]>
git.ipfire.org Git - thirdparty/apache/httpd.git/log
Rainer Jung [Mon, 24 Feb 2020 15:14:06 +0000 (15:14 +0000)]
Fix broken docs xml, misplaced </usage> tag [skip ci].
Backport of r1869606 from trunk (CTR).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874455 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 24 Feb 2020 14:56:48 +0000 (14:56 +0000)]
Promote and [skip ci].
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874454 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 24 Feb 2020 14:55:42 +0000 (14:55 +0000)]
Vote and [skip ci].
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874453 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 24 Feb 2020 14:15:02 +0000 (14:15 +0000)]
Vote and [skip ci].
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874451 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 24 Feb 2020 13:16:23 +0000 (13:16 +0000)]
propose AJP secret fix [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874445 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sun, 23 Feb 2020 13:31:11 +0000 (13:31 +0000)]
propose logging change [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874425 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Sat, 22 Feb 2020 17:12:44 +0000 (17:12 +0000)]
propose contributed usertrack patch [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874391 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 22 Feb 2020 00:21:52 +0000 (00:21 +0000)]
mpm_event: avoid possible KeepAlveTimeout off by -100 ms.
trunk patch: http://svn.apache.org/r1874277
2.4.x patch: svn merge -c
1874277 ^/httpd/httpd/trunk .
+1: ylavic, covener, minfrin
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874350 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 22 Feb 2020 00:19:49 +0000 (00:19 +0000)]
Vote and promote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874349 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 22 Feb 2020 00:15:36 +0000 (00:15 +0000)]
Backported.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874348 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 22 Feb 2020 00:15:09 +0000 (00:15 +0000)]
mod_http2: Fix an empty APLOGNO()
trunk patch: http://svn.apache.org/r1873927
2.4.x patch: svn merge -c
1873927 ^/httpd/httpd/trunk .
+1: jailletc36, ylavic, minfrin
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874347 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 22 Feb 2020 00:12:50 +0000 (00:12 +0000)]
Vote and promote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874345 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 09:45:11 +0000 (09:45 +0000)]
Backported in r1874134.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874304 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:39:53 +0000 (00:39 +0000)]
Backported. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874291 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:39:22 +0000 (00:39 +0000)]
Merge r1872036, r1872093, r1872102 from trunk:
Add a config layout for OpenWRT.
Align the OpenWRT config layout with the new kayout as defined by the project.
Correct the case on OpenWrt, the project prefers this capitalisation.
Submitted by: minfrin
Reviewed by: minfrin, jim, ylavic
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874290 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:36:52 +0000 (00:36 +0000)]
Backported. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874289 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:36:36 +0000 (00:36 +0000)]
Merge r1872042, r1872062 from trunk:
Add support for cross compiling to apxs. If apxs is being executed from somewhere
other than its target location, add that prefix to includes and library directories.
Without this, apxs would fail to find config_vars.mk and exit.
Allow instdso.sh to be found while cross compiling.
