Propose conn/req hostname fix

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1848256 13f79535-47bb-0310-9956-ffa450edef68

quick votes, promote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1848255 13f79535-47bb-0310-9956-ffa450edef68

Propose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1848239 13f79535-47bb-0310-9956-ffa450edef68

votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847457 13f79535-47bb-0310-9956-ffa450edef68

Propose.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847432 13f79535-47bb-0310-9956-ffa450edef68

*) mod_setenvif: We can have expressions that become true if a regex pattern
   in the expression does NOT match. In this case val is NULL
   and we should just set the value for the environment variable
   like in the pattern case.
+1: jailletc36, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847292 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847291 13f79535-47bb-0310-9956-ffa450edef68

*) mod_dav: Fix invalid Location header when a resource is created by passing
   an absolute URI on the request line
+1: jailletc36, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847290 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847289 13f79535-47bb-0310-9956-ffa450edef68

*) mod_session_cookie: avoid duplicate Set-Cookie headers in the response.
   trunk patch: http://svn.apache.org/r1843244
+1: elukey, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847288 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847287 13f79535-47bb-0310-9956-ffa450edef68

*) event MPM: Don't log "at MaxRequestWorkers" when there are still idle threads,
   just like worker.
+1: covener, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847286 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847285 13f79535-47bb-0310-9956-ffa450edef68

*) mod_ssl: Fixes PR 62654 where "require ssl" did not work on HTTP/2
   connections, and PR 61519 where $HTTPS was incorrect for the
   "SSLEngine optional" case.
+1: jorton, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847284 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847283 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: Fixes PR 62880 where certificate loading fails bc SSL ERRs are
         not cleared beforehand.
+1: icing, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847280 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847279 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: Fix the error code returned in an error path of 'ssl_io_filter_handshake()'
This messes-up error handling performed in 'ssl_io_filter_error()'
+1: ylavic, jim, minfrin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847278 13f79535-47bb-0310-9956-ffa450edef68

Vote and promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1847277 13f79535-47bb-0310-9956-ffa450edef68

* Add a comment

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846375 13f79535-47bb-0310-9956-ffa450edef68

Propose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846341 13f79535-47bb-0310-9956-ffa450edef68

backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846306 13f79535-47bb-0310-9956-ffa450edef68

Add PR reference.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846255 13f79535-47bb-0310-9956-ffa450edef68

r1846112 is a bit too tomcatty, counter-proposal...

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846218 13f79535-47bb-0310-9956-ffa450edef68

backport propoosal

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846126 13f79535-47bb-0310-9956-ffa450edef68

backport proposal

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846115 13f79535-47bb-0310-9956-ffa450edef68

removing unwanted file change

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846114 13f79535-47bb-0310-9956-ffa450edef68

backport proposal

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846113 13f79535-47bb-0310-9956-ffa450edef68

Merge r1837250 from trunk:

If ProxyPassReverse is used for reverse mapping of relative redirects, subsequent ProxyPassReverse statements, whether they are relative or absolute, may fail.

PR 60408 [Peter Haworth <pmh1wheel gmail.com>]
Submitted by: jailletc36
Reviewed by: jailletc36, rpluem, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846044 13f79535-47bb-0310-9956-ffa450edef68

promote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846043 13f79535-47bb-0310-9956-ffa450edef68

Backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1846042 13f79535-47bb-0310-9956-ffa450edef68

Propose backport of fix to PR 62880.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1845769 13f79535-47bb-0310-9956-ffa450edef68

* Vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1845267 13f79535-47bb-0310-9956-ffa450edef68

Propose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1845125 13f79535-47bb-0310-9956-ffa450edef68

fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844962 13f79535-47bb-0310-9956-ffa450edef68

XML updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844961 13f79535-47bb-0310-9956-ffa450edef68

Propose.

Tested with a highly modified dav.t which sends raw commands on a sock + wireshark to check the result.
(I've not found an easy way to force HTTP::DAV to use absolute URI)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844908 13f79535-47bb-0310-9956-ffa450edef68

Updates for announcement of 2.4.37

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844645 13f79535-47bb-0310-9956-ffa450edef68

documentation rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844559 13f79535-47bb-0310-9956-ffa450edef68

mod_proxy.xml: backport r1844556

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844558 13f79535-47bb-0310-9956-ffa450edef68

add note about PR 62025 for backport proposal of r1832092

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844532 13f79535-47bb-0310-9956-ffa450edef68

documentation rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844476 13f79535-47bb-0310-9956-ffa450edef68

mod_headers.xml: backport r1844401

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844475 13f79535-47bb-0310-9956-ffa450edef68

propose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844469 13f79535-47bb-0310-9956-ffa450edef68

svn:eol-style = native

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844302 13f79535-47bb-0310-9956-ffa450edef68

make sure svn commit mails are correctly encoded

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844301 13f79535-47bb-0310-9956-ffa450edef68

build bootstrap

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844300 13f79535-47bb-0310-9956-ffa450edef68

