Commits · 976d24a678e90459a8f71c3404a5e796e2cea69b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Aug 01, 2005

* modules/ldap/util_ldap_cache.c (MODLDAP_SHMEM_CACHE): Remove unused · 976d24a6

Joe Orton authored Aug 01, 2005

macro.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@226811 13f79535-47bb-0310-9956-ffa450edef68

976d24a6

* modules/ldap/util_ldap.c (util_ldap_post_config): Don't attempt to · d96042f2

Joe Orton authored Aug 01, 2005

remove the shm segment here.

* modules/ldap/util_ldap_cache.c (util_ldap_cache_init): Properly
remove the shm segment here before creating a new one; don't attach to
any existing shm segment if apr_shm_create() fails.
(util_ldap_cache_module_kill): Don't attempt to remove the shm segment
here; apr_shm_destroy() does that anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@226809 13f79535-47bb-0310-9956-ffa450edef68

d96042f2

* modules/ssl/mod_ssl.c (ssl_hook_pre_config): Initialize all · 0a2031b0

Joe Orton authored Aug 01, 2005

algorithms in OpenSSL; enables PKCS#8 keyfile support.

PR: 35469


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@226777 13f79535-47bb-0310-9956-ffa450edef68

0a2031b0

Nitpick; changed for consistency. · 735b7fe0

Jason S. Lingohr authored Aug 01, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@226737 13f79535-47bb-0310-9956-ffa450edef68

735b7fe0

Jul 28, 2005

* modules/ldap/util_ldap_cache_mgr.c (util_ald_cache_display): Replace · d9d4ac4c

Joe Orton authored Jul 28, 2005

ap_rputs(apr_psprintf(...)) with simpler ap_rprintf(...).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225797 13f79535-47bb-0310-9956-ffa450edef68

d9d4ac4c

* modules/ldap/util_ldap.c, modules/aaa/mod_authnz_ldap.c: Stop using · 264efd47

Joe Orton authored Jul 28, 2005

APLOG_NOERRNO throughout.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225794 13f79535-47bb-0310-9956-ffa450edef68

264efd47

* modules/ldap/util_ldap_cache.c (util_ldap_cache_module_kill): Make · 8e779e74

Joe Orton authored Jul 28, 2005

private function static. (util_ldap_cache_child_kill): Remove
prototype for function which doesn't exist.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225756 13f79535-47bb-0310-9956-ffa450edef68

8e779e74

* modules/ldap/util_ldap_cache.c (util_ldap_cache_init): Use the · d2be100c

Joe Orton authored Jul 28, 2005

actual available size of the shm segment not the requested size.
Ensure the requested size is aligned. Check errors from apr_rmm_init.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225753 13f79535-47bb-0310-9956-ffa450edef68

d2be100c

Add status param option so that current worker · 910b2327

Mladen Turk authored Jul 28, 2005

status can be changed via editing httpd.conf instead
just using web page. Seems the ApacheCon is paying of.
Thanks to Sander for pointing that out.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225751 13f79535-47bb-0310-9956-ffa450edef68

910b2327

* modules/ldap/util_ldap_cache_mgr.c (util_ald_cache_insert, · 42b45e0c

Joe Orton authored Jul 28, 2005

util_ald_cache_remove, util_ald_cache_fetch): Always use "unsigned
long" for hash values, for consistency.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225749 13f79535-47bb-0310-9956-ffa450edef68

42b45e0c

* modules/ldap/util_ldap_cache_mgr.c (util_ald_cache_insert): Fix a · 2f8ee3ed

Joe Orton authored Jul 28, 2005

cache corruption case: ensure that there is room in the cache for a
copy of the payload before inserting the node.

