Commits · dce26c18ffdc8e3d48729dbc78eb427ea1844271 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Oct 30, 2014

show a bit more of openssl's -status display · dce26c18

Jeff Trawick authored Oct 30, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1635558 13f79535-47bb-0310-9956-ffa450edef68

dce26c18

MPMs, core: make duplicated listeners (SO_REUSEPORT) introduced in r1599531 · 8d6c0a52

Yann Ylavic authored Oct 30, 2014

less intrusive.

Submitted by: Yingqi Lu <yingqi.lu@intel.com>
Modified/Committed by: ylavic

Add ListenCoresBucketsRatio which is a configurable ratio between the number of
CPU cores (online) and the number of listeners buckets to create, defaulting to
zero (so that listeners buckets become an opt-in, ie. ncpus / ratio > 1).
This could also be made an opt-out by using the previous hardcoded value (8) as
default.

Make ap_close_listeners() act on all the listeners (including duplicated ones),
since the function is also called externally (eg. mod_cgid, mod_ssl_ct and
possibly any third party module) to cleanup opened descriptors when a process
is forked (the duplicated listeners are kept in a scoped/static variable).

Add ap_close_listeners_ex() to close a single bucket of listeners, used by the
children to close unused duplicates and internally by ap_close_listeners().

Make ap_duplicate_listeners() compute the number o...

8d6c0a52

make docs · 0e285c87

Jeff Trawick authored Oct 30, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1635511 13f79535-47bb-0310-9956-ffa450edef68

0e285c87

more hints for OCSP Stapling: · 8df79242

Jeff Trawick authored Oct 30, 2014

* when a different cache mechanism is used...
* testing that your server sends an OCSP response


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1635510 13f79535-47bb-0310-9956-ffa450edef68

8df79242

core: Do not match files when using DirectoryMatch. PR41867. · 5dc18062

Jan Kaluža authored Oct 30, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1635428 13f79535-47bb-0310-9956-ffa450edef68

5dc18062

Oct 28, 2014

Follow up to r1632742: CHANGES entry. · 371ba695

Yann Ylavic authored Oct 28, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634836 13f79535-47bb-0310-9956-ffa450edef68

371ba695

Fix compatibility note · 87b649e1

Christophe Jaillet authored Oct 28, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634791 13f79535-47bb-0310-9956-ffa450edef68

87b649e1

Oct 27, 2014

Remove commented-out SSLStaplingForceURL at global scope. · 1c95e9f6

Jeff Trawick authored Oct 27, 2014

Global or not, its use is specialized and those that need it won't need a sample,
and others may be confused.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634736 13f79535-47bb-0310-9956-ffa450edef68

1c95e9f6

When using EBCDIC encoding, HTTPS through ProxyPass and ProxyRemote doesn't · 90307789

Eric Covener authored Oct 27, 2014

work correctly. PR 57092

Submitted By: Edward Lu 
Committed By: covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634425 13f79535-47bb-0310-9956-ffa450edef68

90307789

Oct 25, 2014

fix another case of 304 response sent to an unconditional request · d2960057
Eric Covener authored Oct 25, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634237 13f79535-47bb-0310-9956-ffa450edef68
```
d2960057

Rebuild. · c1d9c980

Lucien Gentis authored Oct 25, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634223 13f79535-47bb-0310-9956-ffa450edef68

c1d9c980

XML update. · 68f4a0a6

Lucien Gentis authored Oct 25, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634222 13f79535-47bb-0310-9956-ffa450edef68

68f4a0a6

Oct 24, 2014

* Use the correct server name for SNI in case the backend SSL connection itself · 2f35f2b9

Ruediger Pluem authored Oct 24, 2014

  is established via a proxy server.

PR: 57139
Submitted by: Szabolcs Gyurko <szabolcs gyurko.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1634120 13f79535-47bb-0310-9956-ffa450edef68

2f35f2b9

Oct 23, 2014

make docs · 3d10b235

Jeff Trawick authored Oct 23, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633794 13f79535-47bb-0310-9956-ffa450edef68

3d10b235

trying to enable OCSP Stapling without certificate chain · abd1ec4a

Jeff Trawick authored Oct 23, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633793 13f79535-47bb-0310-9956-ffa450edef68

abd1ec4a

add hint on discovering that OCSP Stapling cache is too small · 7c467976
Jeff Trawick authored Oct 23, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633731 13f79535-47bb-0310-9956-ffa450edef68
```
7c467976

add OCSP Stapling configuration, disabled by default · b3d3c064

Jeff Trawick authored Oct 23, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633730 13f79535-47bb-0310-9956-ffa450edef68

b3d3c064

Oct 22, 2014

tab vs space · 68465986

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633531 13f79535-47bb-0310-9956-ffa450edef68

