summaryrefslogtreecommitdiffstats
path: root/server/gen_test_char.dsp (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-05-31mpm_event: Don't spam with "Stopping process due to MaxConnectionsPerChild"Yann Ylavic1-4/+2
When MaxConnectionsPerChild is reached there may be some connections to process still and the listener should stop writing this at every loop. Logging once is enough. * server/mpm/event/event.c(check_infinite_requests): Raise conns_this_child unconditionally. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918078 13f79535-47bb-0310-9956-ffa450edef68
2024-05-30CI: For LDAP tests, switch to using OpenLDAP slapd running onJoe Orton3-6/+6
CentOS Stream 9. Github: closes #450 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918059 13f79535-47bb-0310-9956-ffa450edef68
2024-05-29Follow up to r1918022: MMN minor bump and checks for the new conn_state_e ↵Yann Ylavic4-2/+15
aliases' usability. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918035 13f79535-47bb-0310-9956-ffa450edef68
2024-05-28Fix ENGINE use with OpenSSL 3.2, which appears to be broken due to aJoe Orton3-10/+28
refcounting issue in mod_ssl. * modules/ssl/ssl_engine_pphrase.c (modssl_engine_cleanup): New function. (modssl_load_keypair_engine): Take pconf & ptemp arguments, don't call ENGINE_finish() immediately but register the above cleanup. (modssl_load_engine_keypair): Pass through pconf & ptemp. * modules/ssl/ssl_engine_init.c (ssl_init_server_certs): Pass through pconf and ptemp to modssl_load_engine_keypair. Github: closes #446 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918024 13f79535-47bb-0310-9956-ffa450edef68
2024-05-28 mpm_event,core: Handle async POLLIN/POLLOUT in CONN_STATE_PROCESS state.Yann Ylavic7-127/+159
* include/httpd.h: Rename CONN_STATE_CHECK_REQUEST_LINE_READABLE to CONN_STATE_KEEPALIVE and CONN_STATE_READ_REQUEST_LINE to CONN_STATE_PROCESS, keeping the old enums as aliases. Rework comments about each state. * server/mpm/event/event.c: Use the new states names. Let the process_connection hooks return CONN_STATE_PROCESS for mpm_event to POLLIN or POLLOUT depending on c->cs->sense being CONN_SENSE_WANT_READ or CONN_SENSE_WANT_WRITE respectively. Remove (ab)use of CONN_STATE_WRITE_COMPLETION with CONN_SENSE_WANT_READ to mean poll() for read (and the need for the obscure c->clogging_input_filters to make it work as expected). This is what CONN_STATE_PROCESS is for now. Update the comment about the states that can be returned by process_connection hooks (and their usage). Use the same queue (process_q renamed from write_completion_q) for polling connections in both CONN_STATE_PROCESS and CONN_STATE_WRITE_COMPLETION states since they both use the same (server_rec's) Timeout. This implies that both states are accounted as "write-completion" in mod_status for now. * server/mpm/motorz/motorz.c, server/mpm/simple/simple_io.c, modules/http/http_core.c: Use the new states names (only). * include/scoreboard.h: Change comment about process_score->write_completion to note that the counter refers to CONN_STATE_PROCESS connections returned to the MPM too. * modules/http2/h2_c1.c: Return the c1 connection with the CONN_STATE_PROCESS state rather than CONN_STATE_WRITE_COMPLETION when waiting for a window update (i.e. ask the MPM to poll for read directly). This avoids the transition to CONN_STATE_KEEPALIVE which could kill the connection under high load. Github: closes #448 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918022 13f79535-47bb-0310-9956-ffa450edef68
2024-05-28Steal an APLONGO for PR 448.Yann Ylavic1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918021 13f79535-47bb-0310-9956-ffa450edef68
2024-05-27 *) mod_http2: sync with module's github.Stefan Eissing7-13/+86
- on newer HTTPD versions, return connection monitoring to the event MPM when block on client updates. 2.4.x versions still treat connections in the event MPM as KeepAlive and purge them on load in the middle of response processing. - spelling fixes - support for yield calls in c2 "network" filter git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918003 13f79535-47bb-0310-9956-ffa450edef68
2024-05-27steal a numberStefan Eissing1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918002 13f79535-47bb-0310-9956-ffa450edef68
2024-05-22* modules/proxy/config.m4: Stop exporting ajp_* functions from mod_proxy_ajp.soJoe Orton1-1/+5
in a shared module build. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917900 13f79535-47bb-0310-9956-ffa450edef68
2024-05-20Explicitly reject CGI output which includes a Transfer-EncodingJoe Orton2-1/+10
header, rather than drop it and send what's likely to be an unexpected or corrupted response. * modules/generators/cgi_common.h (cgi_handle_response): Send a 502 error if Transfer-Encoding is present in the response headers. PR: 68970 Github: closes #444 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917835 13f79535-47bb-0310-9956-ffa450edef68
2024-05-13Force ci build.Yann Ylavic1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917710 13f79535-47bb-0310-9956-ffa450edef68
2024-05-11fr doc rebuild.Lucien Gentis4-162/+116
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917669 13f79535-47bb-0310-9956-ffa450edef68
