemann <issues apache org ourdetour com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026906 13f79535-47bb-0310-9956-ffa450edef68

b8c839ee

If an unknown Content-* header is received for a PUT request, we must not · bb8e6d1c

Stefan Fritsch authored Oct 24, 2010

ignore it but reply with 501 per RFC 2616 9.6.

PR: 42978


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026746 13f79535-47bb-0310-9956-ffa450edef68

bb8e6d1c

If a malformed Content-Range header is received for a PUT request, we · 5aad55fa

Stefan Fritsch authored Oct 24, 2010

must not use the supplied content per RFC 2616 14.16. Send 400 response
instead of ignoring the Content-Range.

PR: 49825


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026743 13f79535-47bb-0310-9956-ffa450edef68

5aad55fa

23 Oct, 2010 2 commits

Improve error message if client cert verification fails · ad6f56b2

Stefan Fritsch authored Oct 23, 2010

PR: 50093
Submitted by: Lassi Tuura <lat cern ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026703 13f79535-47bb-0310-9956-ffa450edef68

ad6f56b2

mod_proxy: Release the backend connection as soon as EOS is detected, · 27e786a3

Graham Leggett authored Oct 23, 2010

so the backend isn't forced to wait for the client to eventually
acknowledge the data.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026665 13f79535-47bb-0310-9956-ffa450edef68

27e786a3

22 Oct, 2010 1 commit

mod_proxy: Optimise ProxyPass within a Location so that it is stored · f7570b8f

Graham Leggett authored Oct 22, 2010

per-directory, and chosen during the location walk. Make ProxyPass
work correctly from within a LocationMatch.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1026184 13f79535-47bb-0310-9956-ffa450edef68

f7570b8f

20 Oct, 2010 2 commits

Be extra careful to only pass the main server config to · 166087cc

Stefan Fritsch authored Oct 20, 2010

ap_find_loaded_module_symbol. Fixes a segfault when using per-module
LogLevel on virtual host scope.

PR: 50117


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1025702 13f79535-47bb-0310-9956-ffa450edef68

