Commits · 7ea8317ea5f9843fb4b63ded435ab1f47c034831 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

06 Oct, 2011 3 commits

re-add "extern" accidentally removed by r1179448 · 7ea8317e

Stefan Fritsch authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179715 13f79535-47bb-0310-9956-ffa450edef68

7ea8317e

Rebuild doc transform · a0a5a3bd

Richard Bowen authored Oct 06, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179617 13f79535-47bb-0310-9956-ffa450edef68

a0a5a3bd

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &)... · 2d3477a1

Richard Bowen authored Oct 06, 2011

Patch from Description Mathijs Schmittmann - Corrected syntax for && (vs &) expression. Refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51976


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179614 13f79535-47bb-0310-9956-ffa450edef68

2d3477a1

05 Oct, 2011 7 commits

Export ap_max_mem_free, needed by r1178079, as pointed out by Gregg L. Smith · 7065098b
Stefan Fritsch authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179448 13f79535-47bb-0310-9956-ffa450edef68
```
7065098b

- `build.sh all` · 163289ae

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179273 13f79535-47bb-0310-9956-ffa450edef68

163289ae

- add note here in light of CVE-2011-3368 · f8a11311

Joe Orton authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179272 13f79535-47bb-0310-9956-ffa450edef68

f8a11311

- add a security warning, and tweak the example, in light of CVE-2011-3368 · b10aeb17
Joe Orton authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179266 13f79535-47bb-0310-9956-ffa450edef68
```
b10aeb17

SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some · 2125cb1b

Joe Orton authored Oct 05, 2011

reverse proxy configurations by strictly validating the request-URI:

* server/protocol.c (read_request_line): Send a 400 response if the
  request-URI does not match the grammar from RFC 2616.  This ensures
  the input string for RewriteRule et al really is an absolute path.

Reviewed by: rpluem, wrowe, covener, fielding


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179239 13f79535-47bb-0310-9956-ffa450edef68

2125cb1b

Rebuild html. · a8d4d567

Richard Bowen authored Oct 05, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179184 13f79535-47bb-0310-9956-ffa450edef68

a8d4d567

Fix link to Friedl's book. (refs https://issues.apache.org/bugzilla/show_bug.cgi?id=51959) · 58acd380
Richard Bowen authored Oct 05, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1179179 13f79535-47bb-0310-9956-ffa450edef68
```
58acd380

04 Oct, 2011 2 commits

Add SSLCARevocationCheck directive to default mod_ssl config · 4865b878
Kaspar Brand authored Oct 04, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178695 13f79535-47bb-0310-9956-ffa450edef68
```
4865b878

fix indentation · 6ad30a0b

Kaspar Brand authored Oct 04, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178694 13f79535-47bb-0310-9956-ffa450edef68

6ad30a0b

03 Oct, 2011 2 commits

Enforce LimitRequestFieldSize after multiple headers with the same · 230803c5

Stefan Fritsch authored Oct 03, 2011

name have been merged.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178566 13f79535-47bb-0310-9956-ffa450edef68

