]>
git.ipfire.org Git - thirdparty/apache/httpd.git/log
Justin Erenkrantz [Fri, 12 Oct 2001 04:59:19 +0000 (04:59 +0000)]
If we passed the bucket to ap_pass_brigade (because it was EOS or FLUSH),
we shouldn't delete it.
Thanks to Doug for pointing out that something broke.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91441
13f79535 -47bb-0310-9956-
ffa450edef68
Justin Erenkrantz [Fri, 12 Oct 2001 02:00:41 +0000 (02:00 +0000)]
Lose the magic number and use the central #define AP_IOBUFSIZE.
Hey, I've never seen it in actual use anywhere, so I didn't know.
Thanks to Roy for pointing it out.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91440
13f79535 -47bb-0310-9956-
ffa450edef68
Justin Erenkrantz [Thu, 11 Oct 2001 01:49:21 +0000 (01:49 +0000)]
This is the mod_ssl input filtering rewrite. Lots of stuff here. I also
changed some of the style issues within the filtering code to conform to
the rest of the server.
Various incarnations of this patch have been posted to dev@httpd without
feedback. Now that it passes all of the httpd-test cases (with the
exception of module/negotiation test which fails without mod_ssl anyway),
it is time to check it in.
Please review and test. We are under C-T-R rules, so I'm going to take
advantage of that and commit it now. I have tested this about as much
as I can and it seems to work from everything I can give to it.
Considering that mod_ssl was broken before this commit, this is an
improvement.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91414
13f79535 -47bb-0310-9956-
ffa450edef68
Justin Erenkrantz [Thu, 4 Oct 2001 17:50:39 +0000 (17:50 +0000)]
Ah, I didn't see that churn is only used on input - rename the function
to match churn_output. =)
Yes, I'm slowly working on fixing mod_ssl...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91289
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 1 Oct 2001 16:07:17 +0000 (16:07 +0000)]
BIO_write returns an int. Whacha gonna do? Kill the last non-ab warning.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91220
13f79535 -47bb-0310-9956-
ffa450edef68
Ryan Bloom [Tue, 18 Sep 2001 20:31:37 +0000 (20:31 +0000)]
Allow VPATH builds for SSL.
Submitted by: Cody Sherr <csherr@covalent.net>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@91074
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 10 Sep 2001 04:21:40 +0000 (04:21 +0000)]
I don't seriously expect this solves the segfault ... but it does make
the code more legible, and protects particularly ugly unset values.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90979
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 30 Aug 2001 05:33:57 +0000 (05:33 +0000)]
dont block when handling non-ssl request
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90802
13f79535 -47bb-0310-9956-
ffa450edef68
Ryan Bloom [Mon, 27 Aug 2001 06:00:51 +0000 (06:00 +0000)]
Allow mod_ssl to send back an error message if an HTTP request is sent
over an HTTPS connection. This also adds an ap_remove_input_filter
function, which should be used to remove the SSL input filter in this
case, as soon as this code is stressed a bit more.