166087cc

mod_proxy: Move the ProxyErrorOverride directive to have per directory scope. · 9eb0360e
Graham Leggett authored Oct 20, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1025666 13f79535-47bb-0310-9956-ffa450edef68
```
9eb0360e

19 Oct, 2010 1 commit

revert r1023227 as discussed on httpd-dev: · 6a741780

Stefan Fritsch authored Oct 19, 2010

core: Log a warning if <Limit> or <LimitExcept> are used. They are
deprecated and may go away in 2.4.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1024337 13f79535-47bb-0310-9956-ffa450edef68

6a741780

16 Oct, 2010 3 commits

Build mod_allowmethods (windows and netware stuff needs to be tested). · 145e3e2c

Stefan Fritsch authored Oct 16, 2010

Change method bit vector to 64 bits


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1023232 13f79535-47bb-0310-9956-ffa450edef68

145e3e2c

core: Log a warning if <Limit> or <LimitExcept> are used. They are · a97d943e

Stefan Fritsch authored Oct 16, 2010

deprecated and may go away in 2.4.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1023227 13f79535-47bb-0310-9956-ffa450edef68

a97d943e

mod_ssl: Log certificate information if client cert verification · 00aea1c7

Stefan Fritsch authored Oct 16, 2010

fails.

PR: 50094
Submitted by: Lassi Tuura <lat cern ch>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1023226 13f79535-47bb-0310-9956-ffa450edef68

00aea1c7

13 Oct, 2010 1 commit

htcacheclean: Teach htcacheclean to limit cache size by number of · b719db31

Graham Leggett authored Oct 13, 2010

inodes in addition to size of files. Prevents a cache disk from
running out of space when many small files are cached.

Move the directory delete process to the "purge" section, so that
inode counts are accurate when querying for stats only.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1022230 13f79535-47bb-0310-9956-ffa450edef68

b719db31

12 Oct, 2010 2 commits

Rename MaxRequestsPerChild to MaxConnectionsPerChild, which · 0e1f5c6e

Stefan Fritsch authored Oct 12, 2010

describes more accurately what the directive does.

The old name still works but logs a warning.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1021924 13f79535-47bb-0310-9956-ffa450edef68

0e1f5c6e

fix description of the change for PR43857; it is a work-around · c0b59d71

Jeff Trawick authored Oct 12, 2010

for a reslist problem that isn't fixed in apr-util 1.3.x

Suggested by: jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1021616 13f79535-47bb-0310-9956-ffa450edef68

c0b59d71

11 Oct, 2010 1 commit

mod_cache: Optionally serve stale data when a revalidation returns a · 9bc1863a

Graham Leggett authored Oct 11, 2010

5xx response, controlled by the CacheStaleOnError directive.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1021546 13f79535-47bb-0310-9956-ffa450edef68

9bc1863a

04 Oct, 2010 1 commit

htcacheclean: Allow the listing of valid URLs within the cache, with · fde8d6a2

Graham Leggett authored Oct 04, 2010

the option to list entry metadata such as sizes and times.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1004482 13f79535-47bb-0310-9956-ffa450edef68

fde8d6a2

03 Oct, 2010 1 commit

mod_cache: Allow control over the base URL of reverse proxied requests · a6408b0e

Graham Leggett authored Oct 03, 2010

using the CacheKeyBaseURL directive, so that the cache key can be
calculated from the endpoint URL instead of the server URL.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003963 13f79535-47bb-0310-9956-ffa450edef68

a6408b0e

02 Oct, 2010 3 commits

mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate, · 7e460d4c

Graham Leggett authored Oct 02, 2010

CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire,
CacheMinExpire and CacheMaxExpire can be set per directory/location.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003882 13f79535-47bb-0310-9956-ffa450edef68

7e460d4c

mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and · 5f79d7d5

Graham Leggett authored Oct 02, 2010

CacheReadTime can be set per directory/location.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003839 13f79535-47bb-0310-9956-ffa450edef68

5f79d7d5

core: Speed up config parsing if using a very large number of config · e4ab8d0a

Stefan Fritsch authored Oct 02, 2010

files

PR: 50002
Submitted by: andrew cloudaccess net


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003808 13f79535-47bb-0310-9956-ffa450edef68

e4ab8d0a

01 Oct, 2010 1 commit

Fix CVE-2010-1623 in mod_reqtimeout, too. It includes a non-blocking variant · ceadbb2b

Stefan Fritsch authored Oct 01, 2010

of apr_brigade_split_line().


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003626 13f79535-47bb-0310-9956-ffa450edef68

ceadbb2b

30 Sep, 2010 1 commit

mod_cache: Support the caching of HEAD requests. · cac9b899

Graham Leggett authored Sep 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1003331 13f79535-47bb-0310-9956-ffa450edef68

cac9b899

29 Sep, 2010 4 commits

htcacheclean: Allow the option to round up file sizes to a given · b1f56277

Graham Leggett authored Sep 29, 2010

block size, improving the accuracy of disk usage.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002854 13f79535-47bb-0310-9956-ffa450edef68

b1f56277

Add authz providers for use with mod_authz_core and its RequireAny/RequireAll · f20bd2e5

Stefan Fritsch authored Sep 29, 2010

containers:

'ssl' (equivalent to SSLRequireSSL)
'ssl-verify-client' (for use with 'SSLVerifyClient optional')
'ssl-require' (expressions with same syntax as SSLRequire)

We may decide to axe 'ssl-require' again in favor of the generic 'expr'
provider, depending on the development of the ap_expr parser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002837 13f79535-47bb-0310-9956-ffa450edef68

f20bd2e5

Make the ssl expression parser thread-safe. It now requires bison instead of · 3447aabc

Stefan Fritsch authored Sep 29, 2010

yacc.

Also change the make file magic so that the real source file name is
embedded in the debug info.

The generated files have been created with flex 2.5.35/bison 2.4.1. The two
'no previous prototype' warnings are supposed to be fixed with the next flex
version.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002824 13f79535-47bb-0310-9956-ffa450edef68

3447aabc

mod_disk_cache: Change on-disk header file format to support the · ae9fca7f

Graham Leggett authored Sep 29, 2010

link of the device/inode of the data file to the matching header
file, and to support the option of not writing a data file when
the data file is empty. Refactor the mod_disk_cache code so that
headers are written as late as possible (on commit), allowing the
device and inode of the body to be written to the header. At this
point, writes to the cache are now atomic, without locks.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002643 13f79535-47bb-0310-9956-ffa450edef68

ae9fca7f

28 Sep, 2010 1 commit

Add generate_log_id hook to allow to use the ID generated by mod_unique_id as · 83e3c56b

Stefan Fritsch authored Sep 28, 2010

error log ID for requests.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1002125 13f79535-47bb-0310-9956-ffa450edef68

83e3c56b

27 Sep, 2010 2 commits

mod_cache: Make sure that we never allow a 304 Not Modified response · 2bc7491c

Graham Leggett authored Sep 27, 2010

that we asked for to leak to the client should the 304 response be
uncacheable. PR45341

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001884 13f79535-47bb-0310-9956-ffa450edef68

2bc7491c

mod_cache: Add the cache_status hook to register the final cache · 37f5bc05

Graham Leggett authored Sep 27, 2010

decision hit/miss/revalidate. Add optional support for an X-Cache
and/or an X-Cache-Detail header to add the cache status to the
response. PR48241

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001639 13f79535-47bb-0310-9956-ffa450edef68

37f5bc05

25 Sep, 2010 1 commit

Add 'local' authz provider that matches connections originating · b4619588

Stefan Fritsch authored Sep 25, 2010

on the local host. PR 19938.

Also remove some cruft from mod_authz_host (we don't need a per-dir config)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1001207 13f79535-47bb-0310-9956-ffa450edef68

b4619588