2024-05-11fr doc XML file update.Lucien Gentis1-48/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917668 13f79535-47bb-0310-9956-ffa450edef68
2024-05-10Steal a number.Joe Orton1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917637 13f79535-47bb-0310-9956-ffa450edef68
2024-05-09Fail if SSLInsecureRenegotiation is used with mod_ssl, CVE-2009-3555Joe Orton4-62/+1
is now approaching 15 years old. * modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation): Fail if used. (ssl_config_server_new, ssl_config_server_merge): Remove insecure reneg handling. * modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Remove insecure_reneg handling. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917600 13f79535-47bb-0310-9956-ffa450edef68
2024-05-08On Linux use the real thread id via gettid() in error logging,Joe Orton3-1/+12
where available, rather than the (meaningless) default pthread_self()-as-integer interpretation: * configure.in: Define DEFAULT_LOG_TID on Linux if gettid() is available. * server/log.c: Define DEFAULT_LOG_TID as NULL by default. (do_errorlog_default): Use DEFAULT_LOG_TID as the argument to log_tid(). Github: closes #443 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917578 13f79535-47bb-0310-9956-ffa450edef68
2024-05-08* modules/proxy/mod_proxy_fcgi.c (dispatch): Only allocate a heapJoe Orton1-1/+5
buffer if the configured size is greater than the stack-allocated buffer. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917576 13f79535-47bb-0310-9956-ffa450edef68
2024-04-22 * mod_tls: update version of rustls-ffi to v0.13.0. Stefan Eissing10-51/+91
[Daniel McCarney (@cpu}] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917270 13f79535-47bb-0310-9956-ffa450edef68
2024-04-20fr doc rebuild.Lucien Gentis8-8/+16
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917200 13f79535-47bb-0310-9956-ffa450edef68
2024-04-20fr doc XML files updates.Lucien Gentis2-2/+10
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917199 13f79535-47bb-0310-9956-ffa450edef68
2024-04-17xformEric Covener1-1/+9
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917054 13f79535-47bb-0310-9956-ffa450edef68
2024-04-17doc recent addition ap_trust_cgilike_clEric Covener1-0/+8
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917053 13f79535-47bb-0310-9956-ffa450edef68
2024-04-16Arrange pytest to run with mod_ssl, still skipping some tests.Jean-Frederic Clere11-17/+180
this closes #433 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917039 13f79535-47bb-0310-9956-ffa450edef68
2024-04-16* server/core.c (set_override): Catch errors returned byJoe Orton1-2/+4
set_allow_opts() for a parsing fail in an Options= argument. Submitted by: Zhou Qingyang <zhou1615 umn.edu> Github: closes #310 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917017 13f79535-47bb-0310-9956-ffa450edef68
2024-04-16docs: Use AP_DECLARE_MODULE in Developing modules and mod_so guidesJoe Orton6-18/+19
Submitted by: Vladimír Chlup <vchlup redhat.com> Github: closes #432 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917015 13f79535-47bb-0310-9956-ffa450edef68
2024-04-16make the compiler happy when using --enable-maintainer-modeJean-Frederic Clere1-2/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917013 13f79535-47bb-0310-9956-ffa450edef68
2024-04-15* modules/generators/mod_cgi.c, mod_cgid.c: SinceJoe Orton2-2/+0
r1916769 adds #include <util_script.h> to cgi_common.h, remove it here. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916998 13f79535-47bb-0310-9956-ffa450edef68
2024-04-15CI: Update for OpenSSL 3.3.0, build with -WerrorJoe Orton1-2/+3
Github: closes #436 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916997 13f79535-47bb-0310-9956-ffa450edef68
2024-04-13fr doc rebuild.Lucien Gentis249-654/+689
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916962 13f79535-47bb-0310-9956-ffa450edef68
2024-04-13fr doc XML files updates.Lucien Gentis3-5/+37
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916961 13f79535-47bb-0310-9956-ffa450edef68
2024-04-12mpm_event,mpm_worker: Comment about pollset sizing when APR_POLLSET_WAKEABLE.Yann Ylavic2-2/+8
Follow up to r1916925 and r1916926. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916929 13f79535-47bb-0310-9956-ffa450edef68
2024-04-12mpm_worker: Fix AH00045 about children processes not terminating timely.Yann Ylavic2-18/+34
* server/mpm/worker/worker.c(setup_threads_runtime): Create pollset with APR_POLLSET_WAKEABLE to be able to wake up the listener when stopping. * server/mpm/worker/worker.c(wakeup_listener): Wake up the listener using the wakeup pipe (apr_pollset_wakeup). * server/mpm/worker/worker.c(join_workers): Like mpm_event, don't depend on `pthread_kill(listener_thread, 0)` to check whether the listener has exited (this does not work on some systems), but use the "dying" global variable instead which is set by the listener just before exiting. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916926 13f79535-47bb-0310-9956-ffa450edef68
2024-04-12mpm_event: Simplify pollset "good methods" vs APR_POLLSET_WAKEABLE.Yann Ylavic1-13/+11