Submitted by: minfrin
Reviewed by: minfrin, jim, ylavic
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874288 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:34:13 +0000 (00:34 +0000)]
Backported. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874287 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:33:40 +0000 (00:33 +0000)]
Merge r1873985 from trunk:
Fix spelling errors found by codespell. [skip ci]
Submitted by: mrumph
Reviewed by: mrumph, jim, ylavic
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874286 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:10:24 +0000 (00:10 +0000)]
Backported. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874284 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:10:01 +0000 (00:10 +0000)]
Merge r1873888 from trunk:
*) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
[Michael Kaufmann <mail michael-kaufmann.ch>, Stefan Eissing]
Submitted by: icing
Reviewed by: icing, jim, ylavic
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874283 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:07:16 +0000 (00:07 +0000)]
Backported. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874282 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Fri, 21 Feb 2020 00:06:05 +0000 (00:06 +0000)]
Merge r1861950 from trunk:
mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
Reference: http://openssl.6102.n7.nabble.com/Shutting-down-openssl-is-the-correct-thing-to-do-nothing-td76857.html#a76862
Submitted by: minfrin
Reviewed by: minfrin, jim, ylavic
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874281 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 21 Feb 2020 00:05:08 +0000 (00:05 +0000)]
vote [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874280 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 20 Feb 2020 23:56:04 +0000 (23:56 +0000)]
Vote+promote. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874279 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Thu, 20 Feb 2020 23:53:36 +0000 (23:53 +0000)]
Propose, vote+promote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874278 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 20 Feb 2020 08:50:16 +0000 (08:50 +0000)]
Transforms. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874245 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 20 Feb 2020 08:47:24 +0000 (08:47 +0000)]
Merge r1874243 from trunk:
PKCS#11 URIs usable from 2.4.42 and later now. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874244 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Thu, 20 Feb 2020 07:07:37 +0000 (07:07 +0000)]
* Backported in r1874196, r1874201, r1874202 [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874239 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Wed, 19 Feb 2020 17:05:02 +0000 (17:05 +0000)]
Update mergeinfo. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874202 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Wed, 19 Feb 2020 17:04:21 +0000 (17:04 +0000)]
Sync PKCS#11 docs from trunk. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874201 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Wed, 19 Feb 2020 13:32:50 +0000 (13:32 +0000)]
Merge r1830819, r1830912, r1830913, r1830927, r1831168, r1831173, r1835240, r1835242, r1835615, r1836547 from trunk:
mod_ssl: Add support for loading private keys from ENGINEs. Support
for PKCS#11 URIs only, and PIN entry is not threaded through
SSLPassPhraseDialog config yet.
* modules/ssl/ssl_util.c (modssl_is_engine_key): New function.
* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLCertificateKeyFile):
Use it, skip check for file existence for engine keys.
* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_pkey):
New function.
* modules/ssl/ssl_engine_init.c (ssl_init_server_certs):
For engine keys, load via modssl_load_engine_pkey.
* modules/ssl/ssl_util_ssl.c, modules/ssl/ssl_util_ssl.h:
Remove modssl_read_encrypted_pkey() and helpers, added in r1804087
but never used.
* modules/ssl/ssl_util_ssl.c (modssl_read_privatekey): Remove unused
second argument.
* modules/ssl/ssl_engine_pphrase.c (ssl_load_encrypted_pkey): Adjust
accordingly.
Simplify the ssl_asn1_table API, remove abstraction (it is used only
to cache serialized EVP_PKEYs not any char * blobs), and document.
* modules/ssl/ssl_util.c (ssl_asn1_table_set): Take the EVP_PKEY and
serialize internally. Use ap_realloc. Return the ssl_asn1_t *
pointer. Don't call apr_hash_set() for unchanged pointer case.
* modules/ssl/ssl_engine_pphrase.c (ssl_load_encrypted_pkey):
Adjust for the above.
* modules/ssl/ssl_private.h: Adjust as above, add docs.
mod_ssl: Add support for loading TLS certificates through the PKCS#11
engine.
* modules/ssl/ssl_util.c (modssl_is_engine_id): Renamed
from modssl_is_engine_key.
* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLCertificateKeyFile):
Adjust accordingly.
(ssl_cmd_SSLCertificateFile): Also allow ENGINE cert ids.
* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_keypair):
Rename from modssl_load_engine_key; load certificate if
cert id is passed.
* modules/ssl/ssl_engine_init.c (ssl_init_server_certs): Optionally
load the certificate from the engine as well.
* docs/manual/: Update manual.
* modules/ssl/ssl_engine_init.c (ssl_init_server_certs): Add error
logno. Free EVP_PKEY in engine case. Never try reading ECDH/DH
parameters from engine ids.
Hook up PKCS#11 PIN entry through configured passphrase entry method.
* modules/ssl/ssl_engine_pphrase.c: Add wrappers for OpenSSL UI * API
around passphrase entry.
(modssl_load_engine_keypair): Take vhost ID and use above rather than
default OpenSSL UI.
* modules/ssl/ssl_engine_init.c (ssl_init_server_certs): Pass vhost ID.
Submitted by: Anderson Sasaki<ansaski redhat.com>, jorton
* modules/ssl/ssl_engine_pphrase.c: Add logno tags.
* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_keypair): Load
the engine associated with the private key (&cert) explicitly
rather than requiring the engine to be set as the default method
for all operations (with "SSLCryptoDevice <engine>").
