Commits · 91ec402fbb8207f86b794e9b79150e88af03d556 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

01 Jul, 2016 4 commits

ab: follow up to r1750854: still better naming, and a C89 fix. · 91ec402f
Yann Ylavic authored Jul 01, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750960 13f79535-47bb-0310-9956-ffa450edef68
```
91ec402f

ab: follow up to r1750854: some comments and better naming. · 67f972b3

Yann Ylavic authored Jul 01, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750955 13f79535-47bb-0310-9956-ffa450edef68

67f972b3

Fixed typo in log message, wrong RFC mentioned. · f1f241a0

Luca Toscano authored Jul 01, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750953 13f79535-47bb-0310-9956-ffa450edef68

f1f241a0

ab: follow up to r1750854. · 6f9a40a0

Yann Ylavic authored Jul 01, 2016

Use SNI when available by default, and invert -I logic to now disable it.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750947 13f79535-47bb-0310-9956-ffa450edef68

6f9a40a0

30 Jun, 2016 7 commits

ab: follow up to r1750854: put the -I at the right place for apr_getopt(). · f7e37bb6
Yann Ylavic authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750855 13f79535-47bb-0310-9956-ffa450edef68
```
f7e37bb6

ab: add SNI support when available. · 3bcbe95d

Yann Ylavic authored Jun 30, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750854 13f79535-47bb-0310-9956-ffa450edef68

3bcbe95d

modssl: reset client-verify state when renegotiation is aborted · 2d0e4eff
Stefan Eissing authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750779 13f79535-47bb-0310-9956-ffa450edef68
```
2d0e4eff

Update transformations. · a8777b25

Joe Orton authored Jun 30, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750751 13f79535-47bb-0310-9956-ffa450edef68

a8777b25

Update language on impact of disabling TRACE, remove reference to compliance. · eea17fde

Joe Orton authored Jun 30, 2016

Reviewed by: wrowe, covener, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750750 13f79535-47bb-0310-9956-ffa450edef68

eea17fde

Fix indentation and extra spaces of my previous commit, apologies. · b25e4fbb
Luca Toscano authored Jun 30, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750749 13f79535-47bb-0310-9956-ffa450edef68
```
b25e4fbb

Log CGI/FCGI Last-Modified header value changes. · eb06d305

Luca Toscano authored Jun 30, 2016

The Last-Modified header coming from a backend FCGI/CGI script is inspected
by util_script.c to enforce RFC2616 (https://tools.ietf.org/html/rfc2616#section-14.29).
The Last-Modified header also needs to be compliant with RFC882/1123 as stated in
https://tools.ietf.org/html/rfc2616#section-3.3.1, and one important assumption that
httpd makes (correctly, as the RFC suggests) is to assume the GMT timezone. If the datestr
returned by the FCGI/CGI script is set with a different timezone, then the value might be considered
"in the future" and replaced with GMT now() as calculated by httpd. Adding a trace log might
help sysadmins while debugging these kind of issues. This is a follow up of r1748379.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750747 13f79535-47bb-0310-9956-ffa450edef68

eb06d305

28 Jun, 2016 13 commits

update transformation · ce24bc2f

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750574 13f79535-47bb-0310-9956-ffa450edef68

ce24bc2f

svn:eol-style = native · a1c9c285

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750568 13f79535-47bb-0310-9956-ffa450edef68