Post 2.4.37 tag updates

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844248 13f79535-47bb-0310-9956-ffa450edef68

Get ready to tag httpd 2.4.37

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844246 13f79535-47bb-0310-9956-ffa450edef68

fr doc : adding UTF-8 html files.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844231 13f79535-47bb-0310-9956-ffa450edef68

fr doc : deleting ISO-8859-1 html files.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844229 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: Correctly merge configurations that have client certificates set
by SSLProxyMachineCertificate{File|Path}.

The certificates and keys loaded during configuration time got lost during
runtime if e.g. SSLProxyMachineCertificate{File|Path} was set on virtual host
level and there was an SSL directive at directory level, e.g. SSLRequire.

This fixes a regression likely introduced in r1740928 (backported in r1824187).

Backport of r1844002 from trunk.

Submitted by: rjung
Reviewed by: rjung, rpluem, jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844226 13f79535-47bb-0310-9956-ffa450edef68

mod_ssl: We need to get the SSL_CTX for further processing
down below.

This fixes a crash during SSL renegotiation with OptRenegotiate set,
when client certificates are available from the original handshake
but were originally not verified and should get verified now.
This is a regression in 2.4.36 (unreleased).

Backport of r1828793 from trunk.

Submitted by: rjung
Reviewed by: rjung, rpluem, jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844223 13f79535-47bb-0310-9956-ffa450edef68

Vote, promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844222 13f79535-47bb-0310-9956-ffa450edef68

* Vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844221 13f79535-47bb-0310-9956-ffa450edef68

Another mod_ssl backport proposal.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844219 13f79535-47bb-0310-9956-ffa450edef68

Propose backport to prevent crashes during
SSL renegotiation with OptRenegotiate set,
client certificates available from original
handshake but client certs were originaly not
verified and should get verified now.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844217 13f79535-47bb-0310-9956-ffa450edef68

Add a changelog entry for r1844047.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844069 13f79535-47bb-0310-9956-ffa450edef68

  *) mod_ssl: Handle SSL_read() return code 0 similarly to <0. It is needed
              when using OpenSSL 1.1.1 and should not harm for versions before
              1.1.1.
              Without the patch for 1.1.1 a 0 byte read no longer results in
              EAGAIN but instead in APR_EOF which leads to HTTP/2 failures.
              For the changelog: Fix HTTP/2 failures when using OpenSSL 1.1.1.
     trunk patch: http://svn.apache.org/r1843954
     2.4.x patch: svn merge -c 1843954 ^/httpd/httpd/trunk .
     +1: rjung, druggeri, rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844047 13f79535-47bb-0310-9956-ffa450edef68

* Vote and promote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844037 13f79535-47bb-0310-9956-ffa450edef68

Can confirm this resolves H2 test failure issues introduced w/ OpenSSL 1.1.1

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844034 13f79535-47bb-0310-9956-ffa450edef68

Typo in proposed revision number.
Thanks to Daniel for the heads up.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844029 13f79535-47bb-0310-9956-ffa450edef68

Died on the vine

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1844007 13f79535-47bb-0310-9956-ffa450edef68

Propose.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843989 13f79535-47bb-0310-9956-ffa450edef68

backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843918 13f79535-47bb-0310-9956-ffa450edef68

XML update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843682 13f79535-47bb-0310-9956-ffa450edef68

propose "at maxrequestworkers" patch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843555 13f79535-47bb-0310-9956-ffa450edef68

* This is addressed now

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843533 13f79535-47bb-0310-9956-ffa450edef68

Post 2.4.36 tag updates

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843493 13f79535-47bb-0310-9956-ffa450edef68

Get ready to tag httpd 2.4.36

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843491 13f79535-47bb-0310-9956-ffa450edef68

Note release

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843472 13f79535-47bb-0310-9956-ffa450edef68

Merge r1843242 from trunk:

mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified
responses allowing these modules to properly set or fix-up the response
headers such as Vary or ETag.

This change follows up on r1837056 that disabled that special handling and
thus resulted in a potential violation of RFC7232, 4.1:

   The server generating a 304 response MUST generate any of the following
   header fields that would have been sent in a 200 (OK) response to the
   same request: Cache-Control, Content-Location, Date, ETag, Expires,
   and Vary.)

