Commits · 7e137916003b84fbbd0dba647d508b3306b8e210 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

04 Mar, 2004 7 commits

* modules/ssl/ssl_engine_init.c (ssl_init_Engine): Log the OpenSSL · 7e137916

Joe Orton authored Mar 04, 2004

error stack contents if engine load/init fails.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102857 13f79535-47bb-0310-9956-ffa450edef68

7e137916

* modules/ssl/ssl_engine_log.c (ssl_log_ssl_error): Use %lu to print · 7ad48f9b

Joe Orton authored Mar 04, 2004

an unsigned long.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102856 13f79535-47bb-0310-9956-ffa450edef68

7ad48f9b

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup, · 31470743

Joe Orton authored Mar 04, 2004

ssl_var_lookup_ssl_cipher): Use apr_itoa instead of psprintf %d.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102855 13f79535-47bb-0310-9956-ffa450edef68

31470743

* modules/ssl/ssl_engine_vars (ssl_var_lookup): const'ify result and · bbce8d6c

Joe Orton authored Mar 04, 2004

drop a bunch of casts; use apr_table_get directly in place of
ssl_var_lookup_header.
(ssl_var_lookup_header): Remove function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102854 13f79535-47bb-0310-9956-ffa450edef68

bbce8d6c

* modules/ssl/ssl_engine_vars (ssl_var_lookup): Optimise such that · 8003008a

Joe Orton authored Mar 04, 2004

lookup of SSL_* variables (the common case) requires 2 rather than 29
strcasecmp calls before getting to ssl_var_lookup_ssl().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102851 13f79535-47bb-0310-9956-ffa450edef68

8003008a

* modules/ssl/mod_ssl.h: Declare ssl_is_https optional function. · b662a4f3

Joe Orton authored Mar 04, 2004

* modules/ssl/ssl_engine_vars (ssl_is_https): New function.
(ssl_var_register): Register it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102850 13f79535-47bb-0310-9956-ffa450edef68

b662a4f3

* modules/ssl/ssl_engine_vars (ssl_var_lookup): Fix potential · 0e6305b9

Joe Orton authored Mar 04, 2004

segfaults if called with r=NULL, c!=NULL, spotted by Andr��.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102849 13f79535-47bb-0310-9956-ffa450edef68

0e6305b9

03 Mar, 2004 1 commit

sync with 2.0.49-dev · c62b189a

Jeff Trawick authored Mar 03, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102846 13f79535-47bb-0310-9956-ffa450edef68

c62b189a

01 Mar, 2004 5 commits

· 62f71b40

Paul J. Reder authored Mar 01, 2004

 *) Remove compile-time length limit on request strings. Length is
    now enforced solely with the LimitRequestLine config directive.
    [Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102840 13f79535-47bb-0310-9956-ffa450edef68

62f71b40

fix windows build: add path to mod_ssl.h · 215a8d5c

Allan K. Edwards authored Mar 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102837 13f79535-47bb-0310-9956-ffa450edef68

215a8d5c

add eoc_bucket.c to project · b221b179

Allan K. Edwards authored Mar 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102834 13f79535-47bb-0310-9956-ffa450edef68

b221b179

enable IPv6 for Windows XP and 2003. In addition this this · dc9717b4

Allan K. Edwards authored Mar 01, 2004

we need a way to set APR_HAVE_IPV6 at build time in apr.hw


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102833 13f79535-47bb-0310-9956-ffa450edef68

dc9717b4

* modules/metadata/mod_headers.c (header_inout_cmd): Remove redundant · 24169665

Joe Orton authored Mar 01, 2004

conditional.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102832 13f79535-47bb-0310-9956-ffa450edef68

24169665

29 Feb, 2004 7 commits

update transformation · e107b3c3

Andre Malo authored Feb 29, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102828 13f79535-47bb-0310-9956-ffa450edef68

