Kaspar Brand
a6a324f9bb
Streamline ephemeral key handling:
...
- drop support for ephemeral RSA keys (only allowed/needed
for export ciphers)
- drop pTmpKeys from the per-process SSLModConfigRec, and remove
the temp key generation at startup (unnecessary for DHE/ECDHE)
- unconditionally disable null and export-grade ciphers by always
prepending "!aNULL:!eNULL:!EXP:" to any cipher suite string
- do not configure per-connection SSL_tmp_*_callbacks, as it is
sufficient to set them for the SSL_CTX
- set default curve for ECDHE at startup, obviating the need
for a per-handshake callback, for the time being (and also
configure SSL_OP_SINGLE_ECDH_USE, previously left out)
For additional background, see
https://mail-archives.apache.org/mod_mbox/httpd-dev/201309.mbox/%3C52358ED1.2070704@velox.ch%3E
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526168 13f79535-47bb-0310-9956-ffa450edef68
2013-09-25 12:52:35 +00:00
Eric Covener
b15541f8e0
Change the default value of AuthLDAPMaxSubGroupDepth, so sub-group searching
...
is opt-in. Not intended for 2.4 backport.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525866 13f79535-47bb-0310-9956-ffa450edef68
2013-09-24 12:14:57 +00:00
Jan Kaluža
a4330cc11c
mod_syslog: New module implementing syslog ap_error_log provider.
...
Previously, this code was part of core, now it's in separate module.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525600 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 14:16:17 +00:00
Jan Kaluža
59bb55791e
Add ap_errorlog_provider to make ErrorLog logging modular. Move
...
syslog support from core to new mod_syslog.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525597 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 14:02:27 +00:00
Eric Covener
96fd5003e1
add a note about sub-group searching and large groups.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525588 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 13:42:06 +00:00
Rich Bowen
c4b63bf4dc
Remove grossly outdated browser compatibility column
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525489 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 01:05:50 +00:00
Rich Bowen
8f317a3e95
Various rebuilds
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525481 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 00:25:34 +00:00
Rich Bowen
cb934d6742
Missing '$' in variable.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525479 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 00:22:09 +00:00
Rich Bowen
819a5e54ba
Correct XMl error. Rebuild docs/
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525458 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 22:06:21 +00:00
Rich Bowen
1a283d54e1
Clearer explanation of undefining a macro.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525457 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 22:03:38 +00:00
Rich Bowen
76960e9257
various other rebuilds
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525438 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:25:42 +00:00
Rich Bowen
8ae9a2861a
Renames the 'tips' section.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525433 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:23:08 +00:00
Rich Bowen
7c8cd7e2eb
Rename: This is more a "tips" section than technical details.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525431 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:21:12 +00:00
Rich Bowen
9e1074c931
Rebuild mod_macro docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525428 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:12:54 +00:00
Rich Bowen
7ac53759a1
Restructure the mod_macro doc a little, with a 'usage', 'details', and
...
'examples' section. More examples to come.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525426 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:11:05 +00:00
Jeff Trawick
76dc5d2055
Borrow a fix from mod_authnz_fcgi:
...
mod_proxy_fcgi: Handle reading protocol data that is split between
packets.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525280 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 18:48:20 +00:00
Jeff Trawick
6a64fadd63
Bring some envvar flexibility from mod_authnz_fcgi to mod_proxy_fcgi:
...
mod_proxy_fcgi: Remove 64K limit on encoded length of all envvars.
An individual envvar with an encoded length of more than 16K will be
omitted.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525276 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 18:29:57 +00:00
Lucien Gentis
e0676bc5be
Updates.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525239 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 14:22:34 +00:00
Rich Bowen
671803f375
rebuild
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524242 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 22:27:59 +00:00
Rich Bowen
f3d1e3de45
subject/verb
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524240 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 22:25:57 +00:00
Jim Jagielski
b18fa49a75
revert 1524161 for the time being
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524190 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 19:37:03 +00:00
Jim Jagielski
a10a8937ac
RFC2616 issue
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524161 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 18:37:18 +00:00
Daniel Ruggeri
90f9939cee
Add exec: callout support for mod_session_crypto
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524079 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 14:53:21 +00:00
Jeff Trawick
619866c198
fill in missing message numbers in APLOGNO() invocations
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524018 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 12:51:08 +00:00
Daniel Gruno
b94df9a993
mod_lua: Adjust documentation for r:wsread()
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523433 13f79535-47bb-0310-9956-ffa450edef68
2013-09-15 12:50:50 +00:00
Eric Covener
845a820dcf
doc change=no
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523323 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 21:03:11 +00:00
Graham Leggett
4b7e438b31
mod_auth_digest: Be more specific when the realm mismatches because the
...
realm has not been specified.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523239 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 13:48:46 +00:00
Lucien Gentis
735a131423
Updates.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523237 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 13:47:29 +00:00
Daniel Gruno
e9a77cfc87
fix broken link
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1522936 13f79535-47bb-0310-9956-ffa450edef68
2013-09-13 13:59:42 +00:00
Daniel Gruno
731d18dd4c
mod_lua: Add rudimentary WebSocket support. This is a WIP (emphasis on the W, I and P) and subject to change as the idea surrounding it evolves into something meaningful. But for now, WebSockets, yay! Please do review this!
