1
0
mirror of https://github.com/apache/httpd.git synced 2025-11-15 12:41:11 +03:00
Commit Graph

8834 Commits

Author SHA1 Message Date
Kaspar Brand
a6a324f9bb Streamline ephemeral key handling:
- drop support for ephemeral RSA keys (only allowed/needed
  for export ciphers)

- drop pTmpKeys from the per-process SSLModConfigRec, and remove
  the temp key generation at startup (unnecessary for DHE/ECDHE)

- unconditionally disable null and export-grade ciphers by always
  prepending "!aNULL:!eNULL:!EXP:" to any cipher suite string

- do not configure per-connection SSL_tmp_*_callbacks, as it is
  sufficient to set them for the SSL_CTX

- set default curve for ECDHE at startup, obviating the need
  for a per-handshake callback, for the time being (and also
  configure SSL_OP_SINGLE_ECDH_USE, previously left out)

For additional background, see
https://mail-archives.apache.org/mod_mbox/httpd-dev/201309.mbox/%3C52358ED1.2070704@velox.ch%3E


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1526168 13f79535-47bb-0310-9956-ffa450edef68
2013-09-25 12:52:35 +00:00
Eric Covener
b15541f8e0 Change the default value of AuthLDAPMaxSubGroupDepth, so sub-group searching
is opt-in.  Not intended for 2.4 backport.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525866 13f79535-47bb-0310-9956-ffa450edef68
2013-09-24 12:14:57 +00:00
Jan Kaluža
a4330cc11c mod_syslog: New module implementing syslog ap_error_log provider.
Previously, this code was part of core, now it's in separate module.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525600 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 14:16:17 +00:00
Jan Kaluža
59bb55791e Add ap_errorlog_provider to make ErrorLog logging modular. Move
syslog support from core to new mod_syslog.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525597 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 14:02:27 +00:00
Eric Covener
96fd5003e1 add a note about sub-group searching and large groups.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525588 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 13:42:06 +00:00
Rich Bowen
c4b63bf4dc Remove grossly outdated browser compatibility column
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525489 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 01:05:50 +00:00
Rich Bowen
8f317a3e95 Various rebuilds
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525481 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 00:25:34 +00:00
Rich Bowen
cb934d6742 Missing '$' in variable.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525479 13f79535-47bb-0310-9956-ffa450edef68
2013-09-23 00:22:09 +00:00
Rich Bowen
819a5e54ba Correct XMl error. Rebuild docs/
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525458 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 22:06:21 +00:00
Rich Bowen
1a283d54e1 Clearer explanation of undefining a macro.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525457 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 22:03:38 +00:00
Rich Bowen
76960e9257 various other rebuilds
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525438 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:25:42 +00:00
Rich Bowen
8ae9a2861a Renames the 'tips' section.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525433 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:23:08 +00:00
Rich Bowen
7c8cd7e2eb Rename: This is more a "tips" section than technical details.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525431 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:21:12 +00:00
Rich Bowen
9e1074c931 Rebuild mod_macro docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525428 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:12:54 +00:00
Rich Bowen
7ac53759a1 Restructure the mod_macro doc a little, with a 'usage', 'details', and
'examples' section. More examples to come.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525426 13f79535-47bb-0310-9956-ffa450edef68
2013-09-22 20:11:05 +00:00
Jeff Trawick
76dc5d2055 Borrow a fix from mod_authnz_fcgi:
mod_proxy_fcgi: Handle reading protocol data that is split between
packets.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525280 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 18:48:20 +00:00
Jeff Trawick
6a64fadd63 Bring some envvar flexibility from mod_authnz_fcgi to mod_proxy_fcgi:
mod_proxy_fcgi: Remove 64K limit on encoded length of all envvars.
An individual envvar with an encoded length of more than 16K will be
omitted.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525276 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 18:29:57 +00:00
Lucien Gentis
e0676bc5be Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1525239 13f79535-47bb-0310-9956-ffa450edef68
2013-09-21 14:22:34 +00:00
Rich Bowen
671803f375 rebuild
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524242 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 22:27:59 +00:00
Rich Bowen
f3d1e3de45 subject/verb
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524240 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 22:25:57 +00:00
Jim Jagielski
b18fa49a75 revert 1524161 for the time being
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524190 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 19:37:03 +00:00
Jim Jagielski
a10a8937ac RFC2616 issue
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524161 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 18:37:18 +00:00
Daniel Ruggeri
90f9939cee Add exec: callout support for mod_session_crypto
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524079 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 14:53:21 +00:00
Jeff Trawick
619866c198 fill in missing message numbers in APLOGNO() invocations
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1524018 13f79535-47bb-0310-9956-ffa450edef68
2013-09-17 12:51:08 +00:00
Daniel Gruno
b94df9a993 mod_lua: Adjust documentation for r:wsread()
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523433 13f79535-47bb-0310-9956-ffa450edef68
2013-09-15 12:50:50 +00:00
Eric Covener
845a820dcf doc change=no
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523323 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 21:03:11 +00:00
Graham Leggett
4b7e438b31 mod_auth_digest: Be more specific when the realm mismatches because the
realm has not been specified.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523239 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 13:48:46 +00:00
Lucien Gentis
735a131423 Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1523237 13f79535-47bb-0310-9956-ffa450edef68
2013-09-14 13:47:29 +00:00
Daniel Gruno
e9a77cfc87 fix broken link
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1522936 13f79535-47bb-0310-9956-ffa450edef68
2013-09-13 13:59:42 +00:00
Daniel Gruno
731d18dd4c mod_lua: Add rudimentary WebSocket support. This is a WIP (emphasis on the W, I and P) and subject to change as the idea surrounding it evolves into something meaningful. But for now, WebSockets, yay! Please do review this!
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1522030 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 20:50:46 +00:00
Jeff Trawick
c2e05dfd8b make docs xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521911 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:42:24 +00:00
Jeff Trawick
a4212a3c05 fix tagging problems that break validation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521910 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:39:52 +00:00
Jeff Trawick
2fae813197 Add "default user id" capability for authorizers that handle
check_authn and return success but don't have a specific user
id to assign (e.g., guest users).