For right now, we are sending the same message that we used to send in
mod_ssl for Apache 1.3.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90724
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Sun, 26 Aug 2001 05:21:50 +0000 (05:21 +0000)]
Toggle the /Zi flag to allow all supportd versions of VC (5, 6, 7) to
build 'out of the box' in debugging mode.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90686
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 23:25:14 +0000 (23:25 +0000)]
force OpenSSL to ignore process local-caching and to always
get/set/delete sessions using mod_ssl's callbacks
PR:
Obtained from:
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: dougm
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90654
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 23:17:22 +0000 (23:17 +0000)]
these #ifs were really confusing emacs indentation, easier for humans to parse this way too
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90653
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 18:06:47 +0000 (18:06 +0000)]
enable i/o debugging
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90645
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 17:17:35 +0000 (17:17 +0000)]
churn_output should return the value of ap_pass_brigade
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90640
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 06:58:00 +0000 (06:58 +0000)]
ssl_var_lookup() is enabled
apr optional functions do not need to be unregistered
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90625
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 06:34:26 +0000 (06:34 +0000)]
apr_os_thread_current() call needs #if APR_HAS_THREADS protection
PR:
Obtained from:
Submitted by: Justin Erenkrantz <jerenkrantz@ebuilt.com>
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90622
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 06:22:09 +0000 (06:22 +0000)]
fix prototype
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90621
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 06:15:39 +0000 (06:15 +0000)]
implement CRYPTO_set_id_callback
PR:
Obtained from:
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: dougm
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90620
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 05:31:51 +0000 (05:31 +0000)]
change APR_LOCKALL to APR_INTRAPROCESS for crypto locks
PR:
Obtained from:
Submitted by: Justin Erenkrantz <jerenkrantz@ebuilt.com>
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90618
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 04:16:57 +0000 (04:16 +0000)]
only set the crypto locking callback if mpm is threaded
get rid of some warnings introduced by the original patch
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90614
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 04:08:04 +0000 (04:08 +0000)]
Implement CRYPTO_set_locking_callback() for mod_ssl
PR:
Obtained from:
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: dougm
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90612
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Fri, 24 Aug 2001 00:09:30 +0000 (00:09 +0000)]
support "SSLVerifyClient optional_no_ca"
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90599
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 23 Aug 2001 23:43:45 +0000 (23:43 +0000)]
prevent double lookup of ssl::verify::error
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90597
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Thu, 23 Aug 2001 22:37:00 +0000 (22:37 +0000)]
sc->szPassPhraseDialogPath is now constified, so we have to use
ap_strchr_c instead of strchr (which == ap_strchr on my system).
Submitted by: Ryan Bloom
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90595
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 23 Aug 2001 19:42:44 +0000 (19:42 +0000)]
Add some appropriate constness to the config
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90577
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 23 Aug 2001 19:35:23 +0000 (19:35 +0000)]
Silly compiler, const char* is for text :)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90575
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 23 Aug 2001 18:47:32 +0000 (18:47 +0000)]
Fix most-bogus ap_server_root_relative() cases. These don't include
the cases where we are trying to ap_server_root_relative() a pipe cmd!
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90561
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 23 Aug 2001 02:46:23 +0000 (02:46 +0000)]
register ssl_var_lookup() as an optional function
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90537
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Thu, 23 Aug 2001 02:32:26 +0000 (02:32 +0000)]
performance: change an O(n) while loop to an equivalent O(1) brigade macro
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90536
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Thu, 23 Aug 2001 02:23:43 +0000 (02:23 +0000)]
Another step in improving legibility by factoring out some redundant code
(how many times can you test the same condition in one function? :-)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90535
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 23 Aug 2001 00:51:03 +0000 (00:51 +0000)]
Revert these from my last commit ... I had no intention of changing
them in the first place :(
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90533
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Thu, 23 Aug 2001 00:23:54 +0000 (00:23 +0000)]
Nit: the lack of brackets was driving me crazy
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90531
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Thu, 23 Aug 2001 00:21:40 +0000 (00:21 +0000)]
Simplify the apr_read_type_e vs. ap_input_mode_t silliness. The two
are compatible (due to our early abort when PEEK mode is requested),
so we don't have to go to so much effort to convert from one to the other.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90530
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 23 Aug 2001 00:06:27 +0000 (00:06 +0000)]
Complete the rename of the ssl_scache_status_register and
ssl_ext_proxy_register (which has yet to be renamed for it's
future location, since I'm not going further at the moment
with implementing it's functionallity, all my focus is on
the ssl_var_register arm.)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90524
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Wed, 22 Aug 2001 22:58:07 +0000 (22:58 +0000)]
Remove a ton o' cruft. Moves the mod_log_config 'var' extensions to
ssl_engine_vars.c.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90517
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Wed, 22 Aug 2001 22:25:14 +0000 (22:25 +0000)]
There's only one way for bb to be non-NULL, so these two
cases can be combined.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90513
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 21:37:15 +0000 (21:37 +0000)]
remove #if 0-ed ssl_hook_NewConnection code; was only left for reference,
no longer needed
remove #if 0-ed ssl_hook_TimeoutConnection code; ssl no longer talks directly
to the socket
PR:
Obtained from:
Submitted by: madhu
Reviewed by: dougm
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90511
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 20:41:23 +0000 (20:41 +0000)]
another update from madhu
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90509
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 19:49:23 +0000 (19:49 +0000)]
client auth is enabled
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90505
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 19:40:07 +0000 (19:40 +0000)]
move some code duplication into ssl_abort() function
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90504
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 19:37:03 +0000 (19:37 +0000)]
Enable ssl client authentication at SSL_accept time
PR:
Obtained from:
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: dougm
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90503
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 18:36:51 +0000 (18:36 +0000)]
some updated pointed out by madhu
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90500
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 16:59:26 +0000 (16:59 +0000)]
rather than creating small 1024 byte buckets of output data,
create a transient bucket pointing directly to the BIO mem buff.