68465986

tab vs space · fb50badd

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633530 13f79535-47bb-0310-9956-ffa450edef68

fb50badd

tab vs space · 387c6e37

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633529 13f79535-47bb-0310-9956-ffa450edef68

387c6e37

tab vs space · f802a576

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633528 13f79535-47bb-0310-9956-ffa450edef68

f802a576

tab vs space · a6367a8b

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633527 13f79535-47bb-0310-9956-ffa450edef68

a6367a8b

tab vs space · bfa582c7

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633525 13f79535-47bb-0310-9956-ffa450edef68

bfa582c7

Fix indent. · fa2c6b20

Christophe Jaillet authored Oct 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633522 13f79535-47bb-0310-9956-ffa450edef68

fa2c6b20

Oct 20, 2014

mod_ssl: Fix SSL_CLIENT_VERIFY value when "SSLVerifyClient optional_no_ca" and · 55d269dd

Jan Kaluža authored Oct 20, 2014

SSLSessionCache are used and SSL session is resumed. SSL_CLIENT_VERIFY value
has been set to SUCCESS on resumption even when originally it was set to
GENEROUS. PR 53193.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633085 13f79535-47bb-0310-9956-ffa450edef68

55d269dd

Fix strange indent. · 573973d7

Christophe Jaillet authored Oct 20, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1633031 13f79535-47bb-0310-9956-ffa450edef68

573973d7

Oct 18, 2014

Rebuild. · 612d950c

Lucien Gentis authored Oct 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632817 13f79535-47bb-0310-9956-ffa450edef68

612d950c

XML update. · 11ab0a4e

Lucien Gentis authored Oct 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632816 13f79535-47bb-0310-9956-ffa450edef68

11ab0a4e

mod_buffer: avoid unlikely access to freed memory and forward flushed buckets · 25113349

Yann Ylavic authored Oct 18, 2014

            immediatly.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632742 13f79535-47bb-0310-9956-ffa450edef68

25113349

mod_cache: avoid unlikely access to freed memory. · 3e25ba89

Yann Ylavic authored Oct 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632740 13f79535-47bb-0310-9956-ffa450edef68

3e25ba89

Oct 17, 2014

make docs · 30a6434c

Jeff Trawick authored Oct 17, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632456 13f79535-47bb-0310-9956-ffa450edef68

30a6434c

Add how-to guide for OCSP Stapling · 65584fa8

Jeff Trawick authored Oct 17, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632454 13f79535-47bb-0310-9956-ffa450edef68

65584fa8

Oct 16, 2014

Remove some backported item · b184230a

Christophe Jaillet authored Oct 16, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1632443 13f79535-47bb-0310-9956-ffa450edef68

b184230a

Oct 15, 2014

mod_substitute: No real functional change, but: · 4f8a366e

Rainer Jung authored Oct 15, 2014

- define default for maximum line length
  indepenent of MAX_STRING_LEN
- Clarify line length check with a comment
- add supported 'b' suffix to directive
  description


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631983 13f79535-47bb-0310-9956-ffa450edef68

4f8a366e

Oct 14, 2014

make docs · d221ac9a

Jeff Trawick authored Oct 14, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631886 13f79535-47bb-0310-9956-ffa450edef68

d221ac9a

very minor improvements to OCSP-related doc · f24ed4cd

Jeff Trawick authored Oct 14, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631885 13f79535-47bb-0310-9956-ffa450edef68

f24ed4cd

SSLOCSPUseRequestNonce already in 2.4.x branch · 2e6f5f50

Jeff Trawick authored Oct 14, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631880 13f79535-47bb-0310-9956-ffa450edef68

2e6f5f50

include mod_ssl_ct · b9460380

Jeff Trawick authored Oct 14, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631603 13f79535-47bb-0310-9956-ffa450edef68

b9460380

Oct 13, 2014

the hard-coded limit on LimitRequestLine has been gone since 2.1.x, see r819480 · f8aedd3f

Eric Covener authored Oct 13, 2014

and r102840. PR57009

Submitted By: Ed Lu



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631516 13f79535-47bb-0310-9956-ffa450edef68

f8aedd3f

Oct 11, 2014

Rebuild. · 3a9caa34

Lucien Gentis authored Oct 11, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1631056 13f79535-47bb-0310-9956-ffa450edef68

3a9caa34