e107b3c3

Win32: Taking down the child process on accept errors opens the possibility of a DoS attack. · 38888c09
Bill Stoddard authored Feb 29, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102827 13f79535-47bb-0310-9956-ffa450edef68
```
38888c09

sync with stable branch · 40ebf7fc

Jeff Trawick authored Feb 29, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102826 13f79535-47bb-0310-9956-ffa450edef68

40ebf7fc

Win32: find_read_listeners was not correctly handling multiple listeners on... · 41d77dec

Bill Stoddard authored Feb 29, 2004

Win32: find_read_listeners was not correctly handling multiple listeners on the Win32DisableAcceptEx path


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102823 13f79535-47bb-0310-9956-ffa450edef68

41d77dec

* Makefile.in: Link httpd against user-supplied $(LIBS). · fd8874d6

Joe Orton authored Feb 29, 2004

PR: 7882


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102820 13f79535-47bb-0310-9956-ffa450edef68

fd8874d6

* modules/ssl/ssl_engine_io.c (ssl_io_filter_disable, · 1239563b

Joe Orton authored Feb 29, 2004

ssl_io_filter_error): Clear the SSL * pointer in the SSLConnRec too.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102819 13f79535-47bb-0310-9956-ffa450edef68

1239563b

* server/core.c (core_output_filter): Avoid using EOC bucket after · 95e1d657

Joe Orton authored Feb 29, 2004

deleting it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102818 13f79535-47bb-0310-9956-ffa450edef68

95e1d657

28 Feb, 2004 17 commits

Attempt to document the new cert DN lookup feature. · 13db5b10

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102817 13f79535-47bb-0310-9956-ffa450edef68

13db5b10

Document the %s format specifier. · 7fba869b

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102816 13f79535-47bb-0310-9956-ffa450edef68

7fba869b

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn): Simplify · 398c35ea

Joe Orton authored Feb 28, 2004

to use apr_pstrmemdup.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102815 13f79535-47bb-0310-9956-ffa450edef68

398c35ea

sync · 7fecd656

Andre Malo authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102814 13f79535-47bb-0310-9956-ffa450edef68

7fecd656

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_dn): For a DN · 4dd63e03

Joe Orton authored Feb 28, 2004

which includes several RDNs with the same OID, allow lookup of any
particular RDN using an "_<n>" suffix on the name.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102813 13f79535-47bb-0310-9956-ffa450edef68

4dd63e03

update transformaation · d5b383e2

Andre Malo authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102812 13f79535-47bb-0310-9956-ffa450edef68

d5b383e2

Add 's' format tag to mod_headers to allow access to mod_ssl variables · f5d75207

Joe Orton authored Feb 28, 2004

without the overhead of SSLOptions +StdEnvVars/+ExportCertData; also
ensure that any multi-line envvars are unwrapped onto a single line.

* modules/metadata/mod_headers.c (header_request_ssl_var, unwrap_header,
header_post_config): New functions.
(header_pre_config): Register the 's' tag type.
(register_hooks): Add the post_config hook.

PR: 23223


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102809 13f79535-47bb-0310-9956-ffa450edef68

f5d75207

Win32: Log each listener thread · bd0e2037

Bill Stoddard authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102806 13f79535-47bb-0310-9956-ffa450edef68

bd0e2037

Win32: Eliminate a Sleep(100) that always occurs on certain errors on... · 1b49d2bf

Bill Stoddard authored Feb 28, 2004

Win32: Eliminate a Sleep(100) that always occurs on certain errors on AcceptEx(). Apply err_count threshold to all AcceptEx error conditions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102805 13f79535-47bb-0310-9956-ffa450edef68

1b49d2bf

Win32: Shutdown the server on critical child failures that will prevent the server from operating · 5a427cb8
Bill Stoddard authored Feb 28, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102804 13f79535-47bb-0310-9956-ffa450edef68
```
5a427cb8

Move mod_ssl-internal interfaces into ssl_private.h; allow mod_ssl.h · 8a7132c9

Joe Orton authored Feb 28, 2004

to be included even when mod_ssl is not enabled.

* Makefile.in (install-include): Only install mod_ssl.h.

* modules/ssl/ssl_private.h: New file.

* modules/ssl/mod_ssl.h: Move everything apart from than the optional
hook definitions into ssl_private.h.

* modules/ssl/*.c: Include ssl_private.h not mod_ssl.h

* modules/ssl/config.m4: Always add the mod_ssl directory to the
include path so other modules can find mod_ssl.h.

* modules/proxy/mod_proxy.c: Include mod_ssl.h to pick up the optional
hook definitions rather than copy'n'pasting them.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102803 13f79535-47bb-0310-9956-ffa450edef68

8a7132c9

Use SSL_CLIENT_CERT_CHAIN_<n> with an underscore before the <n>. · 73017cb6
Joe Orton authored Feb 28, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102802 13f79535-47bb-0310-9956-ffa450edef68
```
73017cb6

* server/connection.c (ap_flush_conn): Fix typo. · 5ee52546

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102800 13f79535-47bb-0310-9956-ffa450edef68

5ee52546

Relicense. · 5fca09a9

Joe Orton authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102799 13f79535-47bb-0310-9956-ffa450edef68

5fca09a9

Include the new eoc_bucket.c for compilation. · eb10b7dd

Madhusudan Mathihalli authored Feb 28, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102794 13f79535-47bb-0310-9956-ffa450edef68

eb10b7dd

Send the 'Close Alert' message to the peer upon closing a SSL session. This · 7e07b49c

Madhusudan Mathihalli authored Feb 28, 2004

required creating a new EOC (End-Of-Connection) bucket type to notify mod_ssl
that the connection is about to be closed.

Reviewed by: Joe Orton, Justin Erenkrantz

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102793 13f79535-47bb-0310-9956-ffa450edef68

7e07b49c

New file for defining the End Of Connection (EOC) bucket type. · 07d46f8e

Madhusudan Mathihalli authored Feb 28, 2004

The new bucket type was introduced for connection level filters (Ex. SSL)
that need to send special data to the peer just before the socket is closed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102792 13f79535-47bb-0310-9956-ffa450edef68

07d46f8e

27 Feb, 2004 1 commit

directive name changed a while back · 699e0702

Bill Stoddard authored Feb 27, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102790 13f79535-47bb-0310-9956-ffa450edef68

699e0702

26 Feb, 2004 2 commits

sync with stable branch · fa51407a

Jeff Trawick authored Feb 26, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102787 13f79535-47bb-0310-9956-ffa450edef68

fa51407a

fix an old misfeature: "BufferedLogs Off" would sort-of turn · e1a45dc5

Jeff Trawick authored Feb 26, 2004

buffered logging on as it set the log writer to the buffered log
writer, though it would leave the are-logs-buffered flag off

this misfeature combined with recent mutex logic for buffered logs
led to a segfault with "BufferedLogs Off"

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102783 13f79535-47bb-0310-9956-ffa450edef68

e1a45dc5