Skip to content
GitLab
  1. 12 Dec, 2008 2 commits
  3. 09 Dec, 2008 1 commit
    • Joe Orton's avatar
      Improve mod_ssl's environment variable extraction to correctly handle · 514cab60
      Joe Orton authored 
      DNs with duplicate tags:

* modules/ssl/ssl_engine_vars.c:
  Augment the ssl_var_lookup_ssl_cert_dn_rec table with a flag
  to indicate whether RDNs of the given NID should be extracted
  to the environment.
  (extract_dn, modssl_var_extract_dns): New functions.

* modules/ssl/ssl_private.h (modssl_var_extract_dns): Add prototype.

* modules/ssl/ssl_engine_kernel.c: Remove SSL_*_DN_ from the list
  of variables to insert into the environment.
  (ssl_hook_Fixup): Use modssl_var_extract_dns to insert the
  SSL_*_DN_ variables efficiently and accurately, handling
  certs with duplicate RDN tags correctly.

PR: 45875


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@724717 13f79535-47bb-0310-9956-ffa450edef68
      514cab60
  5. 07 Dec, 2008 2 commits
  7. 05 Dec, 2008 3 commits
  9. 03 Dec, 2008 3 commits
  11. 02 Dec, 2008 1 commit
  13. 01 Dec, 2008 3 commits
  15. 29 Nov, 2008 2 commits
  17. 26 Nov, 2008 1 commit
  19. 24 Nov, 2008 1 commit
  21. 16 Nov, 2008 2 commits
  23. 15 Nov, 2008 2 commits
  25. 14 Nov, 2008 1 commit
  27. 11 Nov, 2008 1 commit
  29. 10 Nov, 2008 1 commit
  31. 09 Nov, 2008 1 commit
  33. 06 Nov, 2008 1 commit
  35. 02 Nov, 2008 3 commits
  37. 01 Nov, 2008 1 commit
  39. 31 Oct, 2008 3 commits
  41. 29 Oct, 2008 1 commit
    • Nick Kew's avatar
      Introduce modules/system, and mod_unixd.c · 97b31524
      Nick Kew authored 
      mod_unixd.c is only os/unix/unixd.c, turned into a module.
(or more accurately, an ugly hack).  Work in progress, and the
old unixd will have to go once the module build stuff is in place.

This re-introduces some of the unixd stuff (set user, group and chroot)
to mpm_simple, and should work equally well with existing MPMs.
It also paves the way for alternative privilege management schemes,
which can be implemented in alternative modules: this´ll be
necessary to run mpm_simple on non-unix-family platforms, and
of interest for alternative Unix implementations.  By relegating
everything to a child_init hook, we can mix-and-match, though
weĺl need to add a regime that prevents just going right ahead
with nothing and running as root.

Round tuits permitting, we should be able to simplify unixd.h too,
and look towards eliminating it.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@708935 13f79535-47bb-0310-9956-ffa450edef68
      97b31524
  43. 22 Oct, 2008 3 commits
  45. 19 Oct, 2008 1 commit