* server/mpm/event/event.c(setup_threads_runtime): Simplify pollset creation code. All pollset "good methods" implement APR_POLLSET_WAKEABLE and wake-ability is quite important for MPM event's correctness anyway so simplify code around pollset creation so as not to suggest that APR_POLLSET_NODEFAULT if favored against APR_POLLSET_WAKEABLE. While at it account for the wakeup pipe in the pollset_size since not all pollset methods seem to do it internally in APR. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916925 13f79535-47bb-0310-9956-ffa450edef68
2024-04-12mod_ssl_ct: Fix format warnings.Yann Ylavic1-2/+2
* modules/ssl/mod_ssl_ct.c(client_extension_add_callback, server_extension_add_callback): Variable ext_type is unsigned, so use %u instead of %hu. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916924 13f79535-47bb-0310-9956-ffa450edef68
2024-04-11* modules/md: Fill in APLOGNO.Jean-Frederic Clere2-2/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916907 13f79535-47bb-0310-9956-ffa450edef68
2024-04-08* Ensure that we set the default DH parameters for the keyRuediger Pluem2-5/+9
Replace else with an if as the if branch no longer ensures that custome DH parameters have been loaded. This fixes a regression that causes the default DH parameters for a key no longer set and thus effectively disabling DH ciphers when no explicit DH parameters are set. PR: 68863 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916863 13f79535-47bb-0310-9956-ffa450edef68
2024-04-08mod_md: update to v2.4.26Stefan Eissing17-283/+177
- Using OCSP stapling information to trigger certificate renewals. Proposed by @frasertweedale. - Added directive `MDCheckInterval` to control how often the server checks for detected revocations. Added proposals for configurations in the README.md chapter "Revocations". - OCSP stapling: accept OCSP responses without a `nextUpdate` entry which is allowed in RFC 6960. Treat those as having an update interval of 12 hours. Added by @frasertweedale. - Adapt OpenSSL usage to changes in their API. By Yann Ylavic. Test Updates - workarounds for using Pebble v2.5 - disable EAB tests for Pebble since v2.5 no longer supports HS256 FWT for EAB keys - some stability improvemnets in error/warning checks git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916861 13f79535-47bb-0310-9956-ffa450edef68
2024-04-06Fix occasional pytest failuresRainer Jung1-2/+2
in modules/http2/test_800_websockets.py (test_h2_800_03_not_found and test_h2_800_05_non_ws_delay_resource) due to additional RST messages. Maybe we should allow RST after EOF in all websocket tests? git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916830 13f79535-47bb-0310-9956-ffa450edef68
2024-04-05Fix occasional pytest failuresRainer Jung1-2/+2
in modules/http2/test_800_websockets.py (test_h2_800_04_non_ws_resource and test_h2_800_09b_unsupported) due to additional RST messages. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916808 13f79535-47bb-0310-9956-ffa450edef68
2024-04-05Fix failing pytest modules/http2/test_712_buffering.py:48.Rainer Jung1-1/+1
Do not count lines like "00:12:26.578220 <= Recv data, 0 bytes (0x0)" (which happen before the final close) as receiving a real chunk. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916806 13f79535-47bb-0310-9956-ffa450edef68
2024-04-04Fix pytest failure when using older nghttp2Rainer Jung1-0/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916804 13f79535-47bb-0310-9956-ffa450edef68
2024-04-03bail after too many failed readsEric Covener3-3/+9
Submitted By: icing git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916771 13f79535-47bb-0310-9956-ffa450edef68
2024-04-03header validation after content-* are eval'edEric Covener1-15/+24
Submitted By: ylavic git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916770 13f79535-47bb-0310-9956-ffa450edef68
2024-04-03let httpd handle CL/TE for non-http handlersEric Covener8-3/+68
Submitted By: ylavic, covener git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916769 13f79535-47bb-0310-9956-ffa450edef68
2024-04-01r1881790 has also added the 3rd argument to "ProxyRemoteMatch"Christophe Jaillet1-1/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916708 13f79535-47bb-0310-9956-ffa450edef68
2024-04-01Add <compatibility> note for CGIScriptTimeout.Christophe Jaillet1-0/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916704 13f79535-47bb-0310-9956-ffa450edef68
2024-03-30Update copyright yearRainer Jung2-2/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916669 13f79535-47bb-0310-9956-ffa450edef68
2024-03-26mod_ssl: Allow for "SSLCompression off" still when OPENSSL_NO_COMP.Yann Ylavic1-2/+4
Latest OpenSSL versions have OPENSSL_NO_COMP by default, avoid breaking existing "SSLCompression off" in configurations since it's a noop. * modules/ssl/ssl_engine_config.c(ssl_cmd_SSLCompression): Don't fail for OPENSSL_NO_COMP if the flag is "off". git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916561 13f79535-47bb-0310-9956-ffa450edef68
2024-03-26CI: Add OpenSSL 3.3.0 alpha1 build.Joe Orton1-0/+9
Github: closes #424 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916559 13f79535-47bb-0310-9956-ffa450edef68
2024-03-18CI: conditional didn't work in r1916396, always apply ASAN workaround.Joe Orton1-1/+0
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916397 13f79535-47bb-0310-9956-ffa450edef68