Commits · 984819ed04284a13a70adbed8679b172facb1a42 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jul 24, 2003

Refresh parts of the proxy docs, with special attention to clarifying the · 984819ed

Joshua Slive authored Jul 24, 2003

security issues in forward and reverse proxy situations.

- Remove the historical narrative in the top section and simply state
the facts.

- Remove the table of contents, since we already generate one for the sidebar.

- Rewrite the forward vs reverse section to be clear on the purpose of
the two types of proxy.

- Add some basic examples of each type of proxy to replace the example removed
from the default config file.

- Add a note to the access control section on forward versus reverse proxys,
and also add a reference to mod_access that got removed at some point.

- Add a warning to the ProxyPass docs that ProxyRequests should be off.

- Shorten some section titles.

I did not add the
ProxyBlock :25
because I don't have a proxy server to test it on at the moment.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100759 13f79535-47bb-0310-9956-ffa450edef68

984819ed

'omit' has one 'm' · ec2e77bd

Martin Kraemer authored Jul 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100758 13f79535-47bb-0310-9956-ffa450edef68

ec2e77bd

Without this hint, users often do not know how to use the proxy in an intranet · 056bd645
Martin Kraemer authored Jul 24, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100757 13f79535-47bb-0310-9956-ffa450edef68
```
056bd645

Fix long-standing typo · 93cc0a44

Martin Kraemer authored Jul 24, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100756 13f79535-47bb-0310-9956-ffa450edef68

93cc0a44

Jul 23, 2003

More votes. · 7f40123e

Erik Abele authored Jul 23, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100755 13f79535-47bb-0310-9956-ffa450edef68

7f40123e

- In 2.0 it is possible for LanguagePriority to have an effect, even for · c3e9a673

Joshua Slive authored Jul 23, 2003

a properly configured HTTP/1.1 client.

- Reference MultiViewsMatch.

PR: 21726, 21830


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100753 13f79535-47bb-0310-9956-ffa450edef68

c3e9a673

sync · 3d57cab6

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100752 13f79535-47bb-0310-9956-ffa450edef68

3d57cab6

sync · 21c9d289

Andre Malo authored Jul 23, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100750 13f79535-47bb-0310-9956-ffa450edef68

21c9d289

Hit a couple files that hadn't been adapted to account · 659914b9

Joshua Slive authored Jul 23, 2003

for the move from <Directory proxy:> to <proxy>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100748 13f79535-47bb-0310-9956-ffa450edef68

659914b9

don't compute the strlen of dconf->directory three times · dc252ddd

Andre Malo authored Jul 23, 2003

Submitted by: Justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100744 13f79535-47bb-0310-9956-ffa450edef68

dc252ddd

remove duped section · ab6c185b

Andre Malo authored Jul 23, 2003

Submitted by: Justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100743 13f79535-47bb-0310-9956-ffa450edef68

ab6c185b

Jul 22, 2003

fix mod_status compilation on Win32 (stolen from mod_dav). · 2a3e7666

Andre Malo authored Jul 22, 2003

We should consider a rename of AP_*_HOOK_* to CORE_*_HOOK_* ;-)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100737 13f79535-47bb-0310-9956-ffa450edef68

2a3e7666

Don't attempt to hold all of the response until we're done. We'll pass data on · f8e2e5bc

Justin Erenkrantz authored Jul 22, 2003

when the zlib buffer becomes full and we need to reset the buffer anyway.

Also, tidy up a similar semantic when we see the EOS by returning an error
if ap_pass_brigade gets an error (we'd lose it otherwise).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100730 13f79535-47bb-0310-9956-ffa450edef68

f8e2e5bc

Jul 21, 2003

Fixed a trio of mod include bugs. The first two were · c1f1d9b8

Cliff Woolley authored Jul 21, 2003

reported and investigated by Ron Park on dev@httpd in msgid
<161E04AB9955D54E826FD86360578554D27087@169.32.17.10.nat.cnet.com>;
the third was reported by Kevin Varley in PR 21095.

Bug 1:  An incorrect parameter to bndm() was causing start sequences
        that spanned buckets to drop characters.