(Thanks to Anderson Sasaki <ansasaki redhat.com> for suggested
improvement and guidance)
* modules/ssl/ssl_engine_pphrase.c: Fix linking against OpenSSL without
ENGINE support.
Submitted by: Anderson Sasaki <ansasaki redhat.com>, jorton
Reviewed by: jorton, jim, ylavic
Github: closes #92
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874196 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 19 Feb 2020 12:26:46 +0000 (12:26 +0000)]
the show goes on
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874192 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 19 Feb 2020 12:26:31 +0000 (12:26 +0000)]
add AP_REG_NO_DEFAULT to allow opt-out of pcre defaults
... and use it in mod_substitute to avoid DOTALL
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874191 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Eissing [Wed, 19 Feb 2020 10:55:22 +0000 (10:55 +0000)]
Merge of r1874188 from trunk:
* mod_md: fix of version string
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874189 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Tue, 18 Feb 2020 17:44:34 +0000 (17:44 +0000)]
Fix spelling errors in docs found by codespell. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874169 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Eissing [Mon, 17 Feb 2020 14:42:09 +0000 (14:42 +0000)]
Merged /httpd/httpd/trunk:r1870020,
1874133
*) mod_md:
- Prefer MDContactEmail directive to ServerAdmin for registration. New directive
thanks to Timothe Litt (@tlhackque).
- protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
check all matching virtual hosts for protocol support. Thanks to @mkauf.
- Corrected a check when OCSP stapling was configured for hosts
where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
- Softening the restrictions where mod_md configuration directives may appear. This should
allow for use in <If> and <Macro> sections. If all possible variations lead to the configuration
you wanted in the first place, is another matter.
[Michael Kaufmann <mail michael-kaufmann.ch>, Timothe Litt (@tlhackque),
Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874134 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Mon, 17 Feb 2020 08:31:22 +0000 (08:31 +0000)]
* Vote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874104 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sun, 16 Feb 2020 23:40:34 +0000 (23:40 +0000)]
Update proposal.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874091 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 15 Feb 2020 19:33:23 +0000 (19:33 +0000)]
Propose to hold on accepted backport.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874063 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 15 Feb 2020 18:16:31 +0000 (18:16 +0000)]
Add a note
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874061 13f79535 -47bb-0310-9956-
ffa450edef68
Yann Ylavic [Sat, 15 Feb 2020 17:38:11 +0000 (17:38 +0000)]
Vote, promote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874060 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sat, 15 Feb 2020 16:38:27 +0000 (16:38 +0000)]
some votes
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874058 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 14 Feb 2020 08:08:16 +0000 (08:08 +0000)]
* This actually a blocker as r1873747 introduced a regression
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1874002 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Thu, 13 Feb 2020 22:24:35 +0000 (22:24 +0000)]
Propose fix for spelling errors found by codespell. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873992 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Thu, 13 Feb 2020 18:53:00 +0000 (18:53 +0000)]
Add CHANGES entry for Travis CI testing. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873987 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Wed, 12 Feb 2020 14:44:09 +0000 (14:44 +0000)]
* Already addressed. Otherwise I was fine. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873946 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Wed, 12 Feb 2020 14:06:36 +0000 (14:06 +0000)]
* Add a comment [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873945 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Wed, 12 Feb 2020 13:43:25 +0000 (13:43 +0000)]
propose substitute fix [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873944 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Wed, 12 Feb 2020 05:41:38 +0000 (05:41 +0000)]
Propose [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873928 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 11 Feb 2020 16:24:57 +0000 (16:24 +0000)]
Transforms rhymes with [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873916 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 11 Feb 2020 16:22:58 +0000 (16:22 +0000)]
Merge r1873913 from trunk:
Clarify compatibility and interpretation of CGIDScriptTimeout. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873915 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 11 Feb 2020 16:20:00 +0000 (16:20 +0000)]
Merge r1873835, r1873889 from trunk:
mod_systemd.xml: add basic unit example [skip ci]
Add some blurb on correctly stopping the service w/mod_systemd. [skip ci]
Submitted by: elukey, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873914 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 11 Feb 2020 13:59:36 +0000 (13:59 +0000)]
CHANGES w/ credit for
1873906
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873910 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:24:10 +0000 (13:24 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873908 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:21:48 +0000 (13:21 +0000)]
Merge r1868645, r1868743, r1868929, r1868934, r1869077 from trunk:
mod_ssl: negotiate the TLS protocol version per name based vhost configuration.
