Commits · 6a345b5a505169ce146c2185c758ed0d594abd8f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

11 Oct, 2018 1 commit

Stefan Eissing authored Oct 11, 2018

mod_md: eliminating compiler warnings re signedness and unused. Adding a APLOG_WARNING
when the only available ACME challenge is "tls-sni-01" since Let's Encrypt will
disable that completely beginning of 2019.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843543 13f79535-47bb-0310-9956-ffa450edef68

6a345b5a

10 Oct, 2018 4 commits

mpm_event: avoid AH00484 with idle threads · f1a8c3e5

Eric Covener authored Oct 10, 2018

mpm_event: Stop issuing AH00484 "server reached MaxRequestWorkers..." when
there are still idle threads available. When there are less idle threads than
MinSpareThreads, issue new one-time message AH10159. Matches worker MPM.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843513 13f79535-47bb-0310-9956-ffa450edef68

f1a8c3e5

Eliminating some advanced conversion and shadow declaration compiler warnings. · d28840a6
Stefan Eissing authored Oct 10, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843430 13f79535-47bb-0310-9956-ffa450edef68
```
d28840a6

mod_http2: adding defensive code for stream EOS handling, in case the request handler · 2bebb2c2

Stefan Eissing authored Oct 10, 2018

missed to signal it the normal way (eos buckets). Addresses github issues
https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167
and https://github.com/icing/mod_h2/issues/170.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843426 13f79535-47bb-0310-9956-ffa450edef68

2bebb2c2

mod_http2: bringing some signed/unsigned casting goodness, aligning with github mod-h2 again · 64b98f99
Stefan Eissing authored Oct 10, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843424 13f79535-47bb-0310-9956-ffa450edef68
```
64b98f99

09 Oct, 2018 3 commits

Add CHANGES entry · 3c485337

Christophe Jaillet authored Oct 09, 2018

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843290 13f79535-47bb-0310-9956-ffa450edef68

3c485337

mod_session_cookie: avoid adding the Set-Cookie header · da8e5a66

Luca Toscano authored Oct 09, 2018

                    in both r->headers_out and r->err_headers_out
                    to avoid duplication.

In session_cookie_save it seems that ap_cookie_write is called
with r->headers_out and r->err_headers_out, ending up in the same
Set-Cookie header on both tables and eventually duplicated in the
HTTP response. I took Emmanuel's patch and trimmed out the bits
that remove the header only from r->err_headers_out (leaving it
to do the work on both tables) as attempt to change this bit of code
in the most conservative way as possible. Sending a commit for
a broader review.

PR: 60910,56098,55278



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843244 13f79535-47bb-0310-9956-ffa450edef68

da8e5a66

mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified · 83f3cd02

Evgeny Kotkov authored Oct 09, 2018

responses allowing these modules to properly set or fix-up the response
headers such as Vary or ETag.

This change follows up on r1837056 that disabled that special handling and
thus resulted in a potential violation of RFC7232, 4.1:

The server generating a 304 response MUST generate any of the following
header fields that would have been sent in a 200 (OK) response to the
same request: Cache-Control, Content-Location, Date, ETag, Expires,
and Vary.)

References:
https://lists.apache.org/thread.html/f5733ca6743757e8aa8b58a0cd9e27680971551c2a20f5606c66507e@%3Cdev.httpd.apache.org%3E
https://tools.ietf.org/html/rfc7232#section-4.1

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843242 13f79535-47bb-0310-9956-ffa450edef68

83f3cd02

08 Oct, 2018 3 commits

ran `build bootstrap` and rebuild transformation. sorry for the noise. · 71842c0b
André Malo authored Oct 08, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843205 13f79535-47bb-0310-9956-ffa450edef68
```
71842c0b
move es and fr targets to *.utf8 extension. Update transformation · 6a913c6a
André Malo authored Oct 08, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843201 13f79535-47bb-0310-9956-ffa450edef68
```
6a913c6a

Fix xml validation error · 96869c29

André Malo authored Oct 08, 2018


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1843164 13f79535-47bb-0310-9956-ffa450edef68

96869c29

05 Oct, 2018 11 commits

Add changes, docs for DefaultStateDir and DavLockDB default change. · c737f2a0
Joe Orton authored Oct 05, 2018
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1842938 13f79535-47bb-0310-9956-ffa450edef68
```
c737f2a0