a1c9c285

--enable-mods-[shared|static]=none has *never* done anything special. · bda99fad
William A. Rowe Jr authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750567 13f79535-47bb-0310-9956-ffa450edef68
```
bda99fad

update transformation · 8f5c3d8b

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750563 13f79535-47bb-0310-9956-ffa450edef68

8f5c3d8b

svn:eol-style = native · b991111e

André Malo authored Jun 28, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750560 13f79535-47bb-0310-9956-ffa450edef68

b991111e

Small change to r952007, ensure we don't wipe out the $enable_foomod value · 77eb70e1

William A. Rowe Jr authored Jun 28, 2016

when that value is 'shared'. The 'yes', 'shared', 'static' and 'no' values
are all valid.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750553 13f79535-47bb-0310-9956-ffa450edef68

77eb70e1

mod_proxy: follow up to r1750392 and r1750474. · 73842ba5

Yann Ylavic authored Jun 28, 2016

Restore PROXY_WORKER_IS_USABLE() check in ap_proxy_connect_backend(), we must
obviously (un)put backend in error state based on the result of the actual
connect(), and don't change it in ap_proxy_check_backend()...
APR_SUCCESS return by ap_proxy_check_backend(), i.e. a usable worker and an
established connection, is enough for modules to continue w/o calling
ap_proxy_connect_backend(), still.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750508 13f79535-47bb-0310-9956-ffa450edef68

73842ba5

Fix proxy balancer lbmethod --enable defaults to follow proxy_balancer · c809c1c9
William A. Rowe Jr authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750507 13f79535-47bb-0310-9956-ffa450edef68
```
c809c1c9
mod_proxy: follow up to r1750392: comment on proxy_conn_rec->tmp_bb. · 3c17cf27
Yann Ylavic authored Jun 28, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750494 13f79535-47bb-0310-9956-ffa450edef68
```
3c17cf27

mod_proxy: follow up to r1750392. · 38b465ae

Yann Ylavic authored Jun 28, 2016

Avoid double checking the connection in ap_proxy_connect_backend() when
ap_proxy_check_backend() says it is up and good to go.

This can be done by moving the PROXY_WORKER_IS_USABLE() check in
ap_proxy_check_backend(), since it is called by ap_proxy_connect_backend(),
and not calling the latter if the former succeeded (for the modules using it).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750474 13f79535-47bb-0310-9956-ffa450edef68

38b465ae

xforms · 0b1618fa

Christophe Jaillet authored Jun 28, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750445 13f79535-47bb-0310-9956-ffa450edef68

0b1618fa

Be more consistent in <highlight> block layout in XML. · d13da683

Christophe Jaillet authored Jun 28, 2016

No visual change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750441 13f79535-47bb-0310-9956-ffa450edef68

d13da683

Fix typo as spotted by Wolfgang in online doc · e5980c07

Christophe Jaillet authored Jun 28, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750439 13f79535-47bb-0310-9956-ffa450edef68

e5980c07

27 Jun, 2016 13 commits

This is not C code... no semi, a colon is a noop · bc59dc28

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750420 13f79535-47bb-0310-9956-ffa450edef68

bc59dc28

Undo r1750418, miscommitted a local test · 7ef8e1e6

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750419 13f79535-47bb-0310-9956-ffa450edef68

7ef8e1e6

This isn't C ;) Colon for noop · 1b553447

William A. Rowe Jr authored Jun 27, 2016

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750418 13f79535-47bb-0310-9956-ffa450edef68

1b553447

mod_proxy: we don't need ap_proxy_ssl_connection_cleanup() anymore with · b803da8c

Yann Ylavic authored Jun 27, 2016

ap_proxy_check_backend() used at connection reuse time, so remove its last call and deprecate it.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750416 13f79535-47bb-0310-9956-ffa450edef68

b803da8c

mod_proxy_http2: don't use ap_proxy_ssl_connection_cleanup(), there may be · c0f35387

Yann Ylavic authored Jun 27, 2016

data available on the backend connection before we reuse it (e.g. PING or SETTINGS change).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750414 13f79535-47bb-0310-9956-ffa450edef68

c0f35387

mod_proxy: use proxy_conn_rec->tmp_bb where appopriate to avoid temporary · b635c58b

Yann Ylavic authored Jun 27, 2016

brigade create/destroy.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750412 13f79535-47bb-0310-9956-ffa450edef68

b635c58b

Account for explicit enable- cases of 'shared', 'few', 'all', 'reallyall' · a534b98f
William A. Rowe Jr authored Jun 27, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750407 13f79535-47bb-0310-9956-ffa450edef68
```
a534b98f

mod_proxy_{http,ajp,fcgi}}: don't reuse backend connections with data available · 421cc399

Yann Ylavic authored Jun 27, 2016

before the request is sent. PR 57832.

ap_proxy_check_backend() can be used before ap_proxy_connect_backend() to try
to read available data (including from the filters), and is called by
ap_proxy_connect_backend() to check the socket state only (as before, still
relevant after ap_proxy_check_backend() due to filter data which may not have
triggered a real socket operation).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750392 13f79535-47bb-0310-9956-ffa450edef68

421cc399

mod_proxy: revert r1750301, r1750305 and r1750311. · ad1897fd

Yann Ylavic authored Jun 27, 2016

Rework needed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750376 13f79535-47bb-0310-9956-ffa450edef68

ad1897fd

Ensure not-selected means 'no', once an APACHE_MODULE enable_foo is processed · 54b4c3af
William A. Rowe Jr authored Jun 27, 2016
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750335 13f79535-47bb-0310-9956-ffa450edef68
```
54b4c3af

mod_proxy: follow up to r1750301: APLOGNO(). · 21b66e40

Yann Ylavic authored Jun 27, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750311 13f79535-47bb-0310-9956-ffa450edef68

21b66e40

mod_proxy: follow up to r1750301. · 6cf8bed6

Yann Ylavic authored Jun 27, 2016

s/is_socket_connected/get_socket_connected/ in the !USE_ALTERNATE_IS_CONNECTED
case, and add CHANGE + MMN entries.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750305 13f79535-47bb-0310-9956-ffa450edef68

6cf8bed6

mod_proxy: don't reuse backend connections with data available before the · 9055c198

Yann Ylavic authored Jun 27, 2016

request is sent.  PR 57832.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750301 13f79535-47bb-0310-9956-ffa450edef68

9055c198

25 Jun, 2016 3 commits

Follow up to r1737447: fix max_spare_threads lower bound. · 7b33b0fc

Yann Ylavic authored Jun 25, 2016

Suggested by: Rick Houser <rick.houser jackson.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750218 13f79535-47bb-0310-9956-ffa450edef68

7b33b0fc

Rebuild. · 9e56fc87

Lucien Gentis authored Jun 25, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750217 13f79535-47bb-0310-9956-ffa450edef68

9e56fc87

XML update. · 93519875

Lucien Gentis authored Jun 25, 2016


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750216 13f79535-47bb-0310-9956-ffa450edef68

93519875