summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* skiplist is now in apr 1.5 and aboveJim Jagielski2013-10-026-782/+22
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528437 13f79535-47bb-0310-9956-ffa450edef68
* add attributionKaspar Brand2013-10-011-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528155 13f79535-47bb-0310-9956-ffa450edef68
* Don't use a hardcoded cn=* in case the subgroup has no CN.Eric Covener2013-10-012-1/+4
| | | | | | | | | Submitted By: David Hawes <dhawes vt.edu> Committed By: Eric Covener git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528143 13f79535-47bb-0310-9956-ffa450edef68
* in 2.4.xJim Jagielski2013-10-011-4/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528054 13f79535-47bb-0310-9956-ffa450edef68
* * build/config_vars.sh.in: Trim more stuff from installed config_vars.mk.Joe Orton2013-10-011-0/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528035 13f79535-47bb-0310-9956-ffa450edef68
* Don't link support/* against systemd libs.Joe Orton2013-10-012-2/+4
| | | | | | | | | | * Makefile.in: Link httpd using $(HTTPD_LIBS). * configure.in: Add systemd to HTTPD_LIBS rather than LIBS. Add PCRE libs to HTTPD_LIBS. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528034 13f79535-47bb-0310-9956-ffa450edef68
* * configure.in: Simplify/fix systemd detection: move later to fixJoe Orton2013-10-013-17/+21
| | | | | | | | | | | autoconf warnings; define HAVE_SYSTEMD rather than using CPPFLAGS. * server/listen.c: Use HAVE_SYSTEMD for systemd #define. * modules/arch/unix/config5.m4: Update systemd headers check. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1528032 13f79535-47bb-0310-9956-ffa450edef68
* PR 55616 (add missing APLOGNO), part 2Kaspar Brand2013-10-012-3/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527926 13f79535-47bb-0310-9956-ffa450edef68
* PR 55616 (add missing APLOGNO), part 1Kaspar Brand2013-10-012-2/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527925 13f79535-47bb-0310-9956-ffa450edef68
* Follow up to r1527295:Jeff Trawick2013-09-301-0/+5
| | | | | | | | ssl_engine_dh.c is still in 2.4.x, and (perhaps unexpectedly) this cmake list supports both trunk and 2.4.x for the time being. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527570 13f79535-47bb-0310-9956-ffa450edef68
* mod_dav: set r->status_line in dav_error_response.Jan Kaluža2013-09-301-0/+1
| | | | | | | It's used as argument in next ap_rvputs call. PR 55426. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527509 13f79535-47bb-0310-9956-ffa450edef68
* update transformations for mod_ssl and ssl_faqKaspar Brand2013-09-292-6/+69
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527296 13f79535-47bb-0310-9956-ffa450edef68
* Improve ephemeral key handling (companion to r1526168):Kaspar Brand2013-09-2912-266/+195
| | | | | | | | | | | | | | | | | | | | | | | - allow to configure custom DHE or ECDHE parameters via the SSLCertificateFile directive, and adapt its documentation accordingly (addresses PR 49559) - add standardized DH parameters from RFCs 2409 and 3526, use them based on the length of the certificate's RSA/DSA key, and add a FAQ entry for clients which limit DH support to 1024 bits (such as Java 7 and earlier) - move ssl_dh_GetParamFromFile() from ssl_engine_dh.c to ssl_util_ssl.c, and add ssl_ec_GetParamFromFile() - drop ssl_engine_dh.c from mod_ssl For the standardized DH parameters, OpenSSL version 0.9.8a or later is required, which was therefore made a new minimum requirement in r1527294. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527295 13f79535-47bb-0310-9956-ffa450edef68
* Increase minimum required OpenSSL version to 0.9.8a (in preparationKaspar Brand2013-09-2912-125/+106
| | | | | | | | | | | | | | | | | | | for the next mod_ssl commit, which will rely on the get_rfcX_prime_Y functions added in that release): - remove obsolete #defines / macros - in ssl_private.h, regroup definitions based on whether they depend on TLS extension support or not - for ECC and SRP support, set HAVE_X and change the rather awkward #ifndef OPENSSL_NO_X lines accordingly For the discussion prior to taking this step, see https://mail-archives.apache.org/mod_mbox/httpd-dev/201309.mbox/%3C524275C7.9060408%40velox.ch%3E git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527294 13f79535-47bb-0310-9956-ffa450edef68
* Follow-up fixes for r1526168:Kaspar Brand2013-09-293-20/+11
