Commits · cc3135efe5d5323456f05bbb0e5816d46a31a983 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Aug 22, 2001

Use uniform wrapping for unistd.h, and don't include it if it's aready included via fileio.h · cc3135ef
Martin Kraemer authored Aug 22, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90491 13f79535-47bb-0310-9956-ffa450edef68
```
cc3135ef

destroy the brigade when we are done with it, rather than remove · e89d4cc5

Doug MacEachern authored Aug 22, 2001

one bucket at a time.  prevents a problem when downloading large files.
also change ssl_io_filter_Output to apache style
and change some variable names that should make the code easier to
read/understand, e.g. pbbIn -> bb, pbktIn -> bucket
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90490 13f79535-47bb-0310-9956-ffa450edef68

e89d4cc5

Aug 21, 2001

and swap Auth/UserCheck names to match the hook names, in hopes of preventing further foncusion · 5d6b7ae7
Doug MacEachern authored Aug 21, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90464 13f79535-47bb-0310-9956-ffa450edef68
```
5d6b7ae7

authentication/authorization hooks were backwards · 24e91165

Doug MacEachern authored Aug 21, 2001

make authentication hook run APR_HOOK_FIRST for FakeBasicAuth
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90463 13f79535-47bb-0310-9956-ffa450edef68

24e91165

· 4acf13a4

William A. Rowe Jr authored Aug 21, 2001

  Changes for rbb's #include/build openssl/inc32 patch.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90458 13f79535-47bb-0310-9956-ffa450edef68

4acf13a4

cut out some noise · 30455045

Doug MacEachern authored Aug 21, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90451 13f79535-47bb-0310-9956-ffa450edef68

30455045

get rid of asserts · b5ff8add

Doug MacEachern authored Aug 21, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90450 13f79535-47bb-0310-9956-ffa450edef68

b5ff8add

Aug 20, 2001

remove #if 0-ed ap_flush_conn() call; filters now handle flushing · 3840500b

Doug MacEachern authored Aug 20, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90446 13f79535-47bb-0310-9956-ffa450edef68

3840500b

remove unused #if 0-ed code when reading from the write bio · 1369afc2

Doug MacEachern authored Aug 20, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90445 13f79535-47bb-0310-9956-ffa450edef68

1369afc2

remove unused ssl_io_ functions · 4f135c56

Doug MacEachern authored Aug 20, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90444 13f79535-47bb-0310-9956-ffa450edef68

4f135c56

remove some unused hook code · e2aa81b8

Doug MacEachern authored Aug 20, 2001

enable child init hook
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90443 13f79535-47bb-0310-9956-ffa450edef68

e2aa81b8

Add the openssl/include/openssl directory to the INCLUDES variable. · 89d72b8b

Ryan Bloom authored Aug 20, 2001

This allows us to remove the openssl from the #include lines in the
mod_ssl files. This makes it easier to use a different SSL library,
with fewer changes to the mod_ssl files.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90435 13f79535-47bb-0310-9956-ffa450edef68

89d72b8b

Aug 17, 2001

· c75492c1

William A. Rowe Jr authored Aug 17, 2001

  Based on the VC6 switch - and pulling the win32 make files from cvs
  - some more ignores are in order.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90274 13f79535-47bb-0310-9956-ffa450edef68

c75492c1

· f98f2aed

William A. Rowe Jr authored Aug 17, 2001

The purpose of this patch is to toggle the debugging mode (default) to
Program Database (from Program Database for Modify on the fly debugging).

The net effect of this patch is to clean up all of the irrelevant entries
associated with either the debugging or release command line switches, and
generally straighten the projects as they would be exported from VC6/SP5.

The outcome of this patch is that VC5 users -should- be able to load and
build the workspace without any errors (as they used to have no symbols
database at all, the /ZI option doesn't work, they had to use cvtdsp.pl
to toggle these to /Zi.)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90269 13f79535-47bb-0310-9956-ffa450edef68

f98f2aed

· 4f0b06b1

William A. Rowe Jr authored Aug 17, 2001

Given a choice between chasing my tail to keep these updated, and rolling
a set when we actually roll a tarball, I'll take the later, thank you.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90268 13f79535-47bb-0310-9956-ffa450edef68

4f0b06b1

Aug 16, 2001

· 11f86444

William A. Rowe Jr authored Aug 16, 2001

  Ignore goodness


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90250 13f79535-47bb-0310-9956-ffa450edef68

11f86444

check for timeout on socket read when we check for ECONNRESET and eof · 5139fca7

Jeff Trawick authored Aug 16, 2001

previously, we'd die on an assert() (really nasty for threaded MPM) when
we hit a keepalive timeout for a browser like netscape which keeps the
connection open

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90244 13f79535-47bb-0310-9956-ffa450edef68

5139fca7

fix a few mod_ssl warnings for stuff like function which were neither · 99e9764c

Jeff Trawick authored Aug 16, 2001

static nor prototyped, char * vs. const char *, etc.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90238 13f79535-47bb-0310-9956-ffa450edef68

