]> git.ipfire.org Git - thirdparty/apache/httpd.git/log
thirdparty/apache/httpd.git
14 months agosteal a number
Stefan Eissing [Mon, 27 May 2024 10:53:02 +0000 (10:53 +0000)] 
steal a number

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918002 13f79535-47bb-0310-9956-ffa450edef68

14 months ago* modules/proxy/config.m4: Stop exporting ajp_* functions from mod_proxy_ajp.so
Joe Orton [Wed, 22 May 2024 13:48:07 +0000 (13:48 +0000)] 
* modules/proxy/config.m4: Stop exporting ajp_* functions from mod_proxy_ajp.so
  in a shared module build.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917900 13f79535-47bb-0310-9956-ffa450edef68

14 months agoExplicitly reject CGI output which includes a Transfer-Encoding
Joe Orton [Mon, 20 May 2024 09:18:10 +0000 (09:18 +0000)] 
Explicitly reject CGI output which includes a Transfer-Encoding
header, rather than drop it and send what's likely to be an unexpected
or corrupted response.

* modules/generators/cgi_common.h (cgi_handle_response): Send a 502
  error if Transfer-Encoding is present in the response headers.

PR: 68970
Github: closes #444

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917835 13f79535-47bb-0310-9956-ffa450edef68

14 months agoForce ci build.
Yann Ylavic [Mon, 13 May 2024 19:49:56 +0000 (19:49 +0000)] 
Force ci build.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917710 13f79535-47bb-0310-9956-ffa450edef68

14 months agofr doc rebuild.
Lucien Gentis [Sat, 11 May 2024 12:22:14 +0000 (12:22 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917669 13f79535-47bb-0310-9956-ffa450edef68

14 months agofr doc XML file update.
Lucien Gentis [Sat, 11 May 2024 12:21:14 +0000 (12:21 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917668 13f79535-47bb-0310-9956-ffa450edef68

14 months agoSteal a number.
Joe Orton [Fri, 10 May 2024 08:49:15 +0000 (08:49 +0000)] 
Steal a number.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917637 13f79535-47bb-0310-9956-ffa450edef68

14 months agoFail if SSLInsecureRenegotiation is used with mod_ssl, CVE-2009-3555
Joe Orton [Thu, 9 May 2024 09:05:38 +0000 (09:05 +0000)] 
Fail if SSLInsecureRenegotiation is used with mod_ssl, CVE-2009-3555
is now approaching 15 years old.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation):
  Fail if used.
  (ssl_config_server_new, ssl_config_server_merge): Remove insecure
  reneg handling.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Remove
  insecure_reneg handling.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917600 13f79535-47bb-0310-9956-ffa450edef68

14 months agoOn Linux use the real thread id via gettid() in error logging,
Joe Orton [Wed, 8 May 2024 12:46:58 +0000 (12:46 +0000)] 
On Linux use the real thread id via gettid() in error logging,
where available, rather than the (meaningless) default
pthread_self()-as-integer interpretation:

* configure.in: Define DEFAULT_LOG_TID on Linux if gettid() is available.

* server/log.c: Define DEFAULT_LOG_TID as NULL by default.
  (do_errorlog_default): Use DEFAULT_LOG_TID as the argument to log_tid().

Github: closes #443

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917578 13f79535-47bb-0310-9956-ffa450edef68

14 months ago* modules/proxy/mod_proxy_fcgi.c (dispatch): Only allocate a heap
Joe Orton [Wed, 8 May 2024 12:44:52 +0000 (12:44 +0000)] 
* modules/proxy/mod_proxy_fcgi.c (dispatch): Only allocate a heap
  buffer if the configured size is greater than the stack-allocated
  buffer.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917576 13f79535-47bb-0310-9956-ffa450edef68

15 months ago * mod_tls: update version of rustls-ffi to v0.13.0.
Stefan Eissing [Mon, 22 Apr 2024 13:55:22 +0000 (13:55 +0000)] 
 * mod_tls: update version of rustls-ffi to v0.13.0.
   [Daniel McCarney (@cpu}]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917270 13f79535-47bb-0310-9956-ffa450edef68