Bug 2:  Failed conditional text spanning brigades would cause portions
        of the text that should have been removed to be present anyway.
Bug 3:  Dropped characters when the end sequence spanned an
        8000-byte boundary with MMAP off.

PR: 21095
Submitted by:	Ron Park <ronald.park@cnet.com>, Andr� Malo, Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100728 13f79535-47bb-0310-9956-ffa450edef68

c1f1d9b8

further cleanup, and add esperanto code · 396e4d39

Andre Malo authored Jul 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100725 13f79535-47bb-0310-9956-ffa450edef68

396e4d39

Add optional hook to extend mod_status output. · 3b354de9

Joe Orton authored Jul 21, 2003

* configure.in: Add modules/generators to include path.

* Makefile.in: Install mod_status.h.

* modules/generators/mod_status.h: New file.

* modules/generators/mod_status.c: Implement ap_run_status_hook.
(status_handler): Run status hooks.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100724 13f79535-47bb-0310-9956-ffa450edef68

3b354de9

cleanup addlanguage/comments and languagepriority · b08ad908

Andre Malo authored Jul 21, 2003

PR: 21743


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100722 13f79535-47bb-0310-9956-ffa450edef68

b08ad908

vote & note · d49518a0

Andre Malo authored Jul 21, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100721 13f79535-47bb-0310-9956-ffa450edef68

d49518a0

Prevent segfaults after SSL renegotiation failures. · 006872c6

Joe Orton authored Jul 21, 2003

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Set aborted flag
after renegotiation failure.

* modules/ssl/ssl_engine_io.c (ssl_filter_write, ssl_io_filter_output):
Don't dereference BIOs in filter_ctx when filter_ctx->pssl is NULL.
(ssl_filter_io_shutdown): Set aborted flag on abortive shutdown.

PR: 21370
Submitted by: Hartmut Keil <Hartmut.Keil@adnovum.ch>
Cleaned up by: Jeff Trawick, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100720 13f79535-47bb-0310-9956-ffa450edef68

006872c6

reject overlong credentials from the commandline · 59b42e8c

Andre Malo authored Jul 21, 2003

Acked by: Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100718 13f79535-47bb-0310-9956-ffa450edef68

59b42e8c

Jul 18, 2003

Vote; note something missing in sections.html, and decrease the priority · ead9f6ce

Joshua Slive authored Jul 18, 2003

of the var/ issue.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100692 13f79535-47bb-0310-9956-ffa450edef68

ead9f6ce

when prefixing document root, use the core translator instead · 6e8e4ad7

Andre Malo authored Jul 18, 2003

of baking our own. The core function is much better maintained
and probably more safe.
Additionally this removes just another fixed buffer :)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100681 13f79535-47bb-0310-9956-ffa450edef68

6e8e4ad7

Jul 17, 2003

update transformation · 84400a06

Andre Malo authored Jul 17, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100680 13f79535-47bb-0310-9956-ffa450edef68

84400a06

step two: get a rid of the old do_expand function. · 4eb8921f

Andre Malo authored Jul 17, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100676 13f79535-47bb-0310-9956-ffa450edef68

4eb8921f

optimization; rewrite the do_expand function in order to: · 7f615307

Andre Malo authored Jul 17, 2003

  + give it a better interface
  + get a rid of most of the fixed stack buffers and then
  + no longer limit rewritten uris, expanded variables etc to
    2k
  + make it better readable and understandable at all.

This is a two-tiered commit for better diffs.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100675 13f79535-47bb-0310-9956-ffa450edef68

7f615307

Speed up ap_md5digest() a little. · 3e8eb8c7

Joe Orton authored Jul 17, 2003

* util_md5.c (ap_md5digest): Use a larger buffer; ensure size is a
multiple of 64 to prevent buffering in MD5 code.  Remove redundant
'length' variable.  Reset read size in case of short reads.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100672 13f79535-47bb-0310-9956-ffa450edef68

3e8eb8c7

Jul 16, 2003

Oops. Replace * with *:80 in the <VirtualHost> example also. · bd947046
Richard Bowen authored Jul 16, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100657 13f79535-47bb-0310-9956-ffa450edef68
```
bd947046

