summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Documentation rebuildLuca Toscano2017-09-135-23/+96
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808250 13f79535-47bb-0310-9956-ffa450edef68
* mod_md.xml: fix some typosLuca Toscano2017-09-131-5/+5
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808249 13f79535-47bb-0310-9956-ffa450edef68
* update log tag dbStefan Eissing2017-09-131-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808245 13f79535-47bb-0310-9956-ffa450edef68
* updated mod_ssl log tagsStefan Eissing2017-09-131-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808244 13f79535-47bb-0310-9956-ffa450edef68
* updated mod_md log tagsStefan Eissing2017-09-131-5/+5
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808243 13f79535-47bb-0310-9956-ffa450edef68
* added new mod_md directivesStefan Eissing2017-09-131-22/+101
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808242 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-1315-326/+713
| | | | | | | | | | | | | | | | | | | | | | | mod_md: v0.9.5: - New directive (srly: what do you expect at this point?) "MDMustStaple on|off" to control if new certificates are requested with the OCSP Must Staple extension. - Known limitation: when the server is configured to ditch and restart child processes, for example after a certain number of connections/requests, the mod_md watchdog instance might migrate to a new child process. Since not all its state is persisted, some messsages might appear a second time in the logs. - Adding checks when 'MDRequireHttps' is used. It is considered an error when 'MDPortMap 443:-' is used - which negates that a https: port exists. Also, a warning is logged if no VirtualHost can be found for a Managed Domain that has port 443 (or the mapped one) in its address list. - New directive 'MDRequireHttps' for redirecting http: traffic to a Managed Domain, permanently or temporarily. - Fix for using a fallback certificate on initial signup of a Managed Domain. Requires also a changed mod_ssl patch (v5) to take effect. - compatibility with libressl git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808241 13f79535-47bb-0310-9956-ffa450edef68
* * server/protocol.c (ap_content_length_filter): Rewrite the contentJoe Orton2017-09-131-37/+63
| | | | | | | | | | | | | | length filter to avoid arbitrary memory consumption for streaming responses (e.g. large CGI script output). Ensures C-L is still generated in common cases (static content, small CGI script output), but this DOES change behaviour and some responses will end up chunked rather than C-L computed. PR: 61222 Submitted by: jorton, rpluem git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808230 13f79535-47bb-0310-9956-ffa450edef68
* docs: allow Directive/<Directive> naming in prettify.js/cssLuca Toscano2017-09-133-6/+13
| | | | | | | | Creditis to Humbedooh for all the work. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808224 13f79535-47bb-0310-9956-ffa450edef68
* docs: add ManagedDomain and SSLPolicy containers to prettify.jsLuca Toscano2017-09-132-2/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808204 13f79535-47bb-0310-9956-ffa450edef68
* docs: update the prettify.js files with new directivesLuca Toscano2017-09-132-3/+3
| | | | | | | | | | | | | | | | | | | Procedure that I've used: 1) Copy https://httpd.apache.org/docs/trunk/mod/directives.html to a text file. 2) Generate a csv with something like cat /tmp/trunk_directives | sort | tr "\n" "," 3) Replace the content of CONFIG_KEYWORDS in prettify.js with the list generated in 2) 4) Run the command the MINIFY command to generate prettify.min.js This commit should hopefully allow a better syntax highlighting in our docs examples. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808203 13f79535-47bb-0310-9956-ffa450edef68
* Documentation rebuildLuca Toscano2017-09-121-0/+15
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808130 13f79535-47bb-0310-9956-ffa450edef68
* mod_proxy_fcgi.xml: add examples for flushpackets=onLuca Toscano2017-09-121-0/+21
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808129 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-121-4/+4
| | | | | | | | mod_ssl: properly initializing server for fallback certificates provided by mod_md. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808122 13f79535-47bb-0310-9956-ffa450edef68
* Documentation rebuildLuca Toscano2017-09-122-5/+5
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808101 13f79535-47bb-0310-9956-ffa450edef68
* mod_md.xml: minor style/visual changesLuca Toscano2017-09-121-4/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808100 13f79535-47bb-0310-9956-ffa450edef68
* Documentation rebuildLuca Toscano2017-09-123-26/+61
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808093 13f79535-47bb-0310-9956-ffa450edef68
* mod_md.xml: add missing descriptions and directivesynopsisLuca Toscano2017-09-121-15/+44
| | | | | | | | | Based on the work of Bernard Spil <brnrd freebsd org>. PR: 61512 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808092 13f79535-47bb-0310-9956-ffa450edef68
* Update CHANGES after r1808008Luca Toscano2017-09-121-0/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808085 13f79535-47bb-0310-9956-ffa450edef68
* mod_proxy_fcgi: follow up to r1807876.Yann Ylavic2017-09-111-1/+1
| | | | | | | | Fix mixed declarations and code [-Wdeclaration-after-statement]. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808014 13f79535-47bb-0310-9956-ffa450edef68
* htdigest: prevent buffer overflow when strings in lines are too long.Luca Toscano2017-09-111-7/+17
| | | | | | | | | Reported by: Hanno Böck PR: 61511 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808008 13f79535-47bb-0310-9956-ffa450edef68
* a2md: all objects should be compiled before linking, or "make -j" may break.Yann Ylavic2017-09-111-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1808005 13f79535-47bb-0310-9956-ffa450edef68
* * We need i if we have HAVE_SSL_CONF_CMD definedRuediger Pluem2017-09-111-0/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807994 13f79535-47bb-0310-9956-ffa450edef68
* * Silence compiler warning and remove unused variableRuediger Pluem2017-09-111-6/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807993 13f79535-47bb-0310-9956-ffa450edef68
* Added Spanish Translation for event.xml.esDaniel Ferradal2017-09-108-3/+666