15 months agofr doc rebuild.
Lucien Gentis [Sat, 20 Apr 2024 12:13:33 +0000 (12:13 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917200 13f79535-47bb-0310-9956-ffa450edef68

15 months agofr doc XML files updates.
Lucien Gentis [Sat, 20 Apr 2024 12:12:08 +0000 (12:12 +0000)] 
fr doc XML files updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917199 13f79535-47bb-0310-9956-ffa450edef68

15 months agoxform
Eric Covener [Wed, 17 Apr 2024 00:23:23 +0000 (00:23 +0000)] 
xform

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917054 13f79535-47bb-0310-9956-ffa450edef68

15 months agodoc recent addition ap_trust_cgilike_cl
Eric Covener [Wed, 17 Apr 2024 00:22:45 +0000 (00:22 +0000)] 
doc recent addition ap_trust_cgilike_cl

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917053 13f79535-47bb-0310-9956-ffa450edef68

15 months agoArrange pytest to run with mod_ssl, still skipping some tests.
Jean-Frederic Clere [Tue, 16 Apr 2024 15:02:29 +0000 (15:02 +0000)] 
Arrange pytest to run with mod_ssl, still skipping some tests.

this closes #433

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917039 13f79535-47bb-0310-9956-ffa450edef68

15 months ago* server/core.c (set_override): Catch errors returned by
Joe Orton [Tue, 16 Apr 2024 09:57:37 +0000 (09:57 +0000)] 
* server/core.c (set_override): Catch errors returned by
  set_allow_opts() for a parsing fail in an Options= argument.

Submitted by: Zhou Qingyang <zhou1615 umn.edu>
Github: closes #310

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917017 13f79535-47bb-0310-9956-ffa450edef68

15 months agodocs: Use AP_DECLARE_MODULE in Developing modules and mod_so guides
Joe Orton [Tue, 16 Apr 2024 09:27:40 +0000 (09:27 +0000)] 
docs: Use AP_DECLARE_MODULE in Developing modules and mod_so guides

Submitted by: VladimĂ­r Chlup <vchlup redhat.com>
Github: closes #432

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917015 13f79535-47bb-0310-9956-ffa450edef68

15 months agomake the compiler happy when using --enable-maintainer-mode
Jean-Frederic Clere [Tue, 16 Apr 2024 08:11:19 +0000 (08:11 +0000)] 
make the compiler happy when using --enable-maintainer-mode

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917013 13f79535-47bb-0310-9956-ffa450edef68

15 months ago* modules/generators/mod_cgi.c, mod_cgid.c: Since
Joe Orton [Mon, 15 Apr 2024 09:49:56 +0000 (09:49 +0000)] 
* modules/generators/mod_cgi.c, mod_cgid.c: Since
  r1916769 adds #include <util_script.h> to cgi_common.h,
  remove it here.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916998 13f79535-47bb-0310-9956-ffa450edef68

15 months agoCI: Update for OpenSSL 3.3.0, build with -Werror
Joe Orton [Mon, 15 Apr 2024 09:47:55 +0000 (09:47 +0000)] 
CI: Update for OpenSSL 3.3.0, build with -Werror

Github: closes #436

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916997 13f79535-47bb-0310-9956-ffa450edef68

15 months agofr doc rebuild.
Lucien Gentis [Sat, 13 Apr 2024 14:02:16 +0000 (14:02 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916962 13f79535-47bb-0310-9956-ffa450edef68

15 months agofr doc XML files updates.
Lucien Gentis [Sat, 13 Apr 2024 13:47:21 +0000 (13:47 +0000)] 
fr doc XML files updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916961 13f79535-47bb-0310-9956-ffa450edef68

15 months agompm_event,mpm_worker: Comment about pollset sizing when APR_POLLSET_WAKEABLE.
Yann Ylavic [Fri, 12 Apr 2024 13:16:40 +0000 (13:16 +0000)] 
mpm_event,mpm_worker: Comment about pollset sizing when APR_POLLSET_WAKEABLE.