this makes for a dramatic increase in performance. previously,
downloading large files (2Mb-5Mb-ish) made my laptop start to
smoke from the fan spinning so fast to cool the cpu.
also, apache stylize churn_output()
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90497
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Wed, 22 Aug 2001 16:21:40 +0000 (16:21 +0000)]
Explicitly fix some types, and opt-out on macro conflicts
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90496
13f79535 -47bb-0310-9956-
ffa450edef68
Martin Kraemer [Wed, 22 Aug 2001 15:40:29 +0000 (15:40 +0000)]
Use uniform wrapping for unistd.h, and don't include it if it's aready included via fileio.h
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90491
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 22 Aug 2001 15:30:37 +0000 (15:30 +0000)]
destroy the brigade when we are done with it, rather than remove
one bucket at a time. prevents a problem when downloading large files.
also change ssl_io_filter_Output to apache style
and change some variable names that should make the code easier to
read/understand, e.g. pbbIn -> bb, pbktIn -> bucket
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90490
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 21 Aug 2001 06:08:04 +0000 (06:08 +0000)]
and swap Auth/UserCheck names to match the hook names, in hopes of preventing further foncusion
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90464
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 21 Aug 2001 05:57:13 +0000 (05:57 +0000)]
authentication/authorization hooks were backwards
make authentication hook run APR_HOOK_FIRST for FakeBasicAuth
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90463
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 21 Aug 2001 02:27:38 +0000 (02:27 +0000)]
Changes for rbb's #include/build openssl/inc32 patch.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90458
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 21 Aug 2001 00:58:42 +0000 (00:58 +0000)]
cut out some noise
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90451
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 21 Aug 2001 00:53:54 +0000 (00:53 +0000)]
get rid of asserts
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90450
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Mon, 20 Aug 2001 23:58:48 +0000 (23:58 +0000)]
remove #if 0-ed ap_flush_conn() call; filters now handle flushing
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90446
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Mon, 20 Aug 2001 23:53:50 +0000 (23:53 +0000)]
remove unused #if 0-ed code when reading from the write bio
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90445
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Mon, 20 Aug 2001 23:48:16 +0000 (23:48 +0000)]
remove unused ssl_io_ functions
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90444
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Mon, 20 Aug 2001 23:43:09 +0000 (23:43 +0000)]
remove some unused hook code
enable child init hook
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90443
13f79535 -47bb-0310-9956-
ffa450edef68
Ryan Bloom [Mon, 20 Aug 2001 22:30:17 +0000 (22:30 +0000)]
Add the openssl/include/openssl directory to the INCLUDES variable.
This allows us to remove the openssl from the #include lines in the
mod_ssl files. This makes it easier to use a different SSL library,
with fewer changes to the mod_ssl files.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90435
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 17 Aug 2001 07:19:08 +0000 (07:19 +0000)]
Based on the VC6 switch - and pulling the win32 make files from cvs
- some more ignores are in order.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90274
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 17 Aug 2001 03:45:35 +0000 (03:45 +0000)]
The purpose of this patch is to toggle the debugging mode (default) to
Program Database (from Program Database for Modify on the fly debugging).
The net effect of this patch is to clean up all of the irrelevant entries
associated with either the debugging or release command line switches, and
generally straighten the projects as they would be exported from VC6/SP5.
