Commits · a49541cb923ee9065c84898ffcbb63c100eedd1c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Apr 11, 2003

· a49541cb

William A. Rowe Jr authored Apr 11, 2003

  Time for disclosure details

  If anyone sees credit-where-credit-is-due that I've missed, please
  add those individuals.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99332 13f79535-47bb-0310-9956-ffa450edef68

a49541cb

add metafiles. These files contain information that is relevant for one · 936198ba

Andre Malo authored Apr 11, 2003

document but all variants of it (i.e. one basename), such as avail. languages,
formats etc.

(Note, that it's still a noop for the output.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99330 13f79535-47bb-0310-9956-ffa450edef68

936198ba

add the metafile attribute to all xml files. · 2f98727a

Andre Malo authored Apr 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99326 13f79535-47bb-0310-9956-ffa450edef68

2f98727a

add support for metafile attribute. · afbc4348

Andre Malo authored Apr 11, 2003

(not backported yet; but later)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99325 13f79535-47bb-0310-9956-ffa450edef68

afbc4348

Apr 10, 2003

add license in xml/html format. I'll keep the text version for now, at · bed02741

Andre Malo authored Apr 10, 2003

least for url stability reasons.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99322 13f79535-47bb-0310-9956-ffa450edef68

bed02741

ack. unconditional content-encoding has some nasty implications. · f6e5c779
Andre Malo authored Apr 10, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99321 13f79535-47bb-0310-9956-ffa450edef68
```
f6e5c779

Ya think if I hang around long enough, people will know how to spell my last · 40a13839

Justin Erenkrantz authored Apr 10, 2003

name. (Heck, I'm lucky if I get people to call me by my first name.)

Also split out something I didn't explicitly say as well, but may be true.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99320 13f79535-47bb-0310-9956-ffa450edef68

40a13839

Update transformations. · a682a74c

Yoshiki Hayashi authored Apr 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99319 13f79535-47bb-0310-9956-ffa450edef68

a682a74c

Update Japanese translations. · d8d5662a

Yoshiki Hayashi authored Apr 10, 2003

Submitted by: Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>
Reviewed by: Yoshiki Hayashi

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99318 13f79535-47bb-0310-9956-ffa450edef68

d8d5662a

ptoy :) · f967ee74

Andre Malo authored Apr 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99316 13f79535-47bb-0310-9956-ffa450edef68

f967ee74

Apr 09, 2003

Seems like this is decided. It can always be revisited in the · 987f6ba8

Joshua Slive authored Apr 09, 2003

future if we sind up with lots of versions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99315 13f79535-47bb-0310-9956-ffa450edef68

987f6ba8

Note that changes in the default httpd.conf do not violate our · 9e772a15

Joshua Slive authored Apr 09, 2003

backward-compatibility policy. We assume that people preserve their
own config files, rather than going back to the default each time.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99314 13f79535-47bb-0310-9956-ffa450edef68

9e772a15

· ca8601c5

William A. Rowe Jr authored Apr 09, 2003

Please consider and vote - see what this choice has done to us
r.e. .tar.gz.md5 files and so forth.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99313 13f79535-47bb-0310-9956-ffa450edef68

ca8601c5

consolidate code related to sig_coredump · 65d084e5

Jeff Trawick authored Apr 09, 2003

a note on perchild:
perchild exception handling was busted before this and is still busted
the problem I noticed was that a client that exposes a segfault never
gets its connection dropped and the parent never notices that the
child process that segfaulted hasexited

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99312 13f79535-47bb-0310-9956-ffa450edef68

65d084e5

update transformation · e365a08c

Andre Malo authored Apr 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99310 13f79535-47bb-0310-9956-ffa450edef68

e365a08c

if there's no sidebar, there's no need to squeeze the content. · 7ff70b65
Andre Malo authored Apr 09, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99309 13f79535-47bb-0310-9956-ffa450edef68
```
7ff70b65

update transformation · b5731425

Andre Malo authored Apr 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99304 13f79535-47bb-0310-9956-ffa450edef68

b5731425

use Google Search. · 21f16f5f

Andre Malo authored Apr 09, 2003

We may have to experimt a bit to get best results. This is a first
attempt.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99303 13f79535-47bb-0310-9956-ffa450edef68