Follow up to r1916925 and r1916926.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916929 13f79535-47bb-0310-9956-ffa450edef68

15 months agompm_worker: Fix AH00045 about children processes not terminating timely.
Yann Ylavic [Fri, 12 Apr 2024 11:02:31 +0000 (11:02 +0000)] 
mpm_worker: Fix AH00045 about children processes not terminating timely.

* server/mpm/worker/worker.c(setup_threads_runtime):
  Create pollset with APR_POLLSET_WAKEABLE to be able to wake up the listener
  when stopping.

* server/mpm/worker/worker.c(wakeup_listener):
  Wake up the listener using the wakeup pipe (apr_pollset_wakeup).

* server/mpm/worker/worker.c(join_workers):
  Like mpm_event, don't depend on `pthread_kill(listener_thread, 0)` to check
  whether the listener has exited (this does not work on some systems), but use
  the "dying" global variable instead which is set by the listener just before
  exiting.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916926 13f79535-47bb-0310-9956-ffa450edef68

15 months agompm_event: Simplify pollset "good methods" vs APR_POLLSET_WAKEABLE.
Yann Ylavic [Fri, 12 Apr 2024 10:35:10 +0000 (10:35 +0000)] 
mpm_event: Simplify pollset "good methods" vs APR_POLLSET_WAKEABLE.

* server/mpm/event/event.c(setup_threads_runtime):
  Simplify pollset creation code.

All pollset "good methods" implement APR_POLLSET_WAKEABLE and wake-ability
is quite important for MPM event's correctness anyway so simplify code around
pollset creation so as not to suggest that APR_POLLSET_NODEFAULT if favored
against APR_POLLSET_WAKEABLE.

While at it account for the wakeup pipe in the pollset_size since not all
pollset methods seem to do it internally in APR.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916925 13f79535-47bb-0310-9956-ffa450edef68

15 months agomod_ssl_ct: Fix format warnings.
Yann Ylavic [Fri, 12 Apr 2024 09:56:34 +0000 (09:56 +0000)] 
mod_ssl_ct: Fix format warnings.

* modules/ssl/mod_ssl_ct.c(client_extension_add_callback,
                           server_extension_add_callback):
  Variable ext_type is unsigned, so use %u instead of %hu.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916924 13f79535-47bb-0310-9956-ffa450edef68

15 months ago* modules/md: Fill in APLOGNO.
Jean-Frederic Clere [Thu, 11 Apr 2024 06:53:31 +0000 (06:53 +0000)] 
* modules/md: Fill in APLOGNO.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916907 13f79535-47bb-0310-9956-ffa450edef68

15 months ago* Ensure that we set the default DH parameters for the key 361/head
Ruediger Pluem [Mon, 8 Apr 2024 13:18:28 +0000 (13:18 +0000)] 
* Ensure that we set the default DH parameters for the key

Replace else with an if as the if branch no longer ensures that
custome DH parameters have been loaded.
This fixes a regression that causes the default DH parameters for a key
no longer set and thus effectively disabling DH ciphers when no explicit
DH parameters are set.

PR: 68863

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916863 13f79535-47bb-0310-9956-ffa450edef68

15 months agomod_md: update to v2.4.26
Stefan Eissing [Mon, 8 Apr 2024 11:24:18 +0000 (11:24 +0000)] 
mod_md: update to v2.4.26

- Using OCSP stapling information to trigger certificate renewals. Proposed
  by @frasertweedale.
- Added directive `MDCheckInterval` to control how often the server checks
  for detected revocations. Added proposals for configurations in the
  README.md chapter "Revocations".
- OCSP stapling: accept OCSP responses without a `nextUpdate` entry which is
  allowed in RFC 6960. Treat those as having an update interval of 12 hours.
  Added by @frasertweedale.
- Adapt OpenSSL usage to changes in their API. By Yann Ylavic.

