Commits · b7bcb9630fbb1bed7d7e7e3cde5b13fbed0ec4e8 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

May 03, 2010

ab was sending wrong number of requests when keepalive enabled. · b7bcb963

Daniel Earl Poirier authored May 03, 2010

Thanks to Bryn Dole for the patch.  
PR: 48497


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@940526 13f79535-47bb-0310-9956-ffa450edef68

b7bcb963

Apr 26, 2010

Use the more specific 408 (timed out) instead of a generic 400 during a timeout · 728d10ce

Eric Covener authored Apr 26, 2010

reading a chunk-length.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@938265 13f79535-47bb-0310-9956-ffa450edef68

728d10ce

Apr 25, 2010

PR49167, unexpected 413 and double-errordoc during a timeout reading a · e2740db8

Eric Covener authored Apr 25, 2010

chunk-size.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@937858 13f79535-47bb-0310-9956-ffa450edef68

e2740db8

Apr 21, 2010
- Add in BalancerNonce directive... useful for shared-secrets. · 6049d4cd
  Jim Jagielski authored Apr 21, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@936407 13f79535-47bb-0310-9956-ffa450edef68
```
  6049d4cd
Apr 11, 2010

mod_proxy_connect: Support port ranges in AllowConnect · 12fa8e32

Stefan Fritsch authored Apr 11, 2010

PR: 23673


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@932927 13f79535-47bb-0310-9956-ffa450edef68

12fa8e32

Apr 02, 2010

small style tweaks to r930125 · e1b62abc

Jeff Trawick authored Apr 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@930254 13f79535-47bb-0310-9956-ffa450edef68

e1b62abc

Apr 01, 2010

Proxy balancer: support setting error status according to · ee977d24

Nick Kew authored Apr 01, 2010

HTTP response code from a backend.
PR 48939 [Daniel Ruggeri <DRuggeri primary.net>]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@930125 13f79535-47bb-0310-9956-ffa450edef68

ee977d24

Mar 29, 2010

htcacheclean: Introduce the ability to clean specific URLs from the · 2c53f9a3

Graham Leggett authored Mar 29, 2010

cache, if provided as an optional parameter on the command line.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@928921 13f79535-47bb-0310-9956-ffa450edef68

2c53f9a3

core: Introduce the IncludeStrict directive, which explicitly fails · 8c6c6904

Graham Leggett authored Mar 29, 2010

server startup if no files or directories match a wildcard path.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@928916 13f79535-47bb-0310-9956-ffa450edef68

8c6c6904

Mar 27, 2010

htcacheclean: Report additional statistics about entries deleted. · bb52e71b

Graham Leggett authored Mar 27, 2010

PR: 48944
Submitted by: Mark Drayton mark markdrayton.info


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@928223 13f79535-47bb-0310-9956-ffa450edef68

bb52e71b

Mar 22, 2010

Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all · 2f2451fb

William A. Rowe Jr authored Mar 22, 2010

builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper
build of openssl is required for 'SSLFIPS on'.  

PR: 46270  
Submitted by: Dr Stephen Henson <steve openssl.org>, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@925980 13f79535-47bb-0310-9956-ffa450edef68

2f2451fb

Mar 10, 2010

r921347 had a bug report. Add a CHANGES entry. · 985f3850

Stefan Fritsch authored Mar 10, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@921583 13f79535-47bb-0310-9956-ffa450edef68

985f3850

Move initialization to process_connection hook, right before · 5ef45455

Stefan Fritsch authored Mar 10, 2010

ap_process_http_request. This ensures that we are not inserted for other
protocol handlers (like mod_ftp) and mod_proxy's backend connections.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@921378 13f79535-47bb-0310-9956-ffa450edef68

5ef45455

Mar 06, 2010

Sync Changelog · 3ba02090

William A. Rowe Jr authored Mar 06, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919690 13f79535-47bb-0310-9956-ffa450edef68

3ba02090

Mar 05, 2010

try to get bug fix entries for future 2.3.7 alpha caught up with 2.2.15 · e09d6ae9

Jeff Trawick authored Mar 05, 2010

where appropriate


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919552 13f79535-47bb-0310-9956-ffa450edef68

e09d6ae9

* Only log a 408 if it is no keepalive timeout. · 932a0d6e

Ruediger Pluem authored Mar 05, 2010

PR: 39785
Submitted by: Mark Montague <markmont umich.edu>, rpluem
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@919323 13f79535-47bb-0310-9956-ffa450edef68

932a0d6e

Mar 03, 2010

reflect assignment of CVE-2010-0434 · 9d130409

Jeff Trawick authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918428 13f79535-47bb-0310-9956-ffa450edef68

9d130409

Mar 02, 2010

SECURITY: CVE-2010-0425 (cve.mitre.org) · e9602aec

William A. Rowe Jr authored Mar 02, 2010

mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.

Submitted by: Brett Gervasoni <brettg senseofsecurity.com>, trawick
Reviewed by: trawick, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917870 13f79535-47bb-0310-9956-ffa450edef68

e9602aec

Feb 26, 2010

spelling · 807b9e24

Jeff Trawick authored Feb 26, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916789 13f79535-47bb-0310-9956-ffa450edef68

807b9e24

Feb 25, 2010

Add -L option to create a hard link to the current log file. · b93eb47d

Daniel Earl Poirier authored Feb 25, 2010

PR: 48761
Submitted by: <lindon orthanc.ca>
With additional changes by: poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916377 13f79535-47bb-0310-9956-ffa450edef68

b93eb47d

Feb 24, 2010

make some sense of the difference between "Client" and "Global" certs in mod_ldap. · 1957b836

Eric Covener authored Feb 24, 2010

PR46541

Submitted By: Paul Reder, Eric Covener