PR: 34209


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225746 13f79535-47bb-0310-9956-ffa450edef68

2f8ee3ed

* modules/ldap/util_ldap.c: Remove DOCTYPE_* macros duplicated from · c43c4b51

Joe Orton authored Jul 28, 2005

httpd.h. Remove redundant prototypes of static functions which aren't
used before they are declared.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225734 13f79535-47bb-0310-9956-ffa450edef68

c43c4b51

* modules/ldap/util_ldap.c (util_ldap_cmds): Make static const. · 0f70fbee
Joe Orton authored Jul 28, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225733 13f79535-47bb-0310-9956-ffa450edef68
```
0f70fbee

* modules/ldap/util_ldap.c (LDAP_CACHE_LOCK, LDAP_CACHE_UNLOCK): · 4cd740f0

Joe Orton authored Jul 28, 2005

Wrap in do/while for safety.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225732 13f79535-47bb-0310-9956-ffa450edef68

4cd740f0

Ignore httxt2dbm. · 35911505

Joe Orton authored Jul 28, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225730 13f79535-47bb-0310-9956-ffa450edef68

35911505

* modules/experimental/mod_filter.c (filter_trace): Fix gcc · 9a921861

Joe Orton authored Jul 28, 2005

-Wformat-security warning.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225725 13f79535-47bb-0310-9956-ffa450edef68

9a921861

Jul 27, 2005

* modules/aaa/mod_authnz_ldap.c (authz_ldap_check_user_access): Remove · e009bda4

Joe Orton authored Jul 27, 2005

unused variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225587 13f79535-47bb-0310-9956-ffa450edef68

e009bda4

Jul 26, 2005
- Add the path to the mod_ssl include for the setenvif module. · bddca302
  Bradley Nicholes authored Jul 26, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@225293 13f79535-47bb-0310-9956-ffa450edef68
```
  bddca302
Jul 25, 2005

* modules/ssl/ssl_expr_eval.c (ssl_expr_eval_oid): Remove unused · 8701bbd4

Joe Orton authored Jul 25, 2005

variable.

* modules/ssl/ssl_private.h, modules/ssl/mod_ssl.h
(ssl_extlist_by_oid): Move prototype to ssl_private.h.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224722 13f79535-47bb-0310-9956-ffa450edef68

8701bbd4

* modules/proxy/mod_proxy_http.c (stream_reqbody_cl): Fix format · e9e2a37b

Joe Orton authored Jul 25, 2005

string error.
(ap_proxy_http_request): Restore default case in rb_method switch to
fix gcc warnings.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224721 13f79535-47bb-0310-9956-ffa450edef68

e9e2a37b

* modules/metadata/mod_setenvif.c: Unconditionally include mod_ssl.h. · 3a33c6a5

Joe Orton authored Jul 25, 2005

(setenvif_post_config): Fix prototype fubar.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224718 13f79535-47bb-0310-9956-ffa450edef68

3a33c6a5

Jul 23, 2005

we need to match the string end. · 7750bb06

Andre Malo authored Jul 23, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224542 13f79535-47bb-0310-9956-ffa450edef68

7750bb06

add generated convenience rewritemap · ebe1666b

Andre Malo authored Jul 23, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224539 13f79535-47bb-0310-9956-ffa450edef68

ebe1666b

add xslt script for generating the directive -> url mapping · f13ed3eb

Andre Malo authored Jul 23, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@224537 13f79535-47bb-0310-9956-ffa450edef68

f13ed3eb

Jul 22, 2005

rebuild docs. · 05758ce4

Paul Querna authored Jul 22, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220312 13f79535-47bb-0310-9956-ffa450edef68

05758ce4

Describe the new syntax: · 75b45af1

Martin Kraemer authored Jul 22, 2005

SetenvIf OID("2.16.840.1.113730.1.13") "(.*)" NetscapeComment=$1

Ehhmm.... How do I make html from this again?

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220310 13f79535-47bb-0310-9956-ffa450edef68

75b45af1

Allow extraction of the values of SSL certificate extensions into · 1c0474e5

Martin Kraemer authored Jul 22, 2005

environment variables, so that their value can be used by any
module that is aware of environment variables, as in:

  SetEnvIf OID("2.16.840.1.113730.1.13") "(.*) Generated (Certificate)" ca=$1
sets
  ca=TinyCA
if the cert was issued by TinyCA.

Similarly,
  SetenvIf OID("2.16.840.1.113730.1.13") "(.*)" NetscapeComment=$1
will set $NetscapeComment to the whole string.

It is technically allowed to have multiple instances of an extension
field, all with the same oid. In this case, the environment variable
will be set to the list of all fields, separated by commas.