Test Updates
- workarounds for using Pebble v2.5
- disable EAB tests for Pebble since v2.5 no longer
  supports HS256 FWT for EAB keys
- some stability improvemnets in error/warning checks

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916861 13f79535-47bb-0310-9956-ffa450edef68

15 months agoFix occasional pytest failures
Rainer Jung [Sat, 6 Apr 2024 10:25:41 +0000 (10:25 +0000)] 
Fix occasional pytest failures
in modules/http2/test_800_websockets.py
(test_h2_800_03_not_found and
test_h2_800_05_non_ws_delay_resource) due to
additional RST messages.

Maybe we should allow RST after EOF in all websocket tests?

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916830 13f79535-47bb-0310-9956-ffa450edef68

16 months agoFix occasional pytest failures
Rainer Jung [Thu, 4 Apr 2024 22:46:59 +0000 (22:46 +0000)] 
Fix occasional pytest failures
in modules/http2/test_800_websockets.py
(test_h2_800_04_non_ws_resource and
test_h2_800_09b_unsupported) due to
additional RST messages.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916808 13f79535-47bb-0310-9956-ffa450edef68

16 months agoFix failing pytest modules/http2/test_712_buffering.py:48.
Rainer Jung [Thu, 4 Apr 2024 22:19:09 +0000 (22:19 +0000)] 
Fix failing pytest modules/http2/test_712_buffering.py:48.

Do not count lines like "00:12:26.578220 <= Recv data, 0 bytes (0x0)"
(which happen before the final close) as receiving a real chunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916806 13f79535-47bb-0310-9956-ffa450edef68

16 months agoFix pytest failure when using older nghttp2
Rainer Jung [Thu, 4 Apr 2024 21:48:51 +0000 (21:48 +0000)] 
Fix pytest failure when using older nghttp2

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916804 13f79535-47bb-0310-9956-ffa450edef68

16 months agobail after too many failed reads
Eric Covener [Wed, 3 Apr 2024 11:55:16 +0000 (11:55 +0000)] 
bail after too many failed reads

Submitted By: icing

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916771 13f79535-47bb-0310-9956-ffa450edef68

16 months agoheader validation after content-* are eval'ed
Eric Covener [Wed, 3 Apr 2024 11:51:36 +0000 (11:51 +0000)] 
header validation after content-* are eval'ed

Submitted By: ylavic

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916770 13f79535-47bb-0310-9956-ffa450edef68

16 months agolet httpd handle CL/TE for non-http handlers
Eric Covener [Wed, 3 Apr 2024 11:49:53 +0000 (11:49 +0000)] 
let httpd handle CL/TE for non-http handlers

Submitted By: ylavic, covener

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916769 13f79535-47bb-0310-9956-ffa450edef68

16 months agor1881790 has also added the 3rd argument to "ProxyRemoteMatch"
Christophe Jaillet [Mon, 1 Apr 2024 08:39:13 +0000 (08:39 +0000)] 
r1881790 has also added the 3rd argument to "ProxyRemoteMatch"

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916708 13f79535-47bb-0310-9956-ffa450edef68

16 months agoAdd <compatibility> note for CGIScriptTimeout.
Christophe Jaillet [Mon, 1 Apr 2024 08:21:46 +0000 (08:21 +0000)] 
Add <compatibility> note for CGIScriptTimeout.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916704 13f79535-47bb-0310-9956-ffa450edef68

16 months agoUpdate copyright year
Rainer Jung [Sat, 30 Mar 2024 21:10:59 +0000 (21:10 +0000)] 
Update copyright year

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916669 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_ssl: Allow for "SSLCompression off" still when OPENSSL_NO_COMP.
Yann Ylavic [Tue, 26 Mar 2024 17:00:09 +0000 (17:00 +0000)] 
mod_ssl: Allow for "SSLCompression off" still when OPENSSL_NO_COMP.

Latest OpenSSL versions have OPENSSL_NO_COMP by default, avoid breaking
existing "SSLCompression off" in configurations since it's a noop.

* modules/ssl/ssl_engine_config.c(ssl_cmd_SSLCompression):
  Don't fail for OPENSSL_NO_COMP if the flag is "off".

