www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2026-10-23 22:49:01 +03:00
Code Activity
15,273 Commits 62 Branches 313 Tags
fips-dev
Commit Graph

15273 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
William A. Rowe Jr
2a33727b39 While eliminating all but TLSv1 (the only FIPS-complient handshaking 
mechansim), I noticed that we have several other single-case methods
  similar to the SSLv2 exception; use the explicit method in preference
  to the generic SSLv23_client|server_method() calls if exactly one
  method is supported.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@264620 13f79535-47bb-0310-9956-ffa450edef68
 2005-08-29 19:57:26 +00:00
Ben Laurie
decaaf6ca5 More info. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190416 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-13 15:24:18 +00:00
Ben Laurie
451131ff76 Note on ciphersuites. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190145 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-11 16:26:01 +00:00
Ben Laurie
d638593d7a Oops. Need OpenSSL in FIPS mode. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190122 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-11 14:16:20 +00:00
Ben Laurie
0db2718513 Add --enable-fips, FIPSify everything. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190120 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-11 14:14:56 +00:00
William A. Rowe Jr
2ae51e77b7 Protection from a 1.3 libtoolize; should have been in the prior commit 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190012 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-10 20:12:30 +00:00
William A. Rowe Jr
609ba0dff3 Examine the selected libtoolize in order to determine it's configured 
libtool.m4 path, rather than gross assumptions.  Leaving the gross
  assumptions as a fail-over if the structure of libtoolize script is
  somehow borked.

  Prefer, of course, any libtool that isn't libtool 1.3 or before, so
  push 'libtoolize' to the end of the desireables list.

  In the sandbox for some testing across platforms - will propose to
  dev@apr once some measure of portability is confirmed


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@190009 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-10 19:28:52 +00:00
Ben Laurie
e0f5748acd First cut, working FIPS mode. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189992 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-10 17:25:17 +00:00
Ben Laurie
3ca138cee1 Add tags (again). 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189991 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-10 17:24:13 +00:00
William A. Rowe Jr
5c697dd7dc Explain this sandbox for inquiring minds 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189833 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-09 22:02:41 +00:00
Ben Laurie
930d4b6051 Make path check more portable, make specifying a local OpenSSL build 
actually work.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189771 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-09 16:10:53 +00:00
Ben Laurie
59722411d3 Die properly when path is bollocks. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189761 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-09 14:57:36 +00:00
William A. Rowe Jr
976c8259e1 Sandbox of apu/trunk/ for fips integration. Here may lurk fips issues (MD5 etc) 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@188838 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 18:16:36 +00:00
William A. Rowe Jr
336a1241c2 Sandbox of apr/trunk/ for fips integration. Here may lurk fips issues (MD5 etc) 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@188837 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 18:16:12 +00:00
William A. Rowe Jr
c2c7cf6a1d Sandbox of httpd/trunk/ for OpenSSL 0.9.7/mod_ssl fips integration development 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@188836 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 18:12:22 +00:00
William A. Rowe Jr
1916cf896c Sandbox of httpd/trunk/ for OpenSSL 0.9.7/mod_ssl fips integration development 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@188834 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 18:01:47 +00:00
William A. Rowe Jr
88d9f87040 Sandbox of httpd/trunk/ for OpenSSL 0.9.7/mod_ssl fips integration development 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@188833 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 17:56:39 +00:00
Joe Orton
ac40284b85 * modules/http/byterange_filter.c (ap_byterange_filter): Refuse to 
byterange any response which may require the consumption of arbitrary
amounts of memory.

(functional changes split from whitespace/reflow changes which will
follow in a separate commit)

Reviewed by: jerenkrantz (several moons ago)
PR: 29962


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@188797 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-07 15:32:10 +00:00
Paul Querna
222d82ef5c * mod_cache.c: When 'Vary: *' is sent, do not cache, since revalidation is always required. 
PR: 16125


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@180341 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-06 16:53:15 +00:00
André Malo
a5949b1c37 update transformation 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@180075 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-05 06:01:16 +00:00
Paul Querna
b4369f78a1 * server/main.c: Remove the suck_in_apr_password_validate() hack. apr_password_validate is part of the public APR interface and this hack should not be needed on any platform. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179879 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 20:35:27 +00:00
Paul Querna
85015ced14 'generate_name' is too generic to be in the public symbols. Rename it to ap_cache_generate_name. No functional changes. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179877 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 20:19:08 +00:00
Joe Orton
bb7e57a599 * modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify_CRL): Fix 
off-by-one.

PR: 35081
Submitted by: Marc Stern <mstern csc.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@179781 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 12:54:53 +00:00
Joe Orton
968bb860f9 * modules/ssl/ssl_engine_kernel.c (ssl_callback_SSLVerify_CRL): Fix 
off-by-one.

PR: 35081
Submitted by: Marc Stern <mstern csc.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179781 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 12:54:53 +00:00
Joe Orton
aad70a1145 * modules/filters/mod_include.c (handle_include): Fix possible 
variable corruption with nested includes.