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521909 13f79535-47bb-0310-9956-ffa450edef68
2013-09-11 15:37:34 +00:00
Rich Bowen
aa4d5d525d Drag the example into this decade.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521498 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 14:16:24 +00:00
Rich Bowen
0cc2ba48c1 Rebuild
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521346 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 02:06:19 +00:00
Rich Bowen
9dafb1774e Replaces some awkward phrasing
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521342 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 01:57:14 +00:00
Rich Bowen
d374952ca0 Add ProxyExpressEnable directive to example
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1521337 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 01:50:08 +00:00
Eric Covener
46d97009e1 add "Header note" which was the solution for two users this week on IRC.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520908 13f79535-47bb-0310-9956-ffa450edef68
2013-09-08 20:04:06 +00:00
Eric Covener
7df7f005c4 elaborate on fastcgistarer, which is a) not yet supported on windows and
b) only needed when the frameworker doesn't have something built-in.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520875 13f79535-47bb-0310-9956-ffa450edef68
2013-09-08 15:02:18 +00:00
Lucien Gentis
a4d716b6a9 Update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520780 13f79535-47bb-0310-9956-ffa450edef68
2013-09-07 15:06:45 +00:00
Christophe Jaillet
b663bd4a01 Add a warning if protocol given in SSLProtocol or SSLProxyProtocol will override other parameters given in the same directive.
This could be a missing + or - prefix.

PR 52820

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520445 13f79535-47bb-0310-9956-ffa450edef68
2013-09-05 22:30:59 +00:00
Jeff Trawick
dedba685f4 Mistakenly try to use a line comment to the end of your Listen
directive on Windows => crash-o-matic

Or,

WinNT MPM: Don't crash during child process initialization if the
Listen protocol is unrecognized. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520368 13f79535-47bb-0310-9956-ffa450edef68
2013-09-05 16:33:11 +00:00
Daniel Gruno
38024c1665 Add r:setcookie(key, val, secure, expires) and r:getcookie(key) to the request_rec table.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519977 13f79535-47bb-0310-9956-ffa450edef68
2013-09-04 10:47:46 +00:00
Christophe Jaillet
b8e0469f43 Add missing space
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519579 13f79535-47bb-0310-9956-ffa450edef68
2013-09-03 06:27:48 +00:00
Eric Covener
918ccd0014 mention some trickyness with mod_lua + mod_filter.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519488 13f79535-47bb-0310-9956-ffa450edef68
2013-09-02 18:08:25 +00:00
Daniel Gruno
0c8d0ccee0 some xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519279 13f79535-47bb-0310-9956-ffa450edef68
2013-09-01 15:12:48 +00:00
Daniel Gruno
1ad63fbb73 Adding a simple logging hook for mod_lua, which allows users to create their own logs or bypass the generic logging on a per-request basis.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519277 13f79535-47bb-0310-9956-ffa450edef68
2013-09-01 15:10:32 +00:00
Lucien Gentis
1384d80768 Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1519189 13f79535-47bb-0310-9956-ffa450edef68
2013-08-31 16:36:38 +00:00
Eric Covener
3c60771823 remove <var> from the literal parm options
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1518267 13f79535-47bb-0310-9956-ffa450edef68
2013-08-28 15:51:19 +00:00
Eric Covener
43c2d37105 add "default" option to LDAPReferrals, to allow "off" to really mean "off".
Need compatibility tag/note if backported.

Submitted By: Jan Kaluza & Eric Covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1518265 13f79535-47bb-0310-9956-ffa450edef68
2013-08-28 15:49:07 +00:00