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916561 13f79535-47bb-0310-9956-ffa450edef68

16 months agoCI: Add OpenSSL 3.3.0 alpha1 build.
Joe Orton [Tue, 26 Mar 2024 15:03:23 +0000 (15:03 +0000)] 
CI: Add OpenSSL 3.3.0 alpha1 build.

Github: closes #424

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916559 13f79535-47bb-0310-9956-ffa450edef68

16 months agoCI: conditional didn't work in r1916396, always apply ASAN workaround.
Joe Orton [Mon, 18 Mar 2024 16:46:11 +0000 (16:46 +0000)] 
CI: conditional didn't work in r1916396, always apply ASAN workaround.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916397 13f79535-47bb-0310-9956-ffa450edef68

16 months agoCI: Try working around recent ASAN failures.
Joe Orton [Mon, 18 Mar 2024 16:40:37 +0000 (16:40 +0000)] 
CI: Try working around recent ASAN failures.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916396 13f79535-47bb-0310-9956-ffa450edef68

16 months agoReserve two lognos. [skip ci]
Joe Orton [Mon, 18 Mar 2024 10:56:44 +0000 (10:56 +0000)] 
Reserve two lognos. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916388 13f79535-47bb-0310-9956-ffa450edef68

16 months agoFix BrowserMatch for gvfs.
Joe Orton [Mon, 18 Mar 2024 08:18:11 +0000 (08:18 +0000)] 
Fix BrowserMatch for gvfs.

PR: 66148
Submitted by: Romain Tartière <romain blogreen.org>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916381 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_systemd: if SELinux is available and enabled, log the SELinux
Joe Orton [Fri, 15 Mar 2024 15:26:11 +0000 (15:26 +0000)] 
mod_systemd: if SELinux is available and enabled, log the SELinux
context at startup, since this may vary when httpd is started via
systemd vs being started directly.

* modules/arch/unix/mod_systemd.c (systemd_post_config):
  Do nothing for the pre-config iteration.
  Log the SELinux context if available.

* modules/arch/unix/config5.m4: Detect libselinux.

Have at least one CI job build mod_systemd.

Github: closes #422

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916344 13f79535-47bb-0310-9956-ffa450edef68

16 months agoSteal a number. [skip ci]
Joe Orton [Fri, 15 Mar 2024 14:49:38 +0000 (14:49 +0000)] 
Steal a number. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916343 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_systemd: Axe APR_OPTIONAL_FN redeclarations to avoid compiler warning.
Yann Ylavic [Thu, 14 Mar 2024 17:12:17 +0000 (17:12 +0000)] 
mod_systemd: Axe APR_OPTIONAL_FN redeclarations to avoid compiler warning.

ap_find_systemd_socket() and ap_systemd_listen_fds() are already declared in
"ap_listen.h", so just include them.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916312 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_autht_jwt: Use unsigned rather than signed one-bit fields.
Yann Ylavic [Thu, 14 Mar 2024 15:02:59 +0000 (15:02 +0000)] 
mod_autht_jwt: Use unsigned rather than signed one-bit fields.

Or their non-zero value should be considered -1 rather than 1.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916300 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_crypto: Fix warnings about signed bit fields.
Yann Ylavic [Thu, 14 Mar 2024 14:54:59 +0000 (14:54 +0000)] 
mod_crypto: Fix warnings about signed bit fields.

The non-zero value for one bit field is -1:

mod_crypto.c|565 col 18| error: implicit truncation from 'int' to a one-bit wide bit-field changes value from 1 to -1 [-Werror,-Wsingle-bit-bitfield-constant-conversion]
||     ctx->encrypt = 1;
||                  ^ ~
mod_crypto.c|746 col 22| error: implicit truncation from 'int' to a one-bit wide bit-field changes value from 1 to -1 [-Werror,-Wsingle-bit-bitfield-constant-conversion]
||         ctx->clength = 1;
||                      ^ ~
mod_crypto.c|903 col 35| error: implicit truncation from 'int' to a one-bit wide bit-field changes value from 1 to -1 [-Werror,-Wsingle-bit-bitfield-constant-conversion]
||                     ctx->seen_eos = 1;
||                                   ^ ~
mod_crypto.c|960 col 22| error: implicit truncation from 'int' to a one-bit wide bit-field changes value from 1 to -1 [-Werror,-Wsingle-bit-bitfield-constant-conversion]
||         ctx->clength = 1;
||                      ^ ~

