Skip to content
  1. Dec 16, 2008
  3. Dec 15, 2008
  5. Dec 12, 2008
  7. Dec 09, 2008
    • Joe Orton's avatar
      Improve mod_ssl's environment variable extraction to correctly handle · 514cab60
      Joe Orton authored 
      DNs with duplicate tags:

* modules/ssl/ssl_engine_vars.c:
  Augment the ssl_var_lookup_ssl_cert_dn_rec table with a flag
  to indicate whether RDNs of the given NID should be extracted
  to the environment.
  (extract_dn, modssl_var_extract_dns): New functions.

* modules/ssl/ssl_private.h (modssl_var_extract_dns): Add prototype.

* modules/ssl/ssl_engine_kernel.c: Remove SSL_*_DN_ from the list
  of variables to insert into the environment.
  (ssl_hook_Fixup): Use modssl_var_extract_dns to insert the
  SSL_*_DN_ variables efficiently and accurately, handling
  certs with duplicate RDN tags correctly.

PR: 45875


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@724717 13f79535-47bb-0310-9956-ffa450edef68
      514cab60
  9. Dec 07, 2008
  11. Dec 05, 2008
  13. Dec 03, 2008
  15. Dec 02, 2008
  17. Dec 01, 2008
  19. Nov 29, 2008
  21. Nov 26, 2008
  23. Nov 24, 2008
  25. Nov 16, 2008
  27. Nov 15, 2008
  29. Nov 14, 2008
  31. Nov 11, 2008
  33. Nov 10, 2008
  35. Nov 09, 2008
  37. Nov 06, 2008
  39. Nov 02, 2008
  41. Nov 01, 2008
  43. Oct 31, 2008
  45. Oct 29, 2008
    • Nick Kew's avatar
      Introduce modules/system, and mod_unixd.c · 97b31524
      Nick Kew authored 
      mod_unixd.c is only os/unix/unixd.c, turned into a module.
(or more accurately, an ugly hack).  Work in progress, and the
old unixd will have to go once the module build stuff is in place.

This re-introduces some of the unixd stuff (set user, group and chroot)
to mpm_simple, and should work equally well with existing MPMs.
It also paves the way for alternative privilege management schemes,
which can be implemented in alternative modules: this´ll be
necessary to run mpm_simple on non-unix-family platforms, and
of interest for alternative Unix implementations.  By relegating
everything to a child_init hook, we can mix-and-match, though
weĺl need to add a regime that prevents just going right ahead
with nothing and running as root.

Round tuits permitting, we should be able to simplify unixd.h too,
and look towards eliminating it.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@708935 13f79535-47bb-0310-9956-ffa450edef68
      97b31524