The outcome of this patch is that VC5 users -should- be able to load and
build the workspace without any errors (as they used to have no symbols
database at all, the /ZI option doesn't work, they had to use cvtdsp.pl
to toggle these to /Zi.)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90269
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 17 Aug 2001 03:23:58 +0000 (03:23 +0000)]
Given a choice between chasing my tail to keep these updated, and rolling
a set when we actually roll a tarball, I'll take the later, thank you.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90268
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 16 Aug 2001 23:14:06 +0000 (23:14 +0000)]
Ignore goodness
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90250
13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 16 Aug 2001 21:11:30 +0000 (21:11 +0000)]
check for timeout on socket read when we check for ECONNRESET and eof
previously, we'd die on an assert() (really nasty for threaded MPM) when
we hit a keepalive timeout for a browser like netscape which keeps the
connection open
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90244
13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Thu, 16 Aug 2001 19:56:47 +0000 (19:56 +0000)]
fix a few mod_ssl warnings for stuff like function which were neither
static nor prototyped, char * vs. const char *, etc.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90238
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 16 Aug 2001 17:17:16 +0000 (17:17 +0000)]
at least make a note of SSL_R_HTTP_REQUEST error (until this is properly dealt with)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90229
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 16 Aug 2001 17:01:53 +0000 (17:01 +0000)]
if ssl shutdown happens earlier than expected, filter code needs be aware
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90227
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 16 Aug 2001 16:46:30 +0000 (16:46 +0000)]
need to remove buckets from the output brigade, since we will be passing a different brigade
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90225
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 16 Aug 2001 07:54:43 +0000 (07:54 +0000)]
More Versioning
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90208
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Thu, 16 Aug 2001 03:58:16 +0000 (03:58 +0000)]
enable ssl Translate, UserCheck, Access and Auth hooks
add support for renegotiation during the Access hook
this requires hooking into the read and write SSL BIOs in order to
flush data to the client and read from the filter chain
this also requires that the ssl filters become "aware" that
renegotitation is in progress so that the BIOs are left alone for
SSL_renegotiate/SSL_do_handshake in ssl_hook_Access to deal with
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90185
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 14 Aug 2001 17:03:03 +0000 (17:03 +0000)]
need to check return value of ssl_hook_process_connection
if != APR_SUCCESS the ssl connection has been shutdown
(for example client cert was revoked)
PR:
Obtained from:
Submitted by:
Reviewed by:
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90155
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 8 Aug 2001 15:49:07 +0000 (15:49 +0000)]
from madhu: no longer need to force eReadType and eMode
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90030
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 8 Aug 2001 05:11:33 +0000 (05:11 +0000)]
get POST requests working with mod_ssl
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90027
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 8 Aug 2001 02:10:51 +0000 (02:10 +0000)]
drop a brace inside #if 0 so emacs can indent properly
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90023
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Wed, 8 Aug 2001 02:09:26 +0000 (02:09 +0000)]
s/apr_size_t/apr_off_t/ for input filter
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@90022
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 7 Aug 2001 17:21:21 +0000 (17:21 +0000)]
Update for the 2.0.23 tag
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89994
13f79535 -47bb-0310-9956-
ffa450edef68
Ryan Bloom [Tue, 7 Aug 2001 16:19:03 +0000 (16:19 +0000)]
Remove all warnings from the input filtering stack.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89987
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 2 Aug 2001 05:28:00 +0000 (05:28 +0000)]
Fix typo in prior commit
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89873
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 2 Aug 2001 05:25:53 +0000 (05:25 +0000)]
Adapt to changed declaration of apr_pool_sub_make()
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89871
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 21:03:56 +0000 (21:03 +0000)]
Ooops... my fooness.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89843
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 16:45:10 +0000 (16:45 +0000)]
Another huge file check, and one fewer emits
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89833
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 16:41:13 +0000 (16:41 +0000)]
Clean up some emits
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89832
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 07:27:58 +0000 (07:27 +0000)]
Ok... for _today_ ...