230803c5

TODO note regarding the LimitInternalRecursion error message. · 051e2018
Richard Bowen authored Oct 03, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178523 13f79535-47bb-0310-9956-ffa450edef68
```
051e2018

01 Oct, 2011 3 commits

update xforms · 2a754fe3

Stefan Fritsch authored Oct 01, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178089 13f79535-47bb-0310-9956-ffa450edef68

2a754fe3

grammar fix · 9b0045d5

Stefan Fritsch authored Oct 01, 2011

point to SSLRequire docs


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178088 13f79535-47bb-0310-9956-ffa450edef68

9b0045d5

If MaxMemFree is set, set SSL_MODE_RELEASE_BUFFERS in mod_ssl. · 2fee69e6

Stefan Fritsch authored Oct 01, 2011

Always set SSL_MODE_RELEASE_BUFFERS in ab.

PR: 51618
Submitted by: Cristian Rodríguez <crrodriguez opensuse org>, Stefan Fritsch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1178079 13f79535-47bb-0310-9956-ffa450edef68

2fee69e6

30 Sep, 2011 1 commit

Remove trailing comma on last enum member for authz_status · de741d92

Paul Querna authored Sep 30, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177497 13f79535-47bb-0310-9956-ffa450edef68

de741d92

29 Sep, 2011 1 commit

Clarify configuration comment. · 46c7ddbe

Rainer Jung authored Sep 29, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177210 13f79535-47bb-0310-9956-ffa450edef68

46c7ddbe

28 Sep, 2011 2 commits

In ssl_check_public_cert(), also take dNSNames in the subjectAltName · 0d8b38a8

Kaspar Brand authored Sep 28, 2011

extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68

0d8b38a8

Some NetWare ssl module build tweaks. · d31c40eb

Guenter Knauf authored Sep 28, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176670 13f79535-47bb-0310-9956-ffa450edef68

d31c40eb

26 Sep, 2011 7 commits

Make mod_substitute more efficient: · e38adfbe

Stefan Fritsch authored Sep 26, 2011

- Use varbuf resizable buffer instead of constantly allocating pool
  memory and copying data around. This changes the memory requirement from
  quadratic in ((number of substitutions in line) * (length of line)) to
  linear in (length of line).
- Instead of copying buckets just to append a \0, use new ap_regexec_len()
  function

PR: 50559


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176019 13f79535-47bb-0310-9956-ffa450edef68

e38adfbe

Some varbuf enhancements: · 8e27e800

Stefan Fritsch authored Sep 26, 2011

- Introduce new ap_varbuf_pdup() and ap_varbuf_regsub() functions.
- Fix some bugs in ap_varbuf_strmemcat().
- Make ap_varbuf.buf point to an empty string if no buffer has been allocated,
  yet.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176018 13f79535-47bb-0310-9956-ffa450edef68

8e27e800

Adjust log message to reflect changed behaviour · b66f8dd1

Stefan Fritsch authored Sep 26, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175992 13f79535-47bb-0310-9956-ffa450edef68

b66f8dd1

Put 0- on the fast-track · 379baf08

Jim Jagielski authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175980 13f79535-47bb-0310-9956-ffa450edef68

379baf08

No longer do double duty... · 6c58ddf0

Jim Jagielski authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175979 13f79535-47bb-0310-9956-ffa450edef68

6c58ddf0

Final update to SSLProxyMachineCertificateChainFile · 5af8f8a4

Daniel Ruggeri authored Sep 26, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175946 13f79535-47bb-0310-9956-ffa450edef68

5af8f8a4

replace another occurence of X509_NAME_oneline by SSL_X509_NAME_to_string · 68831218
Kaspar Brand authored Sep 26, 2011
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175905 13f79535-47bb-0310-9956-ffa450edef68
```
68831218

25 Sep, 2011 2 commits

enable the SNI extension for proxy connections · b6f24a8b

Kaspar Brand authored Sep 25, 2011

to TLS backends (but avoid for pure SSLv2/SSLv3)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175416 13f79535-47bb-0310-9956-ffa450edef68

b6f24a8b

Updates. · bb827fc4

Lucien Gentis authored Sep 25, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175407 13f79535-47bb-0310-9956-ffa450edef68

bb827fc4

24 Sep, 2011 1 commit

Update. · eac18c11

Lucien Gentis authored Sep 24, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1175191 13f79535-47bb-0310-9956-ffa450edef68

eac18c11

23 Sep, 2011 7 commits

More style fixes, no func changes · a3cdc02d

Stefan Fritsch authored Sep 23, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174937 13f79535-47bb-0310-9956-ffa450edef68

a3cdc02d

More cleanup: Expand tabs and some more indentation fixes · 7cf51692

Stefan Fritsch authored Sep 23, 2011

No functional change


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174929 13f79535-47bb-0310-9956-ffa450edef68

7cf51692

Cleanup effort in prep for GA push: · 3d54c34d

Jim Jagielski authored Sep 23, 2011

Trim trailing whitespace... no func change



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174751 13f79535-47bb-0310-9956-ffa450edef68

3d54c34d

Cleanup effort in prep for GA push: · 7d838a5b

Jim Jagielski authored Sep 23, 2011

Trim trailing whitespace... no func change



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174748 13f79535-47bb-0310-9956-ffa450edef68

7d838a5b

Cleanup effort in prep for GA push: · cdd5ed74

Jim Jagielski authored Sep 23, 2011

Trim trailing whitespace... no func change


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174747 13f79535-47bb-0310-9956-ffa450edef68

cdd5ed74

docco xforms · fbb0eef4

Jim Jagielski authored Sep 23, 2011


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174720 13f79535-47bb-0310-9956-ffa450edef68

fbb0eef4

some docco updates · 5536f90b

Jim Jagielski authored Sep 23, 2011

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1174718 13f79535-47bb-0310-9956-ffa450edef68

5536f90b

22 Sep, 2011 1 commit

Pulls the examples out of the paragraph text and into a table so that · 990ae27b

Richard Bowen authored Sep 22, 2011

they are more visually distinct.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1173918 13f79535-47bb-0310-9956-ffa450edef68

990ae27b

21 Sep, 2011 1 commit

Bring error messages for TLS stapling related options in sync · 78b1fffa

Kaspar Brand authored Sep 21, 2011

with their directive names.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1173772 13f79535-47bb-0310-9956-ffa450edef68

78b1fffa