Replace NameVirtualHost * with NameVirtualHost *:80 in the example · 33f0fb69

Richard Bowen authored Jul 16, 2003

config.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100654 13f79535-47bb-0310-9956-ffa450edef68

33f0fb69

add some linebreaks and reorder case alphabetically for better · 394f5224

Andre Malo authored Jul 16, 2003

readability. No code changes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100652 13f79535-47bb-0310-9956-ffa450edef68

394f5224

optimization: no need to use the pool here. This is · 5c2292c9

Andre Malo authored Jul 16, 2003

obviously a static value.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100651 13f79535-47bb-0310-9956-ffa450edef68

5c2292c9

optimization: · e24a5526

Andre Malo authored Jul 16, 2003

- add comment about what subst_prefix_path function does
- reduce the use of fixed buffers
- get a rid of unnecessary memory operations


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100650 13f79535-47bb-0310-9956-ffa450edef68

e24a5526

· d8e3a94d

Paul J. Reder authored Jul 16, 2003

Just fixing some improperly formatted entries.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100649 13f79535-47bb-0310-9956-ffa450edef68

d8e3a94d

Switch ap_filter_flush() to ap_pass_brigade(). This removes a layer of · 93fa982d

Greg Stein authored Jul 16, 2003

function calls, provides type safety for the ap_filter_t*, and
clarifies what is really going on (i.e. we aren't sending a FLUSH
bucket of any kind).

* mod_dav.c (dav_send_multistatus, dav_method_propfind): change the
    ap_filter_flush call to ap_pass_brigade; flip the params to match
    the prototype.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100647 13f79535-47bb-0310-9956-ffa450edef68

93fa982d

* util_filter.h (ap_filter_flush): clarify that this function has · f2f0e0db

Greg Stein authored Jul 16, 2003

nothing to do with FLUSH buckets. It is simply a cover function
for ap_pass_brigade for use with the apr_brigade_* writing
functions.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100646 13f79535-47bb-0310-9956-ffa450edef68

f2f0e0db

optimization: speed up ruleflag parsing. · d9d0d799

Andre Malo authored Jul 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100645 13f79535-47bb-0310-9956-ffa450edef68

d9d0d799

Jul 15, 2003

optimization: no need to search linear for headers. · dbaf6336

Andre Malo authored Jul 15, 2003

apr_table_get should be more efficient nearly always.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100644 13f79535-47bb-0310-9956-ffa450edef68

dbaf6336

optimization: rewrite reduce_uri function: · 4b823417

Andre Malo authored Jul 15, 2003

get a rid of static buffers and unnecessary memory operations


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100643 13f79535-47bb-0310-9956-ffa450edef68

4b823417

· 95855a2b

Paul J. Reder authored Jul 15, 2003

Update the header token parsing code to allow LWS between the
token word and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100642 13f79535-47bb-0310-9956-ffa450edef68

95855a2b

· 3481be6d

Paul J. Reder authored Jul 15, 2003

Eliminate creation of a temporary table in ap_get_mime_headers_core()
Submitted by:   Joe Schaefer <joe+gmane@sunstarsys.com>
Reviewed by:    Brian Pane
Backported by:  Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100638 13f79535-47bb-0310-9956-ffa450edef68

3481be6d

minor optimization. No need to use a function overhead here. · ee611704

Andre Malo authored Jul 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100637 13f79535-47bb-0310-9956-ffa450edef68

ee611704