By using the new ClientHello callback provided by OpenSSL 1.1.1, which runs at
the earliest connection stage, we can switch the SSL_CTX of the SSL connection
early enough for OpenSSL to take into account the protocol configuration of the
vhost.
In other words:
SSL_set_SSL_CTX(c->SSL, s->SSL_CTX)
followed by:
SSL_set_{min,max}_proto_version(SSL_CTX_get_{min,max}_proto_version(s->SSL_CTX))
works as expected at this stage (while the same from the SNI callback is
ignored by/due to OpenSSL's state machine).
Extracting the SNI (to select the relevant vhost) in the ClientHello callback
is not as easy as calling SSL_get_servername() though, we have to work with
the raw TLS extensions helpers provided by OpenSSL. I stole this code from a
test in the OpenSSL source code (i.e. client_hello_select_server_ctx() in
test/handshake_helper.c).
We can then call init_vhost() as with the SNI callback (in use only for OpenSSL
versions earlier than 1.1.1 now), and pass it the extracted SNI.
mod_ssl: follow up to r1868645.
Restore ssl_callback_ServerNameIndication() even with OpenSSL 1.1.1+, which
depends on its return value (OK/NOACK), mainly on session resumption, for
SSL_get_servername() to consider or ignore the SNI (returning NULL thus
making SSLStrictSNIVHostCheck fail for possibly legitimate cases).
This means that init_vhost() should accurately return whether the SNI exists
in the configured vhosts, even when it's called multiple times (e.g. first
from ClientHello callback and then from SNI callback), so save that state in
sslconn->vhost_found and reuse it.
mod_ssl: follow up to r1868645.
Keep the base server's SSLProtocol if none is configured on the vhost
selected by Hello/SNI callback.
mod_ssl: follow up to r1868645 and r1868929.
Merge ->protocol_set.
mod_ssl: follow up to r1868645.
CHANGES entry and docs' note.
Submitted by: ylavic
Reviewed by: ylavic, minfrin, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873907 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:19:05 +0000 (13:19 +0000)]
Merge r1873748 from trunk:
factor out TE=chunked checking
Submitted by: covener
Reviewed by: covener, minfrin, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873906 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:16:38 +0000 (13:16 +0000)]
Merge r1873747 from trunk:
factor out default regex flags
Submitted by: covener
Reviewed by: covener, minfrin, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873905 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:14:42 +0000 (13:14 +0000)]
Merge r1873745 from trunk:
trap bad FTP responses
Submitted by: covener
Reviewed by: covener, minfrin, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873904 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:14:12 +0000 (13:14 +0000)]
promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873903 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 11 Feb 2020 13:13:53 +0000 (13:13 +0000)]
test and vote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873902 13f79535 -47bb-0310-9956-
ffa450edef68
Stefan Eissing [Tue, 11 Feb 2020 10:38:48 +0000 (10:38 +0000)]
backport proposal for r1873888.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873890 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Tue, 11 Feb 2020 10:01:29 +0000 (10:01 +0000)]
Vote, promote, [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873887 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 9 Feb 2020 17:11:50 +0000 (17:11 +0000)]
fr doc rebuild
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873837 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sun, 9 Feb 2020 17:09:07 +0000 (17:09 +0000)]
XML update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873836 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sun, 9 Feb 2020 08:34:37 +0000 (08:34 +0000)]
Add some missing spaces
(r1873820 on trunk)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873823 13f79535 -47bb-0310-9956-
ffa450edef68
Luca Toscano [Sat, 8 Feb 2020 17:26:11 +0000 (17:26 +0000)]
documentation rebuild [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873802 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 8 Feb 2020 10:42:45 +0000 (10:42 +0000)]
...otherwise it was fine.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873781 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 8 Feb 2020 10:38:12 +0000 (10:38 +0000)]
Vote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873780 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 8 Feb 2020 10:31:43 +0000 (10:31 +0000)]
Add a comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873779 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Sat, 8 Feb 2020 10:26:46 +0000 (10:26 +0000)]
Add a comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873778 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Sat, 8 Feb 2020 08:17:37 +0000 (08:17 +0000)]
Fix a typo (doubled "(") and a small grammar issue
(r1873767 in trunk)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873768 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 7 Feb 2020 22:29:31 +0000 (22:29 +0000)]
propose
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873758 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 7 Feb 2020 17:01:07 +0000 (17:01 +0000)]
* Remove svn:mergeinfo property. We only track that at the root
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873744 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 7 Feb 2020 16:57:13 +0000 (16:57 +0000)]
Merged. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873743 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 7 Feb 2020 16:56:40 +0000 (16:56 +0000)]
Merge r1867970 from trunk:
* modules/generators/cgi_common.h (discard_script_output): Simplify
slightly and ensure constant rather than unlimited memory
consumption when discarding CGI script output (for e.g. a redirect
response).