This patch conditionally builds against openssl 0.9.6b _if_ openssl is
unpacked and properly built (using pretty much the defaults) in the
srclib/openssl/ directory. Someday soon this needs to be more exhaustive,
but this should solve the 80% problem :)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89823
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 07:21:59 +0000 (07:21 +0000)]
Missed a small bit
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89822
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 03:40:47 +0000 (03:40 +0000)]
enables the use of the ssl_var_lookup functionality in the various source
files in modules/ssl. The ap_hook_* functions are still not yet ported to
Apache 2.0 style
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89819
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 03:16:55 +0000 (03:16 +0000)]
This patch eliminates the direct use of OS library calls (fopen and
other depreciated Apache 1.3 library utilities) from ssl_engine_pphrase.c
and ssl_util_ssl.c.
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89818
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 03:04:55 +0000 (03:04 +0000)]
- eliminated the use of ssl_log - it used to cause seg faults during cleanup
since the conn_rec will no longer be valid.
- eliminated the "for (;;)" processing loop in ssl_io_filter_Output() -
we'll have to do that in churn_output() if required, so that any remaining
OpenSSL data (if available) is transferred before we call the
CloseConnection.
- Any remaining data in SSL should be cleaned up ideally in the
APR_BUCKET_IS_EOS() processing stage itself, as we close the SSL connection
here.
Submitted by: Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by: William Rowe
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89816
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 02:58:55 +0000 (02:58 +0000)]
Activate ssl_hook_pre_config
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89815
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 02:56:37 +0000 (02:56 +0000)]
Change lib locations for openssl's debugging default targets
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89814
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 31 Jul 2001 02:10:29 +0000 (02:10 +0000)]
un-win32ize
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89812
13f79535 -47bb-0310-9956-
ffa450edef68
Cliff Woolley [Tue, 31 Jul 2001 01:55:08 +0000 (01:55 +0000)]
s/seperate/separate/
Also consolidate the two hints
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89811
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 31 Jul 2001 01:46:34 +0000 (01:46 +0000)]
Thanks Madhu, I think backing out the last bit, and using this instead,
may be a bit simpler. Could still exist a problem feel free to fix.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89810
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 30 Jul 2001 22:35:33 +0000 (22:35 +0000)]
Register for %X, %c (we gotta make a decision, please vote if you care...
use %c's meaning from the historical SSL modules, or Bill Stoddard's
connection-terminated meaning? One will have to give.)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89807
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 30 Jul 2001 22:34:21 +0000 (22:34 +0000)]
The short term hack.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89806
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 30 Jul 2001 22:30:51 +0000 (22:30 +0000)]
More XHTML foo.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89805
13f79535 -47bb-0310-9956-
ffa450edef68
David Reid [Mon, 30 Jul 2001 21:30:28 +0000 (21:30 +0000)]
Allow us to build ssl on beos...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89803
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 26 Jul 2001 17:27:10 +0000 (17:27 +0000)]
Update make file for win32
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89733
13f79535 -47bb-0310-9956-
ffa450edef68
Ralf S. Engelschall [Wed, 25 Jul 2001 10:23:03 +0000 (10:23 +0000)]
Avoid uninitialized variable due to still disabled code
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89705
13f79535 -47bb-0310-9956-
ffa450edef68
Doug MacEachern [Tue, 24 Jul 2001 19:00:12 +0000 (19:00 +0000)]
bandaid for segv in ssl_io_filter_Output
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89681
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 20 Jul 2001 20:00:50 +0000 (20:00 +0000)]
Update for latest structure changes for 2.0.21
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89644
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 19 Jul 2001 22:35:32 +0000 (22:35 +0000)]
That's it. Adjust for our pcre transition, and the whole thing links
once again.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89631
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 19 Jul 2001 22:23:38 +0000 (22:23 +0000)]
We want the ssl_expr evaluators, now
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89629
13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Thu, 19 Jul 2001 22:20:58 +0000 (22:20 +0000)]
Hope I've got these generated bits right. Note bison is more common
for Win32 then lexx.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@89628
13f79535 -47bb-0310-9956-
ffa450edef68