Commits · 9febe215c1b39854304c62de3432b622e25968a9 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Sep 18, 2001

Ryan Bloom authored Sep 18, 2001

Submitted by:	 Cody Sherr <csherr@covalent.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91074 13f79535-47bb-0310-9956-ffa450edef68

9febe215

Sep 10, 2001

· 0b6ade8d

William A. Rowe Jr authored Sep 10, 2001

I don't seriously expect this solves the segfault ... but it does make
the code more legible, and protects particularly ugly unset values.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90979 13f79535-47bb-0310-9956-ffa450edef68

0b6ade8d

Aug 30, 2001

dont block when handling non-ssl request · fec658a9

Doug MacEachern authored Aug 30, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90802 13f79535-47bb-0310-9956-ffa450edef68

fec658a9

Aug 27, 2001

Allow mod_ssl to send back an error message if an HTTP request is sent · cc803702

Ryan Bloom authored Aug 27, 2001

over an HTTPS connection. This also adds an ap_remove_input_filter
function, which should be used to remove the SSL input filter in this
case, as soon as this code is stressed a bit more.

For right now, we are sending the same message that we used to send in
mod_ssl for Apache 1.3.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90724 13f79535-47bb-0310-9956-ffa450edef68

cc803702

Aug 26, 2001

· 01389e40

William A. Rowe Jr authored Aug 26, 2001

Toggle the /Zi flag to allow all supportd versions of VC (5, 6, 7) to
build 'out of the box' in debugging mode.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90686 13f79535-47bb-0310-9956-ffa450edef68

01389e40

Aug 24, 2001

force OpenSSL to ignore process local-caching and to always · ea444b92

Doug MacEachern authored Aug 24, 2001

get/set/delete sessions using mod_ssl's callbacks
PR:
Obtained from:
Submitted by:   Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:    dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90654 13f79535-47bb-0310-9956-ffa450edef68

ea444b92

these #ifs were really confusing emacs indentation, easier for humans to parse this way too · 2d073730
Doug MacEachern authored Aug 24, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90653 13f79535-47bb-0310-9956-ffa450edef68
```
2d073730

enable i/o debugging · f5a46455

Doug MacEachern authored Aug 24, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90645 13f79535-47bb-0310-9956-ffa450edef68

f5a46455

churn_output should return the value of ap_pass_brigade · fa70d3c5

Doug MacEachern authored Aug 24, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90640 13f79535-47bb-0310-9956-ffa450edef68

fa70d3c5

ssl_var_lookup() is enabled · 407211f3

Doug MacEachern authored Aug 24, 2001

apr optional functions do not need to be unregistered
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90625 13f79535-47bb-0310-9956-ffa450edef68

407211f3

apr_os_thread_current() call needs #if APR_HAS_THREADS protection · 85e727e8

Doug MacEachern authored Aug 24, 2001

PR:
Obtained from:
Submitted by:    Justin Erenkrantz <jerenkrantz@ebuilt.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90622 13f79535-47bb-0310-9956-ffa450edef68

85e727e8

fix prototype · 4115d970

Doug MacEachern authored Aug 24, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90621 13f79535-47bb-0310-9956-ffa450edef68

4115d970

implement CRYPTO_set_id_callback · 0396f27d

Doug MacEachern authored Aug 24, 2001

PR:
Obtained from:
Submitted by:	Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90620 13f79535-47bb-0310-9956-ffa450edef68

0396f27d

change APR_LOCKALL to APR_INTRAPROCESS for crypto locks · e7a5a7fd

Doug MacEachern authored Aug 24, 2001

PR:
Obtained from:
Submitted by:	Justin Erenkrantz <jerenkrantz@ebuilt.com>
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90618 13f79535-47bb-0310-9956-ffa450edef68

e7a5a7fd

only set the crypto locking callback if mpm is threaded · 4761d9cb

Doug MacEachern authored Aug 24, 2001

get rid of some warnings introduced by the original patch
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90614 13f79535-47bb-0310-9956-ffa450edef68

4761d9cb

Implement CRYPTO_set_locking_callback() for mod_ssl · 6906cff1

Doug MacEachern authored Aug 24, 2001

PR:
Obtained from:
Submitted by:	Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90612 13f79535-47bb-0310-9956-ffa450edef68

6906cff1

support "SSLVerifyClient optional_no_ca" · 33aae133

Doug MacEachern authored Aug 24, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90599 13f79535-47bb-0310-9956-ffa450edef68

33aae133

Aug 23, 2001

prevent double lookup of ssl::verify::error · 7857ec71

Doug MacEachern authored Aug 23, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90597 13f79535-47bb-0310-9956-ffa450edef68

7857ec71

sc->szPassPhraseDialogPath is now constified, so we have to use · 1e77b358

Cliff Woolley authored Aug 23, 2001

ap_strchr_c instead of strchr (which == ap_strchr on my system).

Submitted by: Ryan Bloom

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90595 13f79535-47bb-0310-9956-ffa450edef68

1e77b358

· 50427922

William A. Rowe Jr authored Aug 23, 2001

  Add some appropriate constness to the config


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90577 13f79535-47bb-0310-9956-ffa450edef68

50427922

· b9d8f0a7

William A. Rowe Jr authored Aug 23, 2001

  Silly compiler, const char* is for text :)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90575 13f79535-47bb-0310-9956-ffa450edef68

b9d8f0a7

· b5cebf57

William A. Rowe Jr authored Aug 23, 2001

Fix most-bogus ap_server_root_relative() cases. These don't include
the cases where we are trying to ap_server_root_relative() a pipe cmd!

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90561 13f79535-47bb-0310-9956-ffa450edef68

b5cebf57

Doug MacEachern authored Aug 23, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90537 13f79535-47bb-0310-9956-ffa450edef68

7dbf2239

performance: change an O(n) while loop to an equivalent O(1) brigade macro · a94ea8ec
Cliff Woolley authored Aug 23, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90536 13f79535-47bb-0310-9956-ffa450edef68
```
a94ea8ec