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1522030 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 20:50:46 +00:00
Jeff Trawick
c2e05dfd8b
make docs xforms
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521911 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:42:24 +00:00
Jeff Trawick
a4212a3c05
fix tagging problems that break validation
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521910 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:39:52 +00:00
Jeff Trawick
2fae813197
Add "default user id" capability for authorizers that handle
...
check_authn and return success but don't have a specific user
id to assign (e.g., guest users).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521909 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:37:34 +00:00
Rich Bowen
aa4d5d525d
Drag the example into this decade.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521498 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 14:16:24 +00:00
Rich Bowen
0cc2ba48c1
Rebuild
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521346 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 02:06:19 +00:00
Rich Bowen
9dafb1774e
Replaces some awkward phrasing
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521342 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 01:57:14 +00:00
Rich Bowen
d374952ca0
Add ProxyExpressEnable directive to example
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521337 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 01:50:08 +00:00
Eric Covener
46d97009e1
add "Header note" which was the solution for two users this week on IRC.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520908 13f79535-47bb-0310-9956-ffa450edef68
2013-09-08 20:04:06 +00:00
Eric Covener
7df7f005c4
elaborate on fastcgistarer, which is a) not yet supported on windows and
...
b) only needed when the frameworker doesn't have something built-in.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520875 13f79535-47bb-0310-9956-ffa450edef68
2013-09-08 15:02:18 +00:00
Lucien Gentis
a4d716b6a9
Update.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520780 13f79535-47bb-0310-9956-ffa450edef68
2013-09-07 15:06:45 +00:00
Christophe Jaillet
b663bd4a01
Add a warning if protocol given in SSLProtocol or SSLProxyProtocol will override other parameters given in the same directive.
...
This could be a missing + or - prefix.
PR 52820
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520445 13f79535-47bb-0310-9956-ffa450edef68
2013-09-05 22:30:59 +00:00
Jeff Trawick
dedba685f4
Mistakenly try to use a line comment to the end of your Listen
...
directive on Windows => crash-o-matic
Or,
WinNT MPM: Don't crash during child process initialization if the
Listen protocol is unrecognized.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520368 13f79535-47bb-0310-9956-ffa450edef68
2013-09-05 16:33:11 +00:00
Daniel Gruno
38024c1665
Add r:setcookie(key, val, secure, expires) and r:getcookie(key) to the request_rec table.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519977 13f79535-47bb-0310-9956-ffa450edef68
2013-09-04 10:47:46 +00:00
Christophe Jaillet
b8e0469f43
Add missing space
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519579 13f79535-47bb-0310-9956-ffa450edef68
2013-09-03 06:27:48 +00:00
Eric Covener
918ccd0014
mention some trickyness with mod_lua + mod_filter.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519488 13f79535-47bb-0310-9956-ffa450edef68
2013-09-02 18:08:25 +00:00
Daniel Gruno
0c8d0ccee0
some xforms
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519279 13f79535-47bb-0310-9956-ffa450edef68
2013-09-01 15:12:48 +00:00
Daniel Gruno
1ad63fbb73
Adding a simple logging hook for mod_lua, which allows users to create their own logs or bypass the generic logging on a per-request basis.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519277 13f79535-47bb-0310-9956-ffa450edef68
2013-09-01 15:10:32 +00:00
Lucien Gentis
1384d80768
Updates.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519189 13f79535-47bb-0310-9956-ffa450edef68
2013-08-31 16:36:38 +00:00
Eric Covener
3c60771823
remove <var> from the literal parm options
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1518267 13f79535-47bb-0310-9956-ffa450edef68
2013-08-28 15:51:19 +00:00
Eric Covener
43c2d37105
add "default" option to LDAPReferrals, to allow "off" to really mean "off".
...
Need compatibility tag/note if backported.
Submitted By: Jan Kaluza & Eric Covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1518265 13f79535-47bb-0310-9956-ffa450edef68
2013-08-28 15:49:07 +00:00