Skip to content
GitLab
  1. 11 Oct, 2005 2 commits
  3. 09 Oct, 2005 1 commit
  5. 08 Oct, 2005 1 commit
  7. 07 Oct, 2005 2 commits
  9. 06 Oct, 2005 3 commits
  11. 05 Oct, 2005 1 commit
  13. 03 Oct, 2005 1 commit
  15. 01 Oct, 2005 1 commit
  17. 30 Sep, 2005 1 commit
  19. 29 Sep, 2005 2 commits
  21. 25 Sep, 2005 1 commit
  23. 23 Sep, 2005 1 commit
  25. 21 Sep, 2005 1 commit
  27. 20 Sep, 2005 4 commits
  29. 19 Sep, 2005 5 commits
  31. 18 Sep, 2005 3 commits
  33. 12 Sep, 2005 1 commit
  35. 11 Sep, 2005 1 commit
  37. 10 Sep, 2005 1 commit
  39. 09 Sep, 2005 1 commit
  41. 01 Sep, 2005 1 commit
  43. 31 Aug, 2005 1 commit
  45. 30 Aug, 2005 4 commits
    • Colm MacCarthaigh's avatar
      · f68f2b8a
      Colm MacCarthaigh authored 
      Make my PR references consistent with everyone elses.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@264881 13f79535-47bb-0310-9956-ffa450edef68
      f68f2b8a
    • Justin Erenkrantz's avatar
      mod_cgid: Refuse to work on Solaris 10 due to OS bugs. · 5aee5df8
      Justin Erenkrantz authored 
      PR: 34264


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@264866 13f79535-47bb-0310-9956-ffa450edef68
      5aee5df8
    • Joe Orton's avatar
      Fix CVE CAN-2005-2700: · a344c639
      Joe Orton authored 
      * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that
renegotiation is performed for a transition from "SSLVerifyClient
optional" to "SSLVerifyClient require".

The boolean "verify_old & SSL_VERIFY_PEER_STRICT" is true if the old
context merely has optional verification configured, since the
definition of SSL_VERIFY_PEER_STRICT is
(SSL_VERIFY_FAIL_IF_NO_PEER_CERT | SSL_VERIFY_PEER).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@264800 13f79535-47bb-0310-9956-ffa450edef68
      a344c639
    • Colm MacCarthaigh's avatar
      · 390c36d0
      Colm MacCarthaigh authored 
      Fix PR36410; Change how the get_suexec_identity hook is handled by CGID.
Instead of using mod_userdir and mod_suexec specific hacks, we now run the hook
on the httpd side of the handler. 

If this is NULL, we pass on a magic empty_ugid constant, otherwise pass on the
real ugid.

On the cgid side of the equation, we add our own hook, with REALLY_FIRST, and
then order the hooks. This ensures that cgid's doer runs before any other
registered get_suexec_identity doers.

We use cgid's request config to store the ugid. If ugid == empty_ugid, we DON'T
call ap_os_create_privileged_process, because our doer would return the magic
empty_ugid constant. Having the doer return NULL is no good, because then
userdir and mod_suexec's doers would be called. Instead, we call plain old
apr_proc_create(). 



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@264759 13f79535-47bb-0310-9956-ffa450edef68
      390c36d0