PR: 64096
Submitted by: jorton
Reviewed by: jorton, covener, rpluem
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873742 13f79535 -47bb-0310-9956-
ffa450edef68
Ruediger Pluem [Fri, 7 Feb 2020 14:13:07 +0000 (14:13 +0000)]
* Vote and promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873740 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 7 Feb 2020 13:42:10 +0000 (13:42 +0000)]
done in
1873738 .
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873739 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 7 Feb 2020 13:41:33 +0000 (13:41 +0000)]
PR64066: config: Speed up graceful restarts
... by using pre-hashed command table.
Backports: r1872786.
Submitted By: Giovanni Bechis <giovanni paclan.it>
Reviewed By: jim, jorton, covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873738 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 7 Feb 2020 13:38:24 +0000 (13:38 +0000)]
vote/promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873737 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 6 Feb 2020 21:03:03 +0000 (21:03 +0000)]
Add new module in "new features" in 2.4.x section
(r1873718 in trunk)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873719 13f79535 -47bb-0310-9956-
ffa450edef68
Christophe Jaillet [Thu, 6 Feb 2020 20:58:03 +0000 (20:58 +0000)]
Add doc for mod_systemd in 2.4.x.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873716 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 3 Feb 2020 07:56:28 +0000 (07:56 +0000)]
Merged. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873520 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 3 Feb 2020 07:56:05 +0000 (07:56 +0000)]
Merge r1393976, r1393997, r1484554, r1528032, r1528034, r1614821, r1618579, r1618588, r1802251, r1840554, r1840555, r1872761, r1872763 from trunk:
* modules/arch/unix/mod_systemd.c: New module.
Submitted by: Jan Kaluza <jkaluza redhat.com>
* modules/arch/unix/mod_systemd.c (systemd_pre_mpm): Simplify code
slightly; no functional change.
Use AP_DECLARE_MODULE.
* configure.in: Simplify/fix systemd detection: move later to fix
autoconf warnings; define HAVE_SYSTEMD rather than using CPPFLAGS.
* server/listen.c: Use HAVE_SYSTEMD for systemd #define.
* modules/arch/unix/config5.m4: Update systemd headers check.
Don't link support/* against systemd libs.
* Makefile.in: Link httpd using $(HTTPD_LIBS).
* configure.in: Add systemd to HTTPD_LIBS rather than LIBS. Add PCRE
libs to HTTPD_LIBS.
* configure.in, acinclude.m4: Move systemd check to APACHE_CHECK_SYSTEMD
and use pkg-config where available.
mod_systemd: Add IdleShutdown - number of seconds in idle-state after which
httpd is shutdown. This is useful in a combination with socket activation.
Add mod_systemd documentation.
mod_systemd: Use AP_SIG_GRACEFUL instead of SIGWINCH.
Fix overriding ExtendedStatus to "off" with mod_systemd loaded, and
give more feedback to systemd during a reload.
* modules/arch/unix/mod_systemd.c (systemd_pre_config): New
function; tell systemd the service is reloading here.
(systemd_pre_mpm): Don't set ap_extended_status here, do nothing
if ExtendedStatus is off.
(register_hooks): Register pre_config hook.
* modules/arch/unix/mod_systemd.c (systemd_post_config): Fix systemd
service getting stuck reloading if "ExtendedStatus off" is
configured; regression in r1802251.