| | | | | | | | | | | | - drop SSL_TMP_KEY_* constants from ssl_private.h, too - make sure we also disable aNULL, eNULL and EXP ciphers for per-directory SSLCipherSuite directives - apply the same treatment to SSLProxyCipherSuite git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527291 13f79535-47bb-0310-9956-ffa450edef68
* Follow up to r1526666:Jeff Trawick2013-09-281-1/+5
| | | | | | | | | | | | | | | | Use SYNCHRONIZE instead of PROCESS_ALL_ACCESS because a. it is sufficient b. it avoids an issue where PROCESS_ALL_ACCESS is larger on newer SDKs, resulting in a run-time error when running on older Windows Close the handle. Submitted by: Ivan Zhakov <ivan visualsvn.com> git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527220 13f79535-47bb-0310-9956-ffa450edef68
* Updates.Lucien Gentis2013-09-284-86/+149
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527200 13f79535-47bb-0310-9956-ffa450edef68
* Axe the README a bit, add fuankg as contributor. This will need a complete ↵Daniel Gruno2013-09-281-26/+3
| | | | | | rewrite at some point. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527172 13f79535-47bb-0310-9956-ffa450edef68
* r1526906 followup:Eric Covener2013-09-271-2/+3
| | | | | | | | error: ISO C90 forbids mixed declarations and code [-Werror=declaration-after-statement] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527063 13f79535-47bb-0310-9956-ffa450edef68
* Fix the null device name on Windows so that stderr can be sentJeff Trawick2013-09-271-2/+9
| | | | | | | | to the bit bucket. (This logic is always hit when using an error log provider.) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527008 13f79535-47bb-0310-9956-ffa450edef68
* When adding APR_EOL_STR in the error log record before callingJeff Trawick2013-09-271-0/+1
| | | | | | | the writer, include that trailer in the length. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527005 13f79535-47bb-0310-9956-ffa450edef68
* Error log providers need to be able to trigger a startup error from theirJeff Trawick2013-09-273-2/+12
| | | | | | | init() function. A NULL return code is the trigger. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1527003 13f79535-47bb-0310-9956-ffa450edef68
* mod_lua: Use a (new) global pool/mutex setup for IVM rather than a ↵Daniel Gruno2013-09-274-17/+105
| | | | | | per-process pool. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526906 13f79535-47bb-0310-9956-ffa450edef68
* WinNT MPM: Exit the child if the parent process crashes or is terminated.Jeff Trawick2013-09-265-7/+27
| | | | | | | | | | | Submitted by: Oracle, via trawick The original modification was made some years ago for Oracle HTTP Server by an Oracle employee. trawick made additional changes for style and for trunk/2.4.x changes. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526666 13f79535-47bb-0310-9956-ffa450edef68
* allow building mod_authnz_fcgi with 2.4.x branchJeff Trawick2013-09-261-1/+6
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526647 13f79535-47bb-0310-9956-ffa450edef68
* util_fcgi.c now in 2.4.x branch tooJeff Trawick2013-09-261-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526643 13f79535-47bb-0310-9956-ffa450edef68
* arrange previous fix.Jean-Frederic Clere2013-09-261-4/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526499 13f79535-47bb-0310-9956-ffa450edef68
* Follow-up to r1526436: Fix compilation errorJeff Trawick2013-09-261-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526473 13f79535-47bb-0310-9956-ffa450edef68
* remove entry for r1525931 (APLOG_STARTUP with ErrorLogFormat), nowJeff Trawick2013-09-261-3/+0
| | | | | | | in 2.4.x branch git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526443 13f79535-47bb-0310-9956-ffa450edef68
* minor editsJeff Trawick2013-09-261-1/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526441 13f79535-47bb-0310-9956-ffa450edef68
* Fix for PR 54626.Jean-Frederic Clere2013-09-262-0/+14
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526436 13f79535-47bb-0310-9956-ffa450edef68
* worker MPM: Don't forcibly kill worker threads if the child process isJeff Trawick2013-09-252-6/+13
| | | | | | | | | | | | exiting gracefully. Submitted by: Oracle, via trawick This modification was made some years ago for Oracle HTTP Server by an Oracle employee. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526220 13f79535-47bb-0310-9956-ffa450edef68
* mod_proxy: Add ap_connection_reusable() for checking if a connectionJeff Trawick2013-09-255-3/+27
