Commits · f60e083d1faabde4fa389f43acdd057c7e0c9492 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Sep 27, 2015

deduplicate the code handling the directory traversal for the · f60e083d

Kaspar Brand authored Sep 27, 2015

SSL[Proxy]CACertificatePath and SSLProxyMachineCertificatePath
directives


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705539 13f79535-47bb-0310-9956-ffa450edef68

f60e083d

Sep 26, 2015

Add MMN bump: Add protocols and protocols_honor_order to core_server_config. · 12268c51

Graham Leggett authored Sep 26, 2015

Add hooks protocol_propose, protocol_switch and protocol_get. Add
ap_select_protocol(), ap_switch_protocol(), ap_get_protocol(). Add
HTTP_MISDIRECTED_REQUEST.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705500 13f79535-47bb-0310-9956-ffa450edef68

12268c51

Rebuild. · 6ba34c77

Lucien Gentis authored Sep 26, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705477 13f79535-47bb-0310-9956-ffa450edef68

6ba34c77

XML update. · abba6091

Lucien Gentis authored Sep 26, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705476 13f79535-47bb-0310-9956-ffa450edef68

abba6091

Sep 25, 2015

update transformation · e04d765d

André Malo authored Sep 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705343 13f79535-47bb-0310-9956-ffa450edef68

e04d765d

typo · a108ecb4

Gregg Lewis Smith authored Sep 25, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705260 13f79535-47bb-0310-9956-ffa450edef68

a108ecb4

* Disable the http2 modules if nghttp2 is not present · 23c61b63

Ruediger Pluem authored Sep 25, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705257 13f79535-47bb-0310-9956-ffa450edef68

23c61b63

mod_ssl: don't FLUSH first for non blocking reads. · cc3b6d81

Yann Ylavic authored Sep 25, 2015

Such readers are prepared to received empty data anyway (and take appropriate
action), while e.g. check_pipeline() is not expecting the pipe to be flushed
under it.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705236 13f79535-47bb-0310-9956-ffa450edef68

cc3b6d81

core/util_script: relax alphanumeric filter of enviroment variable names · 382945e0

Gregg Lewis Smith authored Sep 25, 2015

on Windows to allow '(' and ')' for passing PROGRAMFILES(X86) et.al.
unadulterated in 64 bit versions of Windows. PR 46751.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705217 13f79535-47bb-0310-9956-ffa450edef68

382945e0

Sep 24, 2015

mod_ssl: forward EOR buckets to the core_output_filter(). · a7275e65

Yann Ylavic authored Sep 24, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705194 13f79535-47bb-0310-9956-ffa450edef68

a7275e65

Revert r1705157: why not "insert the filter (twice) for sub-requests" actually? · 6d356bff
Yann Ylavic authored Sep 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705160 13f79535-47bb-0310-9956-ffa450edef68
```
6d356bff
Follow up to r1705134: don't insert the filter (twice) for sub-requests. · 2ab16b02
Yann Ylavic authored Sep 24, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705157 13f79535-47bb-0310-9956-ffa450edef68
```
2ab16b02

Avoid storing request stuff in r->connection->conn_config to · 8784f3f3

Eric Covener authored Sep 24, 2015

avoid problems with e.g. write completion.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705134 13f79535-47bb-0310-9956-ffa450edef68

8784f3f3

Don't count initial handshake I/O when determining the first byte. · d331fd38

Eric Covener authored Sep 24, 2015

PR58454

Submitted By: Konstantin J. Chernov
Committed By: covener




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1705099 13f79535-47bb-0310-9956-ffa450edef68

d331fd38

Sep 23, 2015

adding --enable-http2 as preferred config option · 67362dc9

Stefan Eissing authored Sep 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704826 13f79535-47bb-0310-9956-ffa450edef68

67362dc9

mod_h2 version bump · 7e26b23a

Stefan Eissing authored Sep 23, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704799 13f79535-47bb-0310-9956-ffa450edef68

7e26b23a

avoiding race where h2_stream is closed/reset by client while being unprocessed in ready_ios set · e8a93c49
Stefan Eissing authored Sep 23, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704797 13f79535-47bb-0310-9956-ffa450edef68
```
e8a93c49

Sep 22, 2015
- add warnings and emphasize the defaults for trusted non-internal proxies) · 2903afe7
  Eric Covener authored Sep 22, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704683 13f79535-47bb-0310-9956-ffa450edef68
```
  2903afe7
Sep 21, 2015

not sure how that got in there · 666fa770

Edward Lu authored Sep 21, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704395 13f79535-47bb-0310-9956-ffa450edef68

666fa770

Stop destroying headers when passing through the cache filter · 2a205a08

Edward Lu authored Sep 21, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704392 13f79535-47bb-0310-9956-ffa450edef68

2a205a08

no GOAWAYs on connection failures, sending last received stream id back in... · 4091e9c4

Stefan Eissing authored Sep 21, 2015

no GOAWAYs on connection failures, sending last received stream id back in GOAWAY, no more flush attempts when session has already been aborted

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704262 13f79535-47bb-0310-9956-ffa450edef68

4091e9c4

removed wrong error supression in h2 connection writes · ff4152d5

Stefan Eissing authored Sep 21, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704241 13f79535-47bb-0310-9956-ffa450edef68

ff4152d5

Sep 20, 2015

Fix a spurious test where a condition is always true: · befacd08

Christophe Jaillet authored Sep 20, 2015

      if ((cfg->skipto != NULL) && (ctx->flags | ENC_SKIPTO)) {
                                    ^^^^^^^^^^^^^^^^^^^^^^^

This is apparently harmless because, in 'xml2enc_filter_init', the ENC_SKIPTO bit of 'flags' is set to ENC_SKIPTO if 'skipto' is non-NULL.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704099 13f79535-47bb-0310-9956-ffa450edef68

befacd08

Sep 19, 2015

Rebuild. · d26fd6dc

Lucien Gentis authored Sep 19, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704056 13f79535-47bb-0310-9956-ffa450edef68

d26fd6dc

XML update. · 489290e1

Lucien Gentis authored Sep 19, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1704055 13f79535-47bb-0310-9956-ffa450edef68

489290e1

update mod_ssl.html.en transformation · 03fd2b1f

Kaspar Brand authored Sep 19, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703953 13f79535-47bb-0310-9956-ffa450edef68

03fd2b1f

Support compilation against libssl built with OPENSSL_NO_SSL3, · 403462ee

Kaspar Brand authored Sep 19, 2015

and change the compiled-in default for SSL[Proxy]Protocol to "all -SSLv3",
in accordance with RFC 7568. PR 58349, PR 57120.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703952 13f79535-47bb-0310-9956-ffa450edef68

403462ee

Sep 18, 2015

mod_proxy: Fix ProxySourceAddress binding failure with AH00938. PR 56687. · ebae69a4

Yann Ylavic authored Sep 18, 2015

Proposed by: Arne de Bruijn <apache arbruijn.dds.nl
Reviewed by: ylavic


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703902 13f79535-47bb-0310-9956-ffa450edef68

ebae69a4

mod_ssl: update the current handshake server once a full regenegotation · 28df2c5e

Yann Ylavic authored Sep 18, 2015

succeeds, it is the new reference for further renegotiation or SNI check.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703871 13f79535-47bb-0310-9956-ffa450edef68

28df2c5e

patch from yann that fixes MISDIRECTED_REQUEST handling for setups with ServerAlias/subjectAltNames · b020e04c
Stefan Eissing authored Sep 18, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703822 13f79535-47bb-0310-9956-ffa450edef68
```
b020e04c

mod_proxy: follow up to r1703807: CHANGES entry. · cee8203e

Yann Ylavic authored Sep 18, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703813 13f79535-47bb-0310-9956-ffa450edef68

cee8203e

mod_proxy: don't recyle backend announced "Connection: close" connections. · 7a94cbd7

Yann Ylavic authored Sep 18, 2015

Failing to do this may lead to a race condition where we send a new request
before the backend really closes the connection (or lost SSL-Alert/FIN make
us think the connection is still alive, until the retransmission).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703807 13f79535-47bb-0310-9956-ffa450edef68

7a94cbd7

Sep 17, 2015

accept both 5.1 and 5.2, so make messages clear · 9df0ea40

Jim Jagielski authored Sep 17, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703642 13f79535-47bb-0310-9956-ffa450edef68

9df0ea40

Sep 16, 2015

Add in finding LUA installed via Macports and others · 3f968c39

Jim Jagielski authored Sep 16, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703417 13f79535-47bb-0310-9956-ffa450edef68

3f968c39

Add CHANGES entry · f44fe0ef

Christophe Jaillet authored Sep 16, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703334 13f79535-47bb-0310-9956-ffa450edef68

f44fe0ef

Sep 15, 2015

Christophe Jaillet authored Sep 15, 2015

This has been undocumented for about 3 years now (see r1415960)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703305 13f79535-47bb-0310-9956-ffa450edef68

c5d2cd04

add missing piece for command line build · 7c94c72d

Gregg Lewis Smith authored Sep 15, 2015


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703272 13f79535-47bb-0310-9956-ffa450edef68

7c94c72d

core: Avoid a compiler warning when NO_LINGCLOSE is used (-Wunreachable-code). · 703a57ea

Yann Ylavic authored Sep 15, 2015

Also, check c->aborted before apr_socket_shutdown() because it is set earlier,
and there is no point in calling shutdown() before close().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703248 13f79535-47bb-0310-9956-ffa450edef68

703a57ea

mpm_event/worker: make ap_queue_term() atomic (acquire/release the mutex once). · 831e9b6d
Yann Ylavic authored Sep 15, 2015
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703241 13f79535-47bb-0310-9956-ffa450edef68
```
831e9b6d

Follow up to r1703157: tags/next-number update. · bcc37625

Yann Ylavic authored Sep 15, 2015

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1703226 13f79535-47bb-0310-9956-ffa450edef68

bcc37625