PR: 62697
* modules/arch/unix/mod_systemd.c (systemd_pre_mpm, systemd_monitor):
Ignore sd_notify{,f} failure cases as currently recommended by the
systemd API docs.
* modules/arch/unix/mod_systemd.c: Remove IdleShutdown feature which
was buggy per sf's feedback in 2.4.x backport proposal, and would
probably be more appropriate outside this module anyway.
* modules/arch/unix/config5.m4: Don't override enable_systemd, fixing
--enable-systemd=static per covener's suggestion in
<CALK=YjPrN644NtLROwYPyBeCpev-GHSAD2J-Z2hupLymZ0op-g@mail.gmail.com>
Also fix the APACHE_MODULE() usage; disable the module by default
for the "all" modules selection.
PR: 57632
Submitted by: jkaluza, jorton, nd
Reviewed by: jorton, jim, elukey
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873519 13f79535 -47bb-0310-9956-
ffa450edef68
Luca Toscano [Sun, 2 Feb 2020 17:24:36 +0000 (17:24 +0000)]
Promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873510 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 1 Feb 2020 15:16:46 +0000 (15:16 +0000)]
fr doc rebuild.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873480 13f79535 -47bb-0310-9956-
ffa450edef68
Lucien Gentis [Sat, 1 Feb 2020 15:15:32 +0000 (15:15 +0000)]
fr doc XML files updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873479 13f79535 -47bb-0310-9956-
ffa450edef68
Luca Toscano [Fri, 31 Jan 2020 16:12:33 +0000 (16:12 +0000)]
Vote on mod_systemd's backport patch
Tested building the module from a fresh copy of 2.4.x
on Debian 10 (Buster). Tested a systemd unit with "Type=notify",
everything works as expected. Thanks Joe!
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873426 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 31 Jan 2020 02:29:30 +0000 (02:29 +0000)]
Merge r1873395 from trunk:
PR63678: Clarify fcgistarter -c parm
Submitted By: Giovanni Bechis <giovanni paclan.it>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873396 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Thu, 30 Jan 2020 20:07:26 +0000 (20:07 +0000)]
Fix some grammar errors in the docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873381 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Thu, 30 Jan 2020 15:14:40 +0000 (15:14 +0000)]
Merge r1871810 from trunk:
*) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
Submitted by: icing
Reviewed by: icing, jim, steffenal
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873368 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Thu, 30 Jan 2020 15:13:30 +0000 (15:13 +0000)]
Merge r1872455 from trunk:
add r/o iterable tables
The current apr tables exposed support get/set but we cannot get the keys
or iterate. add _table() alternatives
Submitted by: covener
Reviewed by: covener, jim, humbedooh
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873367 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Thu, 30 Jan 2020 15:11:21 +0000 (15:11 +0000)]
Merge r1870650 from trunk:
PR63971 expose apr_table_unset for headers/envvars
via nil assignment
Submitted by: covener
Reviewed by: covener, jim, humbedooh
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873366 13f79535 -47bb-0310-9956-
ffa450edef68
Mike Rumph [Tue, 28 Jan 2020 21:24:55 +0000 (21:24 +0000)]
Fixed some grammar errors in the docs.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873272 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Mon, 27 Jan 2020 19:26:38 +0000 (19:26 +0000)]
vote/promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873227 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Mon, 27 Jan 2020 15:23:07 +0000 (15:23 +0000)]
Propose PR 64096 fix. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873220 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Thu, 23 Jan 2020 08:02:58 +0000 (08:02 +0000)]
Have not seen false negatives with t/apache/expr_string.t since
r1872705 so let's try e-mail notifications for 2.4.x again. [skip ci]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873059 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Wed, 22 Jan 2020 12:47:08 +0000 (12:47 +0000)]
casting some votes
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873031 13f79535 -47bb-0310-9956-
ffa450edef68
Steffen Land [Wed, 22 Jan 2020 11:19:44 +0000 (11:19 +0000)]
Vote mod_http2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873028 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Tue, 21 Jan 2020 14:36:42 +0000 (14:36 +0000)]
superceded
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1873013 13f79535 -47bb-0310-9956-
ffa450edef68