Reviewed By: Eric Covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915660 13f79535-47bb-0310-9956-ffa450edef68

1957b836

Feb 23, 2010

mod_negotiation: Preserve query string over multiviews negotiation. · 481cc464

Nick Kew authored Feb 23, 2010

PR 33112
Joergen Thomsen


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915407 13f79535-47bb-0310-9956-ffa450edef68

481cc464

mod_ldap: Eliminate a potential crash with multiple LDAPTrustedClientCert when · f344666b

Eric Covener authored Feb 23, 2010

some are not password-protected.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915295 13f79535-47bb-0310-9956-ffa450edef68

f344666b

Feb 22, 2010

tweak formatting of some recent entries · f94fd7b9

Jeff Trawick authored Feb 22, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@912668 13f79535-47bb-0310-9956-ffa450edef68

f94fd7b9

Fix startup segfault when the Mutex directive is used but no loaded · 92a72185

Jeff Trawick authored Feb 22, 2010

modules use httpd mutexes.

Add an init call from core's pre-config hook to ensure init is
performed before the config is parsed.

PR: 48787


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@912666 13f79535-47bb-0310-9956-ffa450edef68

92a72185

Feb 20, 2010

mod_proxy_http: get the headers right in a HEAD request with ProxyErrorOverride.PR 41646 · 68521337

Nick Kew authored Feb 20, 2010

Analysis by Stuart Children; patch by niq


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@912063 13f79535-47bb-0310-9956-ffa450edef68

68521337

Feb 16, 2010

support/rotatelogs: Support the simplest log rotation case, log · 2ad086fe

Graham Leggett authored Feb 16, 2010

truncation. Useful when the log is being processed in real time
using a command like tail.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@910719 13f79535-47bb-0310-9956-ffa450edef68

2ad086fe

support/htcacheclean: Teach it how to write a pid file (modelled on · 961a3e34

Graham Leggett authored Feb 16, 2010

httpd's writing of a pid file) so that it becomes possible to run
more than one instance of htcacheclean on the same machine.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@910705 13f79535-47bb-0310-9956-ffa450edef68

961a3e34

Log command line on startup, so there's a record of command line · 36110078

Daniel Earl Poirier authored Feb 16, 2010

arguments like -f.  Suggested by Shaya Potter.  [Dan Poirier]
PR: 48752


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@910684 13f79535-47bb-0310-9956-ffa450edef68

36110078

Feb 14, 2010

Introduce mod_reflector, a handler capable of reflecting POSTed · 835ccb19

Graham Leggett authored Feb 14, 2010

request bodies back within the response through the output filter
stack. Can be used to turn an output filter into a web service.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@910017 13f79535-47bb-0310-9956-ffa450edef68

835ccb19

Feb 13, 2010

mod_proxy_http: Make sure that when an ErrorDocument is served · cfd3ccf6

Graham Leggett authored Feb 13, 2010

from a reverse proxied URL, that the subrequest respects the status
of the original request. This brings the behaviour of proxy_handler
in line with default_handler. PR 47106.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@909899 13f79535-47bb-0310-9956-ffa450edef68

cfd3ccf6

Support wildcards in both the directory and file components of · 81fec05a

Graham Leggett authored Feb 13, 2010

the path specified by the Include directive.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@909878 13f79535-47bb-0310-9956-ffa450edef68

81fec05a

Feb 12, 2010

Support remote https proxies by using HTTP CONNECT. · 1b9cdee0

Rainer Jung authored Feb 12, 2010

PR: 19188
Submitted by: Philippe Dutrueux <lilas evidian.com>
Reviewed by: rjung


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@909323 13f79535-47bb-0310-9956-ffa450edef68

1b9cdee0

Feb 04, 2010

worker: don't report server has reached MaxClients until it does. · 99bc1a36

Daniel Earl Poirier authored Feb 04, 2010

Add warning when within MinSpareThreads.

PR: 46996


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906535 13f79535-47bb-0310-9956-ffa450edef68

99bc1a36

Feb 03, 2010

Fix CHANGES entry to reflect change in r904853 · 30a1ce13

Stefan Fritsch authored Feb 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906261 13f79535-47bb-0310-9956-ffa450edef68

30a1ce13

Feb 02, 2010

mod_session: Session expiry was being initialised, but not updated · 85f2731d

Graham Leggett authored Feb 02, 2010

on each session save, resulting in timed out sessions when there
should not have been. Fixed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905490 13f79535-47bb-0310-9956-ffa450edef68

85f2731d

Feb 01, 2010

mod_log_config: Add the R option to log the handler used within the · 9e61eb23

Graham Leggett authored Feb 01, 2010

request.
Submitted by: Christian Folini <christian.folini netnea com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905420 13f79535-47bb-0310-9956-ffa450edef68

9e61eb23

Allow fine control over the removal of Last-Modified and ETag headers · 5d4f3cd9

Graham Leggett authored Feb 01, 2010

within the INCLUDES filter, making it possible to cache responses if
desired. Fix the default value of the SSIAccessEnable directive.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@905406 13f79535-47bb-0310-9956-ffa450edef68

5d4f3cd9

Jan 30, 2010

Allow the Define directive to undefine a variable by prefixing the · f96f37a7

Stefan Fritsch authored Jan 30, 2010

argument with a '!'.

PR: 35350


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@904768 13f79535-47bb-0310-9956-ffa450edef68

f96f37a7

Ooops. We are at 2.3.6 by now. · 8c048e88

Stefan Fritsch authored Jan 30, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@904766 13f79535-47bb-0310-9956-ffa450edef68

8c048e88