Use unsigned bit fields for struct crypto_ctx's members seen_eos, encrypt and clength.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916299 13f79535-47bb-0310-9956-ffa450edef68

16 months agomod_rewrite: disambiguate select_random_value_part().
Yann Ylavic [Thu, 14 Mar 2024 14:38:36 +0000 (14:38 +0000)] 
mod_rewrite: disambiguate select_random_value_part().

gcc-13's -fsanitize=undefined finds:

    mod_rewrite.c|1702 col 37| error: '%s' directive argument is null [-Werror=format-overflow=]
    ||  1701 |             value = select_random_value_part(r, value);
    ||  1702 |             rewritelog((r, 5, NULL, "randomly chosen the subvalue `%s'",value));
    ||       |                                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

because it's not clear from select_random_value_part() whether it can return NULL or not.
Rewrite the function so that it's clearer/simpler.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916298 13f79535-47bb-0310-9956-ffa450edef68

16 months agoshutdown carefully when threads don't start
Eric Covener [Wed, 13 Mar 2024 01:26:54 +0000 (01:26 +0000)] 
shutdown carefully when threads don't start

Submitted By: ylavic, covener

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916267 13f79535-47bb-0310-9956-ffa450edef68

16 months agouse graceful exit if lister started
Eric Covener [Tue, 12 Mar 2024 00:28:34 +0000 (00:28 +0000)] 
use graceful exit if lister started

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916243 13f79535-47bb-0310-9956-ffa450edef68

16 months agoevent: avoid possible hang in clean_child_exit
Eric Covener [Mon, 11 Mar 2024 20:35:27 +0000 (20:35 +0000)] 
event: avoid possible hang in clean_child_exit

If the pthread_create failure isn't on the first worker thread,
another one is likely to hold the queue mutex already. The cleanup
of pchild will try to cleanup the queue and block on destroying
the condition.

ST_UNGRACEFUL as we have no listener thread yet.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916241 13f79535-47bb-0310-9956-ffa450edef68

16 months agooptarg is from unistd.h, use opt_arg from apr_getopt().
Jean-Frederic Clere [Wed, 6 Mar 2024 12:14:46 +0000 (12:14 +0000)] 
optarg is from unistd.h, use opt_arg from apr_getopt().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916148 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: update actions to v4
Joe Orton [Tue, 5 Mar 2024 13:40:30 +0000 (13:40 +0000)] 
CI: update actions to v4

Submitted by: Sagar <42873729+SagarCodeCtrl users.noreply.github.com>

Github: closes #414

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916133 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: add OpenSSL 3.2, test OpenSSL 3.x using Apache::Test
Joe Orton [Fri, 1 Mar 2024 10:15:13 +0000 (10:15 +0000)] 
CI: add OpenSSL 3.2, test OpenSSL 3.x using Apache::Test
trunk to pick up r1916067.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916068 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: docs update only. [skip ci]
Joe Orton [Thu, 29 Feb 2024 17:07:55 +0000 (17:07 +0000)] 
CI: docs update only. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916059 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: Add OpenSSL 3.1 builds, including a no-engine build.
Joe Orton [Thu, 29 Feb 2024 15:33:38 +0000 (15:33 +0000)] 
CI: Add OpenSSL 3.1 builds, including a no-engine build.
(attempt to use 3.2 failed, unsure why)
- add OpenSSL build binaries to $PATH

Github: closes #415

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916058 13f79535-47bb-0310-9956-ffa450edef68

17 months ago* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_keypair):
Joe Orton [Thu, 29 Feb 2024 15:28:36 +0000 (15:28 +0000)] 
* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_keypair):
  Update to avoid GCC warning for no-engine builds where the
  SSLModConfigRec is not used. Also log an error for the ENOTIMPL
  path.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916057 13f79535-47bb-0310-9956-ffa450edef68

