Commits · f5440e325f4a4083c7cdba62999047213920c7dd · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Apr 01, 2002

Don't allow initialization to succeed if we can't get a socket · f5440e32

Jeff Trawick authored Apr 01, 2002

corresponding to one of the Listen statements.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94358 13f79535-47bb-0310-9956-ffa450edef68

f5440e32

Migrate perchild to the new lock API, and clean up some of the logic · c7165e65

Ryan Bloom authored Apr 01, 2002

surrounding the FD passing. This doesn't work yet, but it is getting
closer. Currently, the problem is that we don't correctly read the data
from the socket so that it can be passed to the correct child.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94357 13f79535-47bb-0310-9956-ffa450edef68

c7165e65

Match the new APR_BUCKET_BUFF_SIZE. We want this to be slightly less than · 142127b8

Cliff Woolley authored Apr 01, 2002

8KB to leave room for the various allocators' internal structures while
still fitting into a total of 8KB.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94356 13f79535-47bb-0310-9956-ffa450edef68

142127b8

Made AB's use of the Host: header rfc2616 compliant as · 237e1aff

Dirk-Willem van Gulik authored Apr 01, 2002

reported by Taisuke Yamada <tai@iij.ad.jp>

PR:
Obtained from: Mailing list
Submitted by: Taisuke Yamada <tai@iij.ad.jp>
Reviewed by: Dirk-Willem van Gulik


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94355 13f79535-47bb-0310-9956-ffa450edef68

237e1aff

A bunch of Perchild changes. · 569d08a7

Ryan Bloom authored Apr 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94353 13f79535-47bb-0310-9956-ffa450edef68

569d08a7

Make perchild work with the new bucket_allocation API. Also, allow · 3aad7838

Ryan Bloom authored Apr 01, 2002

the Perchild directives to take both numerical UID/GID and the
logical user name/group name.
PR:	9784
Submitted by:	named UID/GID logic: Scott Lamb <slamb@slamb.org>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94352 13f79535-47bb-0310-9956-ffa450edef68

3aad7838

· 1339115d

William A. Rowe Jr authored Apr 01, 2002

pointer subtraction yeilds a ssize_t, fix emit by notating the
expression in terms of addition

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94351 13f79535-47bb-0310-9956-ffa450edef68

1339115d

· f971306a

William A. Rowe Jr authored Apr 01, 2002

  Fix another linkage error for 2.0.34 and cvs head


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94350 13f79535-47bb-0310-9956-ffa450edef68

f971306a

Get the Perchild MPM to compile and serve pages again. There are a lot · dd2c27f4

Ryan Bloom authored Apr 01, 2002

of bugs left in this, but I am taking things one step at a time.  This
will work again.  This also gets perchild using the correct variable for
MaxRequestsPerChild

PR:     9856, 9855, 9052


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94349 13f79535-47bb-0310-9956-ffa450edef68

dd2c27f4

Mar 31, 2002

it is sunny and warm in tahoe, still plenty of snow on the mountains · 5dbcde05
Doug MacEachern authored Mar 31, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94348 13f79535-47bb-0310-9956-ffa450edef68
```
5dbcde05

· b9ce107d

William A. Rowe Jr authored Mar 31, 2002

  Roll these changes into 2.0.34


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94347 13f79535-47bb-0310-9956-ffa450edef68

b9ce107d

Handle CR/LF terminated lines from CGI scripts. · b25ef72a

Brian Havard authored Mar 31, 2002

Reviewed by: Brian Pane


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94346 13f79535-47bb-0310-9956-ffa450edef68

b25ef72a

Mar 30, 2002

Removed the single-byte header reads from mod_cgid · 9bd04318

Brian Pane authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94344 13f79535-47bb-0310-9956-ffa450edef68

9bd04318

Fixed script error logging, which I'd left commented out after making · 409f928a

Brian Pane authored Mar 30, 2002

the changes to use a brigade to read the script headers
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94343 13f79535-47bb-0310-9956-ffa450edef68

409f928a

Fix for a bug that I introduced when eliminating the single-byte · 700dc9ac

Brian Pane authored Mar 30, 2002

reads in mod_cgi: eof wasn't treated as an error condition when
reading the script headers, so we were delivering a 200 when a
CGI script produced no output.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94342 13f79535-47bb-0310-9956-ffa450edef68

700dc9ac

add/use EVP_PKEY_reference_inc and X509_reference_inc compat macros · 50520944

Doug MacEachern authored Mar 30, 2002

to get these changes working with sslc


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94341 13f79535-47bb-0310-9956-ffa450edef68

50520944

add sslc compat for sk_X509_INFO_free · 9ee3dd99

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94340 13f79535-47bb-0310-9956-ffa450edef68

9ee3dd99

add SSLProxyCARevocation{File,Path} directives to support CRLs in the proxy · 482d6c95
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94338 13f79535-47bb-0310-9956-ffa450edef68
```
482d6c95

pass sc to myCtxConfig macro · 95209119

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94337 13f79535-47bb-0310-9956-ffa450edef68

95209119

make it possible for proxy to use CRL callback · 6f967851

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94336 13f79535-47bb-0310-9956-ffa450edef68