References:
  https://lists.apache.org/thread.html/f5733ca6743757e8aa8b58a0cd9e27680971551c2a20f5606c66507e@%3Cdev.httpd.apache.org%3E
  https://tools.ietf.org/html/rfc7232#section-4.1
Submitted by: kotkov
Reviewed by: kotkov, ylavic, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843469 13f79535-47bb-0310-9956-ffa450edef68

Merge r1843426 from trunk:

mod_http2: adding defensive code for stream EOS handling, in case the request handler
     missed to signal it the normal way (eos buckets). Addresses github issues
     https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167
     and https://github.com/icing/mod_h2/issues/170.

Submitted by: icing
Reviewed by: icing, ylavic, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843468 13f79535-47bb-0310-9956-ffa450edef68

Merge r1839303, r1843290 from trunk:

These need to be signed longs... cast as needed.

Add CHANGES entry
Submitted by: jim, jailletc36
Reviewed by: jailletc36 (by inspection), ylavic, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843467 13f79535-47bb-0310-9956-ffa450edef68

approved backports

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843466 13f79535-47bb-0310-9956-ffa450edef68

backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843464 13f79535-47bb-0310-9956-ffa450edef68

Vote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843444 13f79535-47bb-0310-9956-ffa450edef68

adding proposal to backport h2 eos handling fix

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843434 13f79535-47bb-0310-9956-ffa450edef68

ab: Add client certificate support.
trunk: http://svn.apache.org/r1841784
2.4.x: svn merge -c r1841784 ^/httpd/httpd/trunk .
+1: minfrin, jim, ylavic

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843412 13f79535-47bb-0310-9956-ffa450edef68

ab: print Server Temp Key information.
trunk patch: http://svn.apache.org/r1738415
             http://svn.apache.org/r1826930
2.4.x patch: https://svn.apache.org/repos/asf/httpd/httpd/patches/2.4.x/httpd-2.4-ab.patch
+1: minfrin, jim, ylavic

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843411 13f79535-47bb-0310-9956-ffa450edef68

Merge r1842540 from trunk:

* Pickup the proxy related configuration for verify mode and verify depth and
  not the configuration settings for frontend connections in case of
  connections by the proxy to the backend.

PR: 62769

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843370 13f79535-47bb-0310-9956-ffa450edef68

  *) mod_ssl: downgrade logging of requests without SNI when SSLStrictSNIVHostCheck is on
              (just a quality of life improvement for log-reading admins):
     trunk: http://svn.apache.org/r1841446
     trunk: http://svn.apache.org/r1841455
     2.4.x branch: svn merge -c 1841446,1841455 ^/httpd/httpd/trunk .
     +1: icing, minfrin, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843369 13f79535-47bb-0310-9956-ffa450edef68

vote/promote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843367 13f79535-47bb-0310-9956-ffa450edef68

Votes.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843298 13f79535-47bb-0310-9956-ffa450edef68

Add CHANGES entry

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843291 13f79535-47bb-0310-9956-ffa450edef68

Correctly merge r1836287, backported in 2.4.x in r1836288.
(unless I missed something, the function is also called 'ap_directory_walk' in 2.4.x)

This is only a comment update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843284 13f79535-47bb-0310-9956-ffa450edef68

On the 2.4.x branch: Propose the mod_brotli/mod_deflate 304 handling
fix (r1843242) for backport.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843245 13f79535-47bb-0310-9956-ffa450edef68

vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843241 13f79535-47bb-0310-9956-ffa450edef68

Vote, promote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843209 13f79535-47bb-0310-9956-ffa450edef68

Propose.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843208 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1843206 13f79535-47bb-0310-9956-ffa450edef68

promote w/ 3

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842896 13f79535-47bb-0310-9956-ffa450edef68

Backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842895 13f79535-47bb-0310-9956-ffa450edef68

XForms.

Backport of r1842640 from trunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842642 13f79535-47bb-0310-9956-ffa450edef68

Remove garbage.

Backport of r1842639 from trunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842641 13f79535-47bb-0310-9956-ffa450edef68

XML update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842330 13f79535-47bb-0310-9956-ffa450edef68

XML update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1842327 13f79535-47bb-0310-9956-ffa450edef68

Try to be a bit more concise in OpenSSL 1.1.1/TLSv1.3 changes,
apportion blame/credit widely.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1841920 13f79535-47bb-0310-9956-ffa450edef68

Propose.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1841785 13f79535-47bb-0310-9956-ffa450edef68

documentation rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1841686 13f79535-47bb-0310-9956-ffa450edef68