Commits · aeeb0af59acd2357d2ac0595ad28bbbdf1da51df · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

13 Mar, 2002 14 commits

SSL_SESSION_id2sz() was NOT THREAD SAFE. it returned a pointer to a · aeeb0af5

Doug MacEachern authored Mar 13, 2002

static variable.  fixed.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93899 13f79535-47bb-0310-9956-ffa450edef68

aeeb0af5

SSL_SESSION_id2sz() is somewhat expensive, make sure we only call it · 159a5bd3

Doug MacEachern authored Mar 13, 2002

if SSLLogLevel >= info


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93898 13f79535-47bb-0310-9956-ffa450edef68

159a5bd3

cleanup logging of CRL, includes ridding of some malloc/frees · 98dee1ac
Doug MacEachern authored Mar 13, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93897 13f79535-47bb-0310-9956-ffa450edef68
```
98dee1ac

couple o minor style/log fixos · 9b7acee8

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93896 13f79535-47bb-0310-9956-ffa450edef68

9b7acee8

use ptemp in ssl_init_FindCAList() rather than creating a subpool. · a7a6d87f
Doug MacEachern authored Mar 13, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93895 13f79535-47bb-0310-9956-ffa450edef68
```
a7a6d87f

switch to ptemp pool for ssl_pphrase_Handle · ea3476dd

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93894 13f79535-47bb-0310-9956-ffa450edef68

ea3476dd

only call: ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: "); · e38d2b0d

Doug MacEachern authored Mar 13, 2002

once at startup. if there is value in calling it more than once at
startup, it should be done explicitly rather than hidden in
ssl_tmp_keys_init().

switch to ptemp pool when calling ssl_rand_seed() at startup.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93893 13f79535-47bb-0310-9956-ffa450edef68

e38d2b0d

remove ssl_engine_ds.c · c93f8ce6

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93892 13f79535-47bb-0310-9956-ffa450edef68

c93f8ce6

remove obsolete ssl_ds_{table,array} api · e24b9b9c

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93891 13f79535-47bb-0310-9956-ffa450edef68

e24b9b9c

replace ssl_ds_array usage with apr_array_header_t · f71404bf

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93890 13f79535-47bb-0310-9956-ffa450edef68

f71404bf

Enable mod_mem_cache to use apr_atomic operators in managing cache_object · c0cd5ac3

Bill Stoddard authored Mar 13, 2002

reference counting. Enabled by default via the USE_ATOMICS preproc directive.
This compiles cleanly and serves pages on Windows. Not compiled or tested on
any other OS.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93889 13f79535-47bb-0310-9956-ffa450edef68

c0cd5ac3

A bit more cleanup · 3e04ba50

Bill Stoddard authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93888 13f79535-47bb-0310-9956-ffa450edef68

3e04ba50

minor ssl_init_CheckServers() enhancements: · 3613332f

Doug MacEachern authored Mar 13, 2002

- pass the ptemp (temporary pool) so we don't need to create a subpool
  and destroy it ourselves.

- change ssl_ds_table usage to apr_hash_t


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93887 13f79535-47bb-0310-9956-ffa450edef68

3613332f

folding more duplication in ssl_tmp_keys_init · cffbd697

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93886 13f79535-47bb-0310-9956-ffa450edef68

cffbd697

12 Mar, 2002 26 commits

cleanup tmp key callbacks. each had assigned the same (1024 bit) value · 521013ef

Doug MacEachern authored Mar 12, 2002

in 3 different places.  the old code did nothing special in the case
of the export flag either.

add an ssl_log in each to trace when keys are being handed out.

add some XXX comments.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93885 13f79535-47bb-0310-9956-ffa450edef68

521013ef

simplify the way we find the family of an apr_sockaddr_t · af7cdd3d

Jeff Trawick authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93884 13f79535-47bb-0310-9956-ffa450edef68

af7cdd3d

for the sake of readablity, · 40017a14

Doug MacEachern authored Mar 12, 2002

change: SSL_TKPIDX_{DH,RSA}{512,1024}
to:     SSL_TMP_KEY_{DH,RSA}_{512,1024}


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93883 13f79535-47bb-0310-9956-ffa450edef68

40017a14

split ssl_init_TmpKeysHandle function to init/free functions, · df7c5dd3

Doug MacEachern authored Mar 12, 2002

and make them static to ssl_engine_init.c


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93882 13f79535-47bb-0310-9956-ffa450edef68

df7c5dd3

it is not required that temporary keys survive restarts, since they · 51f4236e

Doug MacEachern authored Mar 12, 2002

are generated and destroyed on every restart.

so get rid of SSLModConfigRec.tTmpKeys table and mess that was
managing it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93881 13f79535-47bb-0310-9956-ffa450edef68

51f4236e

cleanup some code paths · bbf0c059

Bill Stoddard authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93880 13f79535-47bb-0310-9956-ffa450edef68

bbf0c059

remove version checks for using EGD · 75d242a4

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93879 13f79535-47bb-0310-9956-ffa450edef68

75d242a4

remove call to legacy X509V3_add_standard_extensions() function, · a403c34a

Doug MacEachern authored Mar 12, 2002

not needed with OpenSSL 0.9.6+


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93878 13f79535-47bb-0310-9956-ffa450edef68

a403c34a

we require OpenSSL 0.9.6+ · b7253fa5

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93877 13f79535-47bb-0310-9956-ffa450edef68

b7253fa5

Remove some deprecated comments. Delete some unused variables. · ce5cce30
Bill Stoddard authored Mar 12, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93876 13f79535-47bb-0310-9956-ffa450edef68
```
ce5cce30

removing unused ssl_init_ChildKill · 1239f2b8

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93875 13f79535-47bb-0310-9956-ffa450edef68

1239f2b8

making ssl_init_SSLLibrary() static · 5efb96ed

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93874 13f79535-47bb-0310-9956-ffa450edef68

5efb96ed

cleanup version component construction. · e933cff6

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93873 13f79535-47bb-0310-9956-ffa450edef68

e933cff6

fold duplication of SSL{Proxy}VerifyDepth directives into · 6ef38478

Doug MacEachern authored Mar 12, 2002

ssl_cmd_verify_depth_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93872 13f79535-47bb-0310-9956-ffa450edef68

6ef38478

Fixed a type mismatch · e09008d7

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93871 13f79535-47bb-0310-9956-ffa450edef68

e09008d7

moving SSLVerifyClient directive parsing into ssl_cmd_verify_parse · ff411be9

Doug MacEachern authored Mar 12, 2002

function, which can also be used for SSLProxyVerify directive.

dropping support for undocumented integer form of levels (0..3)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93870 13f79535-47bb-0310-9956-ffa450edef68

ff411be9

Added NetWare to the ifdef list · fa60cedd

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93869 13f79535-47bb-0310-9956-ffa450edef68

fa60cedd

Fixed the slashes on the server root path · 13c2c491

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93868 13f79535-47bb-0310-9956-ffa450edef68

13c2c491

Added the AWK script to the build that generates the default HTTPD.conf file · ff7fc535
Bradley Nicholes authored Mar 12, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93867 13f79535-47bb-0310-9956-ffa450edef68
```
ff7fc535

fold duplication of SSL{Proxy}Protocol directives into · 4bb8a127

Doug MacEachern authored Mar 12, 2002

ssl_cmd_protocol_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93865 13f79535-47bb-0310-9956-ffa450edef68

4bb8a127

fold some duplication of server certs/keys directive checking into · 2d2cbe6e

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_aidx_max function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93864 13f79535-47bb-0310-9956-ffa450edef68

2d2cbe6e

folding some command handler duplication into two generic functions: · bc8f39f6

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_file and ssl_cmd_check_dir.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93863 13f79535-47bb-0310-9956-ffa450edef68

bc8f39f6

get rid of some warnings for currently unused/unprototyped functions. · 19de4d52

Doug MacEachern authored Mar 12, 2002

(we can actually compile mod_ssl with -Werror if -Wstrict-prototypes
is taken out)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93862 13f79535-47bb-0310-9956-ffa450edef68

19de4d52

minor performance enhancement: no need to use md5 of VHostID for the · 9b7c8953

Doug MacEachern authored Mar 12, 2002

session id, just use the VHostID itself.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93861 13f79535-47bb-0310-9956-ffa450edef68

9b7c8953

dropping hungarian notation · 61b63d7a

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93860 13f79535-47bb-0310-9956-ffa450edef68

61b63d7a

minor style changes · 53074581

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93859 13f79535-47bb-0310-9956-ffa450edef68

53074581