PR: 12655


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179763 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 10:12:50 +00:00
Jeff Trawick
45174f2721 write a CHANGES entry for PR 34512; looks like it resolves 
user-visible misprocessing in proxy ftp which could result
in directory listing for regular file retrieval


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179745 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 08:23:40 +00:00
Paul Querna
cf10bfaefa mod_proxy_ftp: Fix comparison of char* to '\0' 
PR: 34512


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179704 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 02:44:39 +00:00
Paul Querna
de610e7787 - Fix closing </Files> tag. 
PR: 35178


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179703 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 02:41:00 +00:00
Paul Querna
75c1bee252 - Use the correct newline in htpasswd, instead of always using \n. 
PR: 25090


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179689 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-03 01:11:44 +00:00
Jeff Trawick
45e47b1a12 mod_mime_magic: Handle CRLF-format magic files so that it works with 
the default installation on Windows.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179622 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-02 18:24:27 +00:00
Paul Querna
579610c0c5 - Fix style nits in the new hash config code. No Functional changes. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179618 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-02 17:52:26 +00:00
Paul Querna
d4dfb2fc44 - Fix graceful restarts with the new hashed configuration. The hash now allocates out of the pconf pool, instead of the process pool. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179617 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-02 17:49:46 +00:00
Joe Orton
a91f8025a8 Note that SSLUsername is ignored if FakeBasicAuth is used. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179371 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-01 10:36:03 +00:00
Paul Querna
e1955172ab * event.c: Create ptrans pool as a child of pconf, to fix APR pool 
lifetime checks in apr_tables.c.

Based on r170896 changes to the Worker MPM.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179355 13f79535-47bb-0310-9956-ffa450edef68
 2005-06-01 05:00:29 +00:00
Jeff Trawick
002ca1448b downgrade the log level of a proc_mutex_unlock error message 
when it occurs during restart; it isn't at all uncommon then
when SysV semaphores are used for the accept mutex

same logic already in place for two other mutex calls


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@179317 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-31 23:57:41 +00:00
Paul Querna
3a4de8d171 - Use a hash for the configuration command lookup implementation. Now modules can properly directives without dependence on the LoadModule order. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178990 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-29 21:39:39 +00:00
Paul Querna
f96c9bb293 - Put a prefix on this error message to have a chance of finding it in the source. Just stuffing the parser error buffer into the error log is not helpful if I didn't know where it came from. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178818 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-27 20:23:08 +00:00
Astrid Malo
1769b9210a update transformation 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178796 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-27 16:48:56 +00:00
Hiroaki Kawai
2d3678a0ed update Japanese translation. 
Submitted by: kawai
Reviewed by: OKANO Takayoshi <kano@na.rim.or.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178722 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-27 01:06:32 +00:00
Paul Querna
df86e987f7 Fix segmentation fault in mod_auth_{basic,digest} when no provider is explicitly listed. 
Reported by: Ben Collins-Sussman <sussman collab.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178674 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-26 20:34:21 +00:00
Sander Striker
4fc1adcc5e * Makefile.win 
Fix config installation.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178665 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-26 18:33:23 +00:00
Joshua Slive
3d55a97253 Clean up the notes to the logformat section of the mod_log config docs. 
These have been growing using the "here's something else we should
say" technique, without any serious thought for readability.

In particular:

- Remove the "..." in all the format strings, since almost nobody
uses this and it can be confusing.  It is still documented, just
not included in the definitions.

- Create three sections: modifiers, examples, and a "notes" section
for stuff that doesn't go any place else.

- Remove the discussion of %v being the canonical name.  I think
that it is quite clear since the addition of %V what the difference
is.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178530 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 20:16:26 +00:00
Joshua Slive
3c2b4af0af We have been installing config.nice in build/ for a while, so we might 
as well tell people about it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178520 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 19:42:08 +00:00
André Malo
53b2e844c9 build all 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178508 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 18:43:38 +00:00
Bradley Nicholes
0f1cc92d4e Add mod_authn_alias to the list 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178496 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 17:38:35 +00:00
Joshua Slive
5d2f77b59a Reverse r168030 because the not-acceptable (406) 
custom error doc can't provide all the information
provided by the internal doc.  Also delete the corresponding
.html.var file to avoid future confusion.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178453 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 15:20:55 +00:00
Paul Querna
693107a967 - Use apr_uri_t to parse the proxy URL, instead of munging it by hand. Original code did not handle IPv6 Addresses correctly. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178391 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 06:42:33 +00:00
André Malo
e68b037e58 fix line endings and keyword expansion 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178365 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 04:31:28 +00:00
Wilfredo Sanchez
a77ad010eb Commits 160348 and 160352 are obviated by commit 178340 in APR. httpd 
should have to deal with EAGAIN on a socket it doesn't know is
non-blocking.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178341 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-25 01:55:28 +00:00
Bradley Nicholes
08f4747567 Documentation for mod_authn_alias 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178302 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-24 22:29:25 +00:00