Another step in improving legibility by factoring out some redundant code · 3d113cb7

Cliff Woolley authored Aug 23, 2001

(how many times can you test the same condition in one function? :-)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90535 13f79535-47bb-0310-9956-ffa450edef68

3d113cb7

· c373f7ba

William A. Rowe Jr authored Aug 23, 2001

Revert these from my last commit ... I had no intention of changing
them in the first place :(

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90533 13f79535-47bb-0310-9956-ffa450edef68

c373f7ba

Nit: the lack of brackets was driving me crazy · 40904d46

Cliff Woolley authored Aug 23, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90531 13f79535-47bb-0310-9956-ffa450edef68

40904d46

Simplify the apr_read_type_e vs. ap_input_mode_t silliness. The two · 335b3ac6

Cliff Woolley authored Aug 23, 2001

are compatible (due to our early abort when PEEK mode is requested),
so we don't have to go to so much effort to convert from one to the other.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90530 13f79535-47bb-0310-9956-ffa450edef68

335b3ac6

· baf88df2

William A. Rowe Jr authored Aug 23, 2001

Complete the rename of the ssl_scache_status_register and
ssl_ext_proxy_register (which has yet to be renamed for it's
future location, since I'm not going further at the moment
with implementing it's functionallity, all my focus is on
the ssl_var_register arm.)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90524 13f79535-47bb-0310-9956-ffa450edef68

baf88df2

Aug 22, 2001

· 938ec753

William A. Rowe Jr authored Aug 22, 2001

Remove a ton o' cruft. Moves the mod_log_config 'var' extensions to
ssl_engine_vars.c.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90517 13f79535-47bb-0310-9956-ffa450edef68

938ec753

There's only one way for bb to be non-NULL, so these two · 707cdaed

Cliff Woolley authored Aug 22, 2001

cases can be combined.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90513 13f79535-47bb-0310-9956-ffa450edef68

707cdaed

remove #if 0-ed ssl_hook_NewConnection code; was only left for reference, · c1627cde

Doug MacEachern authored Aug 22, 2001

no longer needed
remove #if 0-ed ssl_hook_TimeoutConnection code; ssl no longer talks directly
to the socket
PR:
Obtained from:
Submitted by:    madhu
Reviewed by:	 dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90511 13f79535-47bb-0310-9956-ffa450edef68

c1627cde

another update from madhu · d4ca8363

Doug MacEachern authored Aug 22, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90509 13f79535-47bb-0310-9956-ffa450edef68

d4ca8363

client auth is enabled · e2d67097

Doug MacEachern authored Aug 22, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90505 13f79535-47bb-0310-9956-ffa450edef68

e2d67097

move some code duplication into ssl_abort() function · 0ed2c8c0

Doug MacEachern authored Aug 22, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90504 13f79535-47bb-0310-9956-ffa450edef68

0ed2c8c0

Enable ssl client authentication at SSL_accept time · 1b6af4f9

Doug MacEachern authored Aug 22, 2001

PR:
Obtained from:
Submitted by:	Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90503 13f79535-47bb-0310-9956-ffa450edef68

1b6af4f9

some updated pointed out by madhu · f2f40bce

Doug MacEachern authored Aug 22, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90500 13f79535-47bb-0310-9956-ffa450edef68

f2f40bce

rather than creating small 1024 byte buckets of output data, · 73176fcc

Doug MacEachern authored Aug 22, 2001

create a transient bucket pointing directly to the BIO mem buff.
this makes for a dramatic increase in performance. previously,
downloading large files (2Mb-5Mb-ish) made my laptop start to
smoke from the fan spinning so fast to cool the cpu.
also, apache stylize churn_output()
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90497 13f79535-47bb-0310-9956-ffa450edef68

73176fcc

· 04495c7d

William A. Rowe Jr authored Aug 22, 2001

  Explicitly fix some types, and opt-out on macro conflicts


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90496 13f79535-47bb-0310-9956-ffa450edef68

04495c7d

Use uniform wrapping for unistd.h, and don't include it if it's aready included via fileio.h · cc3135ef
Martin Kraemer authored Aug 22, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90491 13f79535-47bb-0310-9956-ffa450edef68
```
cc3135ef