| | | | | | | | | | | | is reusable as of this point in processing. mod_proxy_fcgi uses the new API to determine if FCGI_CONN_CLOSE should be enabled, but that doesn't change existing behavior since the connection is currently marked for closure elsewhere in the module. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526189 13f79535-47bb-0310-9956-ffa450edef68
* meanwhile in 2.4.6 and 2.2.25, respectivelyKaspar Brand2013-09-251-4/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526169 13f79535-47bb-0310-9956-ffa450edef68
* Streamline ephemeral key handling:Kaspar Brand2013-09-257-310/+30
| | | | | | | | | | | | | | | | | | | | | | | | - drop support for ephemeral RSA keys (only allowed/needed for export ciphers) - drop pTmpKeys from the per-process SSLModConfigRec, and remove the temp key generation at startup (unnecessary for DHE/ECDHE) - unconditionally disable null and export-grade ciphers by always prepending "!aNULL:!eNULL:!EXP:" to any cipher suite string - do not configure per-connection SSL_tmp_*_callbacks, as it is sufficient to set them for the SSL_CTX - set default curve for ECDHE at startup, obviating the need for a per-handshake callback, for the time being (and also configure SSL_OP_SINGLE_ECDH_USE, previously left out) For additional background, see https://mail-archives.apache.org/mod_mbox/httpd-dev/201309.mbox/%3C52358ED1.2070704@velox.ch%3E git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526168 13f79535-47bb-0310-9956-ffa450edef68
* Suppress formatting of startup messages written to the console whenJeff Trawick2013-09-242-1/+4
| | | | | | | ErrorLogFormat is used. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525931 13f79535-47bb-0310-9956-ffa450edef68
* Change the default value of AuthLDAPMaxSubGroupDepth, so sub-group searchingEric Covener2013-09-243-5/+8
| | | | | | | is opt-in. Not intended for 2.4 backport. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525866 13f79535-47bb-0310-9956-ffa450edef68
* Add AP_ERRORLOG_PROVIDER_ADD_EOL_STR flag for ap_errorlog_provider, bump MMN.Jan Kaluža2013-09-244-9/+22
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525845 13f79535-47bb-0310-9956-ffa450edef68
* allow the provider to decide whether or not APLOG_NOTICEJeff Trawick2013-09-232-19/+13
| | | | | | | messages should be logged git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525664 13f79535-47bb-0310-9956-ffa450edef68
* mod_syslog: New module implementing syslog ap_error_log provider.Jan Kaluža2013-09-235-1/+238
| | | | | | | Previously, this code was part of core, now it's in separate module. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525600 13f79535-47bb-0310-9956-ffa450edef68
* Add ap_errorlog_provider to make ErrorLog logging modular. MoveJan Kaluža2013-09-236-115/+109
| | | | | | | syslog support from core to new mod_syslog. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525597 13f79535-47bb-0310-9956-ffa450edef68
* add a note about sub-group searching and large groups.Eric Covener2013-09-232-0/+18
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525588 13f79535-47bb-0310-9956-ffa450edef68
* Remove grossly outdated browser compatibility columnRich Bowen2013-09-232-18/+10
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525489 13f79535-47bb-0310-9956-ffa450edef68
* Various rebuildsRich Bowen2013-09-232-2/+2
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525481 13f79535-47bb-0310-9956-ffa450edef68
* Missing '$' in variable.Rich Bowen2013-09-231-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525479 13f79535-47bb-0310-9956-ffa450edef68
* Correct XMl error. Rebuild docs/Rich Bowen2013-09-233-5/+5
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525458 13f79535-47bb-0310-9956-ffa450edef68
* Clearer explanation of undefining a macro.Rich Bowen2013-09-231-3/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525457 13f79535-47bb-0310-9956-ffa450edef68
* various other rebuildsRich Bowen2013-09-224-8/+12
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525438 13f79535-47bb-0310-9956-ffa450edef68
* Renames the 'tips' section.Rich Bowen2013-09-222-3/+3
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525433 13f79535-47bb-0310-9956-ffa450edef68
* Rename: This is more a "tips" section than technical details.Rich Bowen2013-09-221-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525431 13f79535-47bb-0310-9956-ffa450edef68