Skip to content
  1. Sep 06, 2009
  3. Aug 28, 2009
  5. Aug 27, 2009
  7. Aug 26, 2009
  9. Aug 23, 2009
  11. Aug 16, 2009
  13. Aug 12, 2009
  15. Jul 29, 2009
  17. Jul 24, 2009
  19. Jul 09, 2009
  21. Jul 05, 2009
  23. Jul 02, 2009
  25. Jun 23, 2009
  27. Jun 17, 2009
  29. Jun 16, 2009
  31. Jun 11, 2009
  33. Jun 01, 2009
  35. May 27, 2009
  37. May 25, 2009
  39. May 21, 2009
  41. May 19, 2009
  43. May 14, 2009
  45. May 06, 2009
  47. Apr 23, 2009
  49. Apr 21, 2009
  51. Apr 16, 2009
    • Jeff Trawick's avatar
      mod_cgid: Improve handling of long AF_UNIX socket names (ScriptSock). · 4e64121b
      Jeff Trawick authored 
      Dynamically allocate the AF_UNIX sockaddr based on the required filename size.
For some platforms (e.g., Solaris, OS X, FreeBSD), this allows longer
socket filenames to be used.

When the name is too long, the failure reporting is more consistent and a 
socket with truncated pathname is not left stranded.  The user still needs
to use ScriptSock to specify a shorter name.

An extra unlink() failure message may be generated when attempting to clean 
up the socket after a daemon initialization error; the message is surpressed 
for ENOTENT, but not for ENAMETOOLONG.

PR: 47037



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@765725 13f79535-47bb-0310-9956-ffa450edef68
      4e64121b
  53. Apr 11, 2009
  55. Apr 10, 2009
  57. Apr 08, 2009
  59. Apr 02, 2009
  61. Apr 01, 2009
    • Ruediger Pluem's avatar
      * Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives to enable · 738272a3
      Ruediger Pluem authored 
        stricter checking of remote server certificates.

  (docs/manual/mod/mod_ssl.xml)
    Documentation of SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.

  (modules/proxy/mod_proxy_http.c)
    Set the hostname of the request URL as note on the connection.

  (modules/ssl/ssl_private.h)
    Add proxy_ssl_check_peer_expire and proxy_ssl_check_peer_cn fields to
    the SSLSrvConfigRec.

  (modules/ssl/ssl_engine_config.c)
    Directives stuff for SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.

  (modules/ssl/ssl_engine_io.c)
    Check whether the remote servers certificate is expired / if there is a
    mismatch between the requested hostanme and the remote server certificates
    CN field.
    Be able to parse ASN1 times.

  (modules/ssl/mod_ssl.c)
    Directives stuff for SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@760866 13f79535-47bb-0310-9956-ffa450edef68
      738272a3
  63. Mar 31, 2009