The [PATCH] uses a cross-module call from mod_setenvif to
mod_ssl (the latter may also be missing: in this case the
variable will never be set). It calls a common function
in the ssl module that is also used for the SSLRequire
directive's test.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220307 13f79535-47bb-0310-9956-ffa450edef68

1c0474e5

build. · 1d4f5652

Paul Querna authored Jul 22, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220287 13f79535-47bb-0310-9956-ffa450edef68

1d4f5652

Use -o for output of dbm files. · 4eb92a03

Paul Querna authored Jul 22, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220286 13f79535-47bb-0310-9956-ffa450edef68

4eb92a03

Jul 21, 2005

Changed cmpstri to strcasecmp as per Justin's note. · fd14eca2

Richard Bowen authored Jul 21, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220073 13f79535-47bb-0310-9956-ffa450edef68

fd14eca2

Remove some rather confusing phrasing regarding mod_proxy and how to · 9d06cedf

Richard Bowen authored Jul 21, 2005

determine if it is installed.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220063 13f79535-47bb-0310-9956-ffa450edef68

9d06cedf

Document change to mod_ssl's SSLRequire directive, bump version to 2.3.0 as... · 8904f264

Martin Kraemer authored Jul 21, 2005

Document change to mod_ssl's SSLRequire directive, bump version to 2.3.0 as already done in the ap_release.h header

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220040 13f79535-47bb-0310-9956-ffa450edef68

8904f264

Opps. Use the correct member of the structure. · dc5bdb3e

Paul Querna authored Jul 21, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220038 13f79535-47bb-0310-9956-ffa450edef68

dc5bdb3e

Correctly restore the HTTP status from the cache handler. · 3e8b75ae

Paul Querna authored Jul 21, 2005

Submitted by: Hansjoerg Pehofer


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220036 13f79535-47bb-0310-9956-ffa450edef68

3e8b75ae

Using the user nobody (or similar accounts on other systems like · ef272062

Wilfredo Sanchez authored Jul 21, 2005

nouser) violates the purpose of that user.  User nobody exists
specifically as a user that no process runs as and that owns no files
on disk.  Same for nogroup.

The user and group daemon are the generic system services user and
group.  Use those instead.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220032 13f79535-47bb-0310-9956-ffa450edef68

ef272062

Jul 20, 2005

Quick hack to store varied contents under the same path, making it · 03c39915

Paul Querna authored Jul 20, 2005

easier for admins to manage the cache.

Still requires modifications to htcacheclean to work.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@219945 13f79535-47bb-0310-9956-ffa450edef68

03c39915

Collaborative work: (Thanks, dreid!) · 87ac4362

Martin Kraemer authored Jul 20, 2005

Implement OID checking for mod_ssl. This code allows for checking of arbitrary client
certificate extensions by OID, in a syntax like:
   SSLRequire "BaDCA Generated Certificate" in Oid("2.16.840.1.113730.1.13") \
          || "committers"                   in Oid("1.3.6.1.4.1.18060.1")
Note the following:
* A given OID can occur multiple times in one cert, with different values. Therefore
  the OID function compares the left-hand string against each of the OID values,
  until a complete match is found. If none patches, the result is FALSE
* The left hand side can be another expression, so can be a reference to a variable
  or an file() invocation etc.
* The OID is also just a reference to a string, or function, or whatever.
* My manual description is very short. Someone else please help improve the description



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@219940 13f79535-47bb-0310-9956-ffa450edef68

87ac4362

The arguments to require are case-sensitive, so that "Require User" and · 76c6bbdf

Richard Bowen authored Jul 20, 2005

"Require Valid-User" don't work. This makes those comparisons
case-insensitive.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@219936 13f79535-47bb-0310-9956-ffa450edef68

76c6bbdf

Now you can run mod_deflate before mod_cache, and cache it. · 1b50b87c

Paul Querna authored Jul 20, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@219913 13f79535-47bb-0310-9956-ffa450edef68

1b50b87c

re-indent. · 7c7b4219

Paul Querna authored Jul 20, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@219908 13f79535-47bb-0310-9956-ffa450edef68

7c7b4219