17 months agoFix regression in r1916055 - don't duplicate logic in _run_linux.sh
Joe Orton [Thu, 29 Feb 2024 14:11:49 +0000 (14:11 +0000)] 
Fix regression in r1916055 - don't duplicate logic in _run_linux.sh
from _before_linux.sh in whether the perl-framework is used/needed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916056 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI tweaks:
Joe Orton [Thu, 29 Feb 2024 14:00:55 +0000 (14:00 +0000)] 
CI tweaks:
- don't install CPAN modules if NO_TEST_FRAMEWORK is set
- remove the workaround for mod_h2 APR build caching which
  should no longer be necessary now caching is fixed
- fix capturing specific perl-framework failures with "TEST -v" mode

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916055 13f79535-47bb-0310-9956-ffa450edef68

17 months agomod_ssl: Check SSL_CTX_new() return value
Joe Orton [Thu, 29 Feb 2024 13:35:04 +0000 (13:35 +0000)] 
mod_ssl: Check SSL_CTX_new() return value

SSL_CTX_new() will return NULL if there was an error creating a new SSL context.

Submitted by: StephenWall
Github: closes #402

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916054 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: Re-enable caching for *fixed* versions of apr/apr-util which
Joe Orton [Thu, 29 Feb 2024 13:30:50 +0000 (13:30 +0000)] 
CI: Re-enable caching for *fixed* versions of apr/apr-util which
should now work correctly (since the version is in the cache key).
For 1.x branches, CLEAR_CACHE must still be used. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916053 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: Enable caching for the rustls install used for mod_tls testing.
Joe Orton [Thu, 29 Feb 2024 13:19:26 +0000 (13:19 +0000)] 
CI: Enable caching for the rustls install used for mod_tls testing.

Github: closes #416

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916052 13f79535-47bb-0310-9956-ffa450edef68

17 months agoCI: Hopefully fix caching and artifact uploads by creating $JOBID
Joe Orton [Thu, 29 Feb 2024 12:11:39 +0000 (12:11 +0000)] 
CI: Hopefully fix caching and artifact uploads by creating $JOBID
as a unique key for each job in the matrix, using that as the
cache key and in each artefact upload (otherwise multiple failures
uploading "error_log" overwrite each other).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916051 13f79535-47bb-0310-9956-ffa450edef68

17 months agoDon't reset the balancer when we create a new child
Jean-Frederic Clere [Mon, 26 Feb 2024 08:41:28 +0000 (08:41 +0000)] 
Don't reset the balancer when we create a new child
and don't change shared memory the load balancer is not using.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916004 13f79535-47bb-0310-9956-ffa450edef68

17 months agoRan ./build.sh all to get every previously not-updated file up to speed
Daniel Ferradal [Sun, 25 Feb 2024 13:38:21 +0000 (13:38 +0000)] 
Ran ./build.sh all to get every previously not-updated file up to speed

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915995 13f79535-47bb-0310-9956-ffa450edef68

17 months agoFix in title, expression, erratas for getting-started.xml.es
Daniel Ferradal [Sun, 25 Feb 2024 13:30:34 +0000 (13:30 +0000)] 
Fix in title, expression, erratas for getting-started.xml.es

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915994 13f79535-47bb-0310-9956-ffa450edef68

17 months agoAdded getting-started.xml.es Spanish Translation + files modified by ./build.sh
Daniel Ferradal [Sun, 25 Feb 2024 11:47:27 +0000 (11:47 +0000)] 
Added getting-started.xml.es Spanish Translation + files modified by ./build.sh

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915991 13f79535-47bb-0310-9956-ffa450edef68

17 months agomod_ssl: Follow up to r1913815: szCryptoDevice to NULL when !MODSSL_HAVE_ENGINE_API
Yann Ylavic [Tue, 20 Feb 2024 10:37:30 +0000 (10:37 +0000)] 
mod_ssl: Follow up to r1913815: szCryptoDevice to NULL when !MODSSL_HAVE_ENGINE_API

Latest OpenSSL versions removed the ENGINE API completely, still provide NULL
SSLModConfigRec::szCