Commits · 88fe08639d6d68216d4fea97dc83279ecc174e53 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

25 Oct, 2015 3 commits

Remove more backported items from trunk CHANGES. · 88fe0863

Rainer Jung authored Oct 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710437 13f79535-47bb-0310-9956-ffa450edef68

88fe0863

Remove backported items. · be1839a9

asf-sync-process authored Oct 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710436 13f79535-47bb-0310-9956-ffa450edef68

be1839a9

fixing compilation issue for older platform · 1946e251

Stefan Eissing authored Oct 25, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710419 13f79535-47bb-0310-9956-ffa450edef68

1946e251

24 Oct, 2015 3 commits
- block bcrypt on EBCDIC -- lots of ascii-isms in apr-util's bcrypt. · fca6cc6f
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710403 13f79535-47bb-0310-9956-ffa450edef68
```
  fca6cc6f
- followup to r1710380 -- refactored name and didn't have 'make depend' · 4c8c7d48
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710391 13f79535-47bb-0310-9956-ffa450edef68
```
  4c8c7d48
- Make the fix for fully qualifying REDIRECT_URL from PR#57785 opt-in. · e13061c1
  Eric Covener authored Oct 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710380 13f79535-47bb-0310-9956-ffa450edef68
```
  e13061c1
23 Oct, 2015 3 commits

announce protocol choices on first request · ac9b04a3

Stefan Eissing authored Oct 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710231 13f79535-47bb-0310-9956-ffa450edef68

ac9b04a3

improvements in http2 connection and worker shutdown, hopefully addressing high load segfaults · 3944c1e9
Stefan Eissing authored Oct 23, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710185 13f79535-47bb-0310-9956-ffa450edef68
```
3944c1e9

changelog update re r1709995 · 47d3cb7c

Stefan Eissing authored Oct 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710141 13f79535-47bb-0310-9956-ffa450edef68

47d3cb7c

22 Oct, 2015 4 commits

core: follow up to r1710095. · c1894f6d

Yann Ylavic authored Oct 22, 2015

Simplify logic in check_pipeline(), and log unexpected errors.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710105 13f79535-47bb-0310-9956-ffa450edef68

c1894f6d

core: Limit to ten the number of tolerated empty lines between request, · f00bacf3

Yann Ylavic authored Oct 22, 2015

and consume them before the pipelining check to avoid possible response
delay when reading the next request without flushing.

Before this commit, the maximum number of empty lines was the same as
configured LimitRequestFields, defaulting to 100, which was way too much.
We now use a fixed/hard limit of 10 (DEFAULT_LIMIT_BLANK_LINES).

check_pipeline() is changed to check for (up to the limit) and comsume the
trailing [CR]LFs so that they won't be interpreted as pipelined requests,
otherwise we would block on the next read without flushing data, and hence
possibly delay pending response(s) until the next/real request comes in or
the keepalive timeout expires.

Finally, when the maximum number of empty line is reached in
read_request_line(), or that request line does not contains at least a method
and an (valid) URI, we can fail early and avoid some failure detected in
further processing.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710095 13f79535-47bb-0310-9956-ffa450edef68

f00bacf3

mod_http2: no longer messing with mod_ssl config in slave connections, special... · 9715f3be

Stefan Eissing authored Oct 22, 2015

mod_http2: no longer messing with mod_ssl config in slave connections, special RST_STREAM failures when 403 responses are due to prohibited TLS renegotiations

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710014 13f79535-47bb-0310-9956-ffa450edef68

9715f3be

mod_ssl: check request-server for TLS settings compatible to handshake server,... · 75b798df

Stefan Eissing authored Oct 22, 2015

mod_ssl: check request-server for TLS settings compatible to handshake server, allow request if equal, renegotiation checks: remember last used cipher_suite for optimizations, deny any regnegotiation in presence of master connection

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709995 13f79535-47bb-0310-9956-ffa450edef68

75b798df

20 Oct, 2015 3 commits

moved ssl handshake trigger from mod_http2 to new process_connection hook in mod_ssl · 2fdabd24
Stefan Eissing authored Oct 20, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709602 13f79535-47bb-0310-9956-ffa450edef68
```
2fdabd24

Bump version for the expression parser SSL fix. · 79e8e8a2

Graham Leggett authored Oct 20, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709596 13f79535-47bb-0310-9956-ffa450edef68

79e8e8a2

new ap_is_allowed_protocol() for testing configured protocols, added H2Upgrade... · 6cdf0c3e

Stefan Eissing authored Oct 20, 2015

new ap_is_allowed_protocol() for testing configured protocols, added H2Upgrade on/off directive, changed H2Direct default back to on when h2c is in Protocols

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709587 13f79535-47bb-0310-9956-ffa450edef68

6cdf0c3e

17 Oct, 2015 2 commits

Rebuil. · 004c9866

Lucien Gentis authored Oct 17, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709173 13f79535-47bb-0310-9956-ffa450edef68

004c9866

XML update. · 9171d796

Lucien Gentis authored Oct 17, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709172 13f79535-47bb-0310-9956-ffa450edef68

9171d796

16 Oct, 2015 2 commits

mod_session: Introduce SessionExpiryUpdateInterval which allows to · 966561bc

Yann Ylavic authored Oct 16, 2015

configure the session/cookie expiry's update interval. PR 57300.

Submitted by: Paul Spangler <paul.spangler ni.com>
Reviewed/Committed by: ylavic

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709121 13f79535-47bb-0310-9956-ffa450edef68

966561bc

core: fix scoreboard alignment issues and crash (SIGBUS) on picky hardware. · 8e57acd9
Yann Ylavic authored Oct 16, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1709008 13f79535-47bb-0310-9956-ffa450edef68
```
8e57acd9

15 Oct, 2015 1 commit
- changed H2Compliance to H2ModernTLSOnly, added description in module docs · 40a8ee7f
  Stefan Eissing authored Oct 15, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708815 13f79535-47bb-0310-9956-ffa450edef68
```
  40a8ee7f
14 Oct, 2015 2 commits
- mod_http2: new directive H2Compliance on/off, checking TLS protocol and cipher against RFC7540 · 7458aeba
  Stefan Eissing authored Oct 14, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708593 13f79535-47bb-0310-9956-ffa450edef68
```
  7458aeba
- we no longer provide .msi installers for Windows · 13f0ee09
  Gregg Lewis Smith authored Oct 14, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708543 13f79535-47bb-0310-9956-ffa450edef68
```
  13f0ee09
13 Oct, 2015 3 commits

build doc · a8c186e7

Christophe Jaillet authored Oct 13, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708516 13f79535-47bb-0310-9956-ffa450edef68

a8c186e7

Add version when http2 has been included · 112723f1

Christophe Jaillet authored Oct 13, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708515 13f79535-47bb-0310-9956-ffa450edef68

112723f1

showing HTTP/2 in access logs and server status · 09066f89

Stefan Eissing authored Oct 13, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708319 13f79535-47bb-0310-9956-ffa450edef68

09066f89

12 Oct, 2015 7 commits

update transformation · cea6730b

André Malo authored Oct 12, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708194 13f79535-47bb-0310-9956-ffa450edef68

cea6730b

when stream gets reset by client, forward info to mplx and fail writes · 7901ade2
Stefan Eissing authored Oct 12, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708124 13f79535-47bb-0310-9956-ffa450edef68
```
7901ade2

mod_ssl: performing protocol switch directly after ALPN selection, mod_http2:... · e284ea1d

Stefan Eissing authored Oct 12, 2015

mod_ssl: performing protocol switch directly after ALPN selection, mod_http2: connection hook inits network filters to force TLS handshake, reads input only if H2Direct explicitly enabled, changes H2Direct default to off even for cleartext connections

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708107 13f79535-47bb-0310-9956-ffa450edef68

e284ea1d

core: follow up to r1708084. · 8b8fe58b

Yann Ylavic authored Oct 12, 2015

We don't want to process the subrequest either in ap_sub_req_method_uri()
if the quick-handler returned an error (or any final status).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708095 13f79535-47bb-0310-9956-ffa450edef68

8b8fe58b

core: follow up to r1708084,1708088: remove tabs. · e9d14456

Yann Ylavic authored Oct 12, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708090 13f79535-47bb-0310-9956-ffa450edef68

e9d14456

core: follow up to r1708084: we still need to take care of DONE in any case. · 001acdba
Yann Ylavic authored Oct 12, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708088 13f79535-47bb-0310-9956-ffa450edef68
```
001acdba

core: we don't want to run the subrequest's handler if the · bc979017

Yann Ylavic authored Oct 12, 2015

quick-handler returned an error (or any final status).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708084 13f79535-47bb-0310-9956-ffa450edef68

bc979017

11 Oct, 2015 2 commits

ifdef'fing MMAP bucket checks for platform that do not have them · c65dfc99
Stefan Eissing authored Oct 11, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1708002 13f79535-47bb-0310-9956-ffa450edef68
```
c65dfc99

XML updates. · c18463aa

Lucien Gentis authored Oct 11, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707977 13f79535-47bb-0310-9956-ffa450edef68

c18463aa

10 Oct, 2015 4 commits

Rebuild xml changes · ba9ddec0

Rich Bowen authored Oct 10, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707897 13f79535-47bb-0310-9956-ffa450edef68

ba9ddec0

s/h2_module/http2_module/ · fd4276cb

Yann Ylavic authored Oct 10, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707889 13f79535-47bb-0310-9956-ffa450edef68

fd4276cb

Xforms · 142c27f5

Rainer Jung authored Oct 10, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707886 13f79535-47bb-0310-9956-ffa450edef68

142c27f5

Fix small typo in new docs. · f853c5fc

Rainer Jung authored Oct 10, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707883 13f79535-47bb-0310-9956-ffa450edef68

f853c5fc

09 Oct, 2015 1 commit

PR 53845: Remove commented config regarding DNT because the spec now has CR... · 3efef001

Roy T. Fielding authored Oct 09, 2015

PR 53845: Remove commented config regarding DNT because the spec now has CR status (confirming our interpretation) and MS has committed to changing their implementation: http://blogs.microsoft.com/on-the-issues/2015/04/03/an-update-on-microsofts-approach-to-do-not-track/

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1707831 13f79535-47bb-0310-9956-ffa450edef68

3efef001