6f967851

enable the verify callback for proxy · e977f287

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94334 13f79535-47bb-0310-9956-ffa450edef68

e977f287

ap_proxy_http_request needs to check the return status of ap_pass_brigade · 305e19be
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94333 13f79535-47bb-0310-9956-ffa450edef68
```
305e19be

change sc->server references to myCtxConfig, so proxy can use the · ed6d34bd

Doug MacEachern authored Mar 30, 2002

verify callback.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94332 13f79535-47bb-0310-9956-ffa450edef68

ed6d34bd

add myCtxConfig macro · f6c69be7

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94331 13f79535-47bb-0310-9956-ffa450edef68

f6c69be7

implement proxy client certificate callback · 50aebdaf

Doug MacEachern authored Mar 30, 2002

(uses SSLProxyMachineCertificate{File,Cert} when downstream server
requires a client certificate)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94329 13f79535-47bb-0310-9956-ffa450edef68

50aebdaf

input filter should not return failure when ssl runtime wants to read more · 9815373b
Doug MacEachern authored Mar 30, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94328 13f79535-47bb-0310-9956-ffa450edef68
```
9815373b

ssl_io_input_read needs to return something other than APR_SUCCESS · d1c282b6

Doug MacEachern authored Mar 30, 2002

when bucket read from socket was successful,
but there was an error within the ssl runtime.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94327 13f79535-47bb-0310-9956-ffa450edef68

d1c282b6

load SSLProxyMachineCertificate{File,Path} · e4c98eb5

Doug MacEachern authored Mar 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94324 13f79535-47bb-0310-9956-ffa450edef68

e4c98eb5

enable/cleanup SSL_X509_INFO_load_{file,path} functions for use in · d818b898

Doug MacEachern authored Mar 30, 2002

proxy context


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94323 13f79535-47bb-0310-9956-ffa450edef68

d818b898

Fix the version string. We want to end up with "mod_ssl/2.0.xx", not · a7043344

Cliff Woolley authored Mar 30, 2002

"mod_ssl/Apache/2.0.xx".


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94320 13f79535-47bb-0310-9956-ffa450edef68

a7043344

Mar 29, 2002

Cloudy today. · a5480f9d

Joshua Slive authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94317 13f79535-47bb-0310-9956-ffa450edef68

a5480f9d

Removed email address on request - as obviscation was slammed down on the list... · eecbb192

Dirk-Willem van Gulik authored Mar 29, 2002

Removed email address on request - as obviscation was slammed down on the list - and Google is your friend in any case


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94315 13f79535-47bb-0310-9956-ffa450edef68

eecbb192

add SSLProxyEngine directive. this was not required in the 1.x based · 69e18950

Doug MacEachern authored Mar 29, 2002

mod_ssl because the SSL_CTX was created and configured for *every*
request. unlike in 2.0 where we configure the proxy SSL_CTX at
startup time, which is much better for performance. but we don't want
to configure a proxy context for every vhost if it isn't going to be
used, for the same reasons we don't create a server context for every
vhost unless SSLEngine is on.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94314 13f79535-47bb-0310-9956-ffa450edef68

69e18950

check the return value of ap_proxy_ssl_enable · 10bda6ff

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94313 13f79535-47bb-0310-9956-ffa450edef68

10bda6ff

Syncing makes no sense now · 87e69bb3

Jim Jagielski authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94309 13f79535-47bb-0310-9956-ffa450edef68

87e69bb3

· d41edaec

Paul J. Reder authored Mar 29, 2002

PR:
Obtained from:
Submitted by:	Paul J. Reder
Reviewed by:

Remove the MPM_SYNC_CHILD_TABLE macro since there is no longer a scoreboard
file that needs to be synched.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94308 13f79535-47bb-0310-9956-ffa450edef68

d41edaec

The old, legacy (and unused) code in which the scoreboard was totally · 0c8afb14

Jim Jagielski authored Mar 29, 2002

and completely contained in a file (SCOREBOARD_FILE) has been
removed. This does not affect scoreboards which are *mapped* to
files using named-shared-memory at all. This implies that scoreboards
must be based, at some level, on native shared memory (mmap, shm_open,
shmget, whatever), but the code has assumed that for quite awhile
now. Having the scoreboard be *based* on a file makes no sense today.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94306 13f79535-47bb-0310-9956-ffa450edef68

0c8afb14

BUCKET FREELISTS · d6e02ee3

Cliff Woolley authored Mar 29, 2002

Add an allocator-passing mechanism throughout the bucket brigades API.

From Apache's standpoint, the apr_bucket_alloc_t* used throughout a given
connection is stored in the conn_rec by the create_connection hook. That
means it's the MPM's job to optimize recycling of apr_bucket_alloc_t's --
the MPM must ensure that no two threads can ever use the same one at the
same time, for instance.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94304 13f79535-47bb-0310-9956-ffa450edef68

d6e02ee3

import ssl_proxy_enable in the post config phase, otherwise LoadModule · 7cfb2f35

Doug MacEachern authored Mar 29, 2002

order may leave us without the function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94303 13f79535-47bb-0310-9956-ffa450edef68

7cfb2f35

remove ssl_engine_ext.c · e783d880

Doug MacEachern authored Mar 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94302 13f79535-47bb-0310-9956-ffa450edef68

e783d880