21f16f5f

Clarify some wording. · 5f32e966

Chris Pepper authored Apr 09, 2003

	Note this change (as previously written, it implied that 1.3.5
	had this vulnerability, which is not true). I'm not sure if
	"httpd 2.0" is the preferred name.

-    <p>Note that in versions previous to 2.0.46 no escaping has been performed
+    <p>Note that in httpd 2.0 versions prior to 2.0.46, no escaping was performed
     on the strings from <code>%...r</code>, <code>%...i</code> and
     <code>%...o</code>. This was mainly to comply with the requirements of
     the Common Log Format. This implied that clients could insert control
     characters into the log, so you had to be quite careful when dealing
     with raw log files.</p>

-    <p>For security reasons starting with 2.0.46 non-printable and
+    <p>For security reasons, starting with 2.0.46, non-printable and
     other special characters are escaped mostly by using
     <code>\x<var>hh</var></code> sequences, where <var>hh</var> stands for
     the hexadecimal representation of the raw byte. Exceptions from this
     rule are <code>"</code> and <code>\</code> which are escaped by prepending
-    a backslash, and all whitespace characters that are written in their
-    C-notation (<code>\n</code>, <code>\t</code> etc).</p>
+    a backslash, and all whitespace characters which are written in their
+    C-style notation (<code>\n</code>, <code>\t</code> etc).</p>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99302 13f79535-47bb-0310-9956-ffa450edef68

5f32e966

Apr 07, 2003

done. · 9dae2a7e

Andre Malo authored Apr 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99298 13f79535-47bb-0310-9956-ffa450edef68

9dae2a7e

Update transformations. · e360e387

Yoshiki Hayashi authored Apr 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99294 13f79535-47bb-0310-9956-ffa450edef68

e360e387

Update Japanese translations. · 2d4b0eb5

Yoshiki Hayashi authored Apr 07, 2003

Submitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99293 13f79535-47bb-0310-9956-ffa450edef68

2d4b0eb5

Update transformations. · 0dd0bcc7

Yoshiki Hayashi authored Apr 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99292 13f79535-47bb-0310-9956-ffa450edef68

0dd0bcc7

Update Japanese translations. · 2ad2bc16

Yoshiki Hayashi authored Apr 07, 2003

Submitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99291 13f79535-47bb-0310-9956-ffa450edef68

2ad2bc16

new XML for howto/auth · 146172cc

Andre Malo authored Apr 07, 2003

I changed the references to the auth modules, so that they're matching
the new model, but it probably needs a rewrite anyway.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99288 13f79535-47bb-0310-9956-ffa450edef68

146172cc

Apr 06, 2003

document log escaping · 1e658a6a

Andre Malo authored Apr 06, 2003

Reviewed by: Astrid Ke�ler, Erik Abele


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99283 13f79535-47bb-0310-9956-ffa450edef68

1e658a6a

libexex -> libexec · 427afcd0

Richard Bowen authored Apr 06, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99282 13f79535-47bb-0310-9956-ffa450edef68

427afcd0

Add .NOTPARALLEL target for exports.c. This allows a parallel make build to · 13772c2f

Justin Erenkrantz authored Apr 06, 2003

complete successfully.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99280 13f79535-47bb-0310-9956-ffa450edef68

13772c2f

Further breakage from r.1.131: MODSSL_INFO_CB_ARG_TYPE also includes the *. · 6d03c204
Justin Erenkrantz authored Apr 06, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99279 13f79535-47bb-0310-9956-ffa450edef68
```
6d03c204

Fix compile breakage introduced in r1.131. · 0959e5fc

Justin Erenkrantz authored Apr 06, 2003

MODSSL_INFO_CB_ARG_TYPE already includes 'SSL' in its type.  Don't duplicate.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99278 13f79535-47bb-0310-9956-ffa450edef68

0959e5fc

new german XML for the index page · 5debf527

Andre Malo authored Apr 06, 2003

additionally add reference revision number to de.xml


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99275 13f79535-47bb-0310-9956-ffa450edef68

5debf527

The content-negotiation docs are a little misleading about what the · 8494e4d9

Joshua Slive authored Apr 06, 2003

RFC says.

PR: 18443


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99271 13f79535-47bb-0310-9956-ffa450edef68

8494e4d9

- new XML and XSLT for our start page · b76391d5

Andre Malo authored Apr 06, 2003

- required some changes in DTD, CSS and style/lang/* files

Reviewed by: Astrid Ke�ler, Erik Abele


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99270 13f79535-47bb-0310-9956-ffa450edef68

b76391d5

Apr 05, 2003

· c0246ec4

William A. Rowe Jr authored Apr 05, 2003

  Solve SSL-C breakage introduced in mod_ssl.h rev 1.129 and
  ssl_engine_kernel.c rev 1.88.  SSL* is not const under SSL-C.

  I've confirmed Jeff's comment that the original patch doesn't harm
  earlier OpenSSL versions which declared no arguments at all.

  I suspect now that we could fold
     #define MODSSL_BIO_CB_ARG_TYPE const char
     #define MODSSL_CRYPTO_CB_ARG_TYPE const char
     #define MODSSL_INFO_CB_ARG_TYPE const SSL*
  into a single MODSSL_CB_ARG_CONST define, but this works for now.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99263 13f79535-47bb-0310-9956-ffa450edef68

c0246ec4

· 880e1c08

William A. Rowe Jr authored Apr 05, 2003

  Noop MS DevStudio IDE change
 to include ssl_toolkit_compat.h
  in the list of project headers.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99261 13f79535-47bb-0310-9956-ffa450edef68

880e1c08

· ca8400b7

William A. Rowe Jr authored Apr 05, 2003

  Note the recent SSL-C fixes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99260 13f79535-47bb-0310-9956-ffa450edef68

ca8400b7

Move the dropped '--enable-layout' subdir logic into APR_SUBDIR_CONFIG macro · 1e6884ed

Justin Erenkrantz authored Apr 05, 2003

as a third parameter rather than manually computing it ourselves.

Add the ' prefix'd --enable-layout so that this can work with an autoconf-2.54+
generated configure. (Previously, the option would not be dropped with 2.54
or 2.57 since it unconditionally adds single-quotes which our case statement
would not catch.)

Try to shorten long invocations of APR_SUBDIR_CONFIG where possible.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99257 13f79535-47bb-0310-9956-ffa450edef68

1e6884ed

Update the RPM spec file (in line with changes to v2.0): · 1907aeae

Graham Leggett authored Apr 05, 2003

- Moved mime.types back to the default location.
- Added mod_ldap and friends, mod_cache and friends.
- Added openldap dependancy.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99256 13f79535-47bb-0310-9956-ffa450edef68

1907aeae

· dc42009f

William A. Rowe Jr authored Apr 05, 2003

  Have some consistency!  Fixes logic I introduced in 1.37.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99253 13f79535-47bb-0310-9956-ffa450edef68

dc42009f

· cd4fe3e2

William A. Rowe Jr authored Apr 05, 2003

Reapply the fix *intended* by rev 1.79 in a safer manner. Prior to
all assignments and the final SSL_free(), free ssl_conn->client_cert
to avoid leaks of this refcounted X509*. Prereleasing refcounted
objects is unsafe programming; fix applied to both branches.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99252 13f79535-47bb-0310-9956-ffa450edef68

cd4fe3e2