99e9764c

at least make a note of SSL_R_HTTP_REQUEST error (until this is properly dealt with) · 14e815d8
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90229 13f79535-47bb-0310-9956-ffa450edef68
```
14e815d8
if ssl shutdown happens earlier than expected, filter code needs be aware · ae5ce915
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90227 13f79535-47bb-0310-9956-ffa450edef68
```
ae5ce915
need to remove buckets from the output brigade, since we will be passing a different brigade · 9061e2ab
Doug MacEachern authored Aug 16, 2001
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90225 13f79535-47bb-0310-9956-ffa450edef68
```
9061e2ab

· d8bbd974

William A. Rowe Jr authored Aug 16, 2001

  More Versioning


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90208 13f79535-47bb-0310-9956-ffa450edef68

d8bbd974

enable ssl Translate, UserCheck, Access and Auth hooks · 41973558

Doug MacEachern authored Aug 16, 2001

add support for renegotiation during the Access hook
this requires hooking into the read and write SSL BIOs in order to
flush data to the client and read from the filter chain

this also requires that the ssl filters become "aware" that
renegotitation is in progress so that the BIOs are left alone for
SSL_renegotiate/SSL_do_handshake in ssl_hook_Access to deal with

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90185 13f79535-47bb-0310-9956-ffa450edef68

41973558

Aug 14, 2001

need to check return value of ssl_hook_process_connection · 3f07c272

Doug MacEachern authored Aug 14, 2001

if != APR_SUCCESS the ssl connection has been shutdown
(for example client cert was revoked)
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90155 13f79535-47bb-0310-9956-ffa450edef68

3f07c272

Aug 08, 2001

from madhu: no longer need to force eReadType and eMode · 459b594e

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90030 13f79535-47bb-0310-9956-ffa450edef68

459b594e

get POST requests working with mod_ssl · a8fb25b6

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90027 13f79535-47bb-0310-9956-ffa450edef68

a8fb25b6

drop a brace inside #if 0 so emacs can indent properly · 2a556b97

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90023 13f79535-47bb-0310-9956-ffa450edef68

2a556b97

s/apr_size_t/apr_off_t/ for input filter · 2c46fefd

Doug MacEachern authored Aug 08, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90022 13f79535-47bb-0310-9956-ffa450edef68

2c46fefd

Aug 07, 2001

· 257ea32d

William A. Rowe Jr authored Aug 07, 2001

  Update for the 2.0.23 tag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89994 13f79535-47bb-0310-9956-ffa450edef68

257ea32d

Remove all warnings from the input filtering stack. · ce327dda

Ryan Bloom authored Aug 07, 2001


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89987 13f79535-47bb-0310-9956-ffa450edef68

ce327dda

Aug 02, 2001

· 819909fa

William A. Rowe Jr authored Aug 02, 2001

  Fix typo in prior commit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89873 13f79535-47bb-0310-9956-ffa450edef68

819909fa

· 627761f7

William A. Rowe Jr authored Aug 02, 2001

  Adapt to changed declaration of apr_pool_sub_make()


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89871 13f79535-47bb-0310-9956-ffa450edef68

627761f7

Jul 31, 2001

· 312a48fc

William A. Rowe Jr authored Jul 31, 2001

  Ooops... my fooness.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89843 13f79535-47bb-0310-9956-ffa450edef68

312a48fc

· 544593e5

William A. Rowe Jr authored Jul 31, 2001

  Another huge file check, and one fewer emits


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89833 13f79535-47bb-0310-9956-ffa450edef68

544593e5

· 2f99a153

William A. Rowe Jr authored Jul 31, 2001

  Clean up some emits


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89832 13f79535-47bb-0310-9956-ffa450edef68

2f99a153

· 9fa922e5

William A. Rowe Jr authored Jul 31, 2001

Ok... for _today_ ...

This patch conditionally builds against openssl 0.9.6b _if_ openssl is
unpacked and properly built (using pretty much the defaults) in the
srclib/openssl/ directory. Someday soon this needs to be more exhaustive,
but this should solve the 80% problem :)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89823 13f79535-47bb-0310-9956-ffa450edef68

9fa922e5

· 49bb424a

William A. Rowe Jr authored Jul 31, 2001

  Missed a small bit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89822 13f79535-47bb-0310-9956-ffa450edef68

49bb424a

· 3da3de6f

William A. Rowe Jr authored Jul 31, 2001

enables the use of the ssl_var_lookup functionality in the various source
files in modules/ssl. The ap_hook_* functions are still not yet ported to
Apache 2.0 style

Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89819 13f79535-47bb-0310-9956-ffa450edef68

3da3de6f

· ae43f146

William A. Rowe Jr authored Jul 31, 2001

This patch eliminates the direct use of OS library calls (fopen and
other depreciated Apache 1.3 library utilities) from ssl_engine_pphrase.c
and ssl_util_ssl.c.

Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89818 13f79535-47bb-0310-9956-ffa450edef68

ae43f146

· 5c5fde92

William A. Rowe Jr authored Jul 31, 2001

- eliminated the use of ssl_log - it used to cause seg faults during cleanup
since the conn_rec will no longer be valid.
- eliminated the "for (;;)" processing loop in ssl_io_filter_Output() -
we'll have to do that in churn_output() if required, so that any remaining
OpenSSL data (if available) is transferred before we call the
CloseConnection.
- Any remaining data in SSL should be cleaned up ideally in the
APR_BUCKET_IS_EOS() processing stage itself, as we close the SSL connection
here.


Submitted by:	Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:	William Rowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89816 13f79535-47bb-0310-9956-ffa450edef68

5c5fde92