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807946 13f79535-47bb-0310-9956-ffa450edef68
* Rebuild.Lucien Gentis2017-09-096-16/+40
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807897 13f79535-47bb-0310-9956-ffa450edef68
* XML updates.Lucien Gentis2017-09-093-17/+45
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807895 13f79535-47bb-0310-9956-ffa450edef68
* mod_proxy_fcgi: limit the flush buckets inserted when flushpackets=on|autoLuca Toscano2017-09-091-4/+8
| | | | | | | | | | This commit is a follow up of r1802040 based on Jacob's feedback, namely inserting the FLUSH buckets only when really needed and useful, not always. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807876 13f79535-47bb-0310-9956-ffa450edef68
* Documentation rebuild part 2Luca Toscano2017-09-091-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807871 13f79535-47bb-0310-9956-ffa450edef68
* Documentation rebuildLuca Toscano2017-09-096-12/+22
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807870 13f79535-47bb-0310-9956-ffa450edef68
* mod_ssl.xml: simplification of SSLEngine sectionLuca Toscano2017-09-091-5/+6
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807869 13f79535-47bb-0310-9956-ffa450edef68
* event.xml: fix reference to upcoming httpd releaseLuca Toscano2017-09-091-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807868 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-081-1/+1
| | | | | | | | mod_md: added necessary CPPFLAGS for a2md build. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807777 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-0820-42/+107
| | | | | | | | | mod_md: v0.9.2: new directive 'MDHttpProxy' to define a proxy for outgoing connection, some minor bugfixes, twiddle the build system to avoid non-pic code generation. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807774 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-086-36/+162
| | | | | | | | mod_ssl: Extending SSLEngine to alternatively get a list of add:port spec as used in VirtualHost. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807709 13f79535-47bb-0310-9956-ffa450edef68
* core: Disallow Methods' registration at run time (.htaccess), they may beYann Ylavic2017-09-082-0/+9
| | | | | | | | | | used only if registered at init time (httpd.conf). Calling ap_method_register() in children processes is not the right scope since it won't be shared for all requests. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807655 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-071-1/+0
| | | | | | | | mod_md: avoid linking libmd.la twice git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807593 13f79535-47bb-0310-9956-ffa450edef68
* update feather to conform with style guideDaniel Gruno2017-09-071-0/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807587 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-071-1/+3
| | | | | | | | mod_md: fix in Makefile to use EXTRA_INCLUDES for a2md build, so that APR headers from srclib are found. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807577 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-0511-77/+143
| | | | | | | | | | | | | | *) mod_md: v0.9.1: - various fixes in MDRenewWindow handling when specifying percent. Serialization changed. If someone already used percent configurations, it is advised to change these to a new value, reload and change back to the wanted ones. - various fixes in handling of MDPrivateKeys when specifying 2048 bits (the default) explicitly. - mod_md version removed from top level md_store.json file. The store has its own format version to facilitate upgrades. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807347 13f79535-47bb-0310-9956-ffa450edef68
* Make sure that ajp behaves like http.Jean-Frederic Clere2017-09-051-0/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807338 13f79535-47bb-0310-9956-ffa450edef68
* Fix for JBCS-390.Jean-Frederic Clere2017-09-051-3/+6
| | | | | | | | Note it is related to PR 59007 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807318 13f79535-47bb-0310-9956-ffa450edef68
* documentation rebuildLuca Toscano2017-09-041-0/+7
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807250 13f79535-47bb-0310-9956-ffa450edef68
* event.xml doc: update to latest improvementsLuca Toscano2017-09-041-0/+7
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807249 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-042-3/+16
| | | | | | | | | *) mod_http2: DoS flow control protection is less agressive as long as active tasks stay below worker capacity. Intended to fix problems with media streaming. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807238 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-041-5/+22
| | | | | | | mod_ssl: using improved mod_md md_get_certificate optional function when available git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807232 13f79535-47bb-0310-9956-ffa450edef68
* On the trunk:Stefan Eissing2017-09-049-75/+139
| | | | | | | | | | | | | | | | | | | | mod_md: * Improved interface to mod_ssl for fallback handling. Backward compatible to previous mod_ssl patch, but fallbacks will not work. * Provide a temporary, self-signed certificate with a speaking command and domain name if we have no other cert for a Managed Domain, yet. Refs github issue #32 * Continue to provide expired or not-completely matching, existing certificate for a Managed Domain until the renewal was successful. This is helpful when one adds a DNS name to a MD, so the previous domains can be served while a new cert is requested. * All files necessary to run tests are not in the release package. * Making "http-01" the preferred challenge type again, as people "tls-sni-01" requires at least one working certificate vhost right now - which not everyone has. * moved part of the MD sanity checks from post_config to check_config phase, allowing for error detection in check-only runs. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807228 13f79535-47bb-0310-9956-ffa450edef68
* Rebuild.Lucien Gentis2017-09-024-358/+360
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807063 13f79535-47bb-0310-9956-ffa450edef68
* XML update.Lucien Gentis2017-09-021-4/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807062 13f79535-47bb-0310-9956-ffa450edef68
* Generated doc changesMike Rumph2017-09-013-10/+11
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1806986 13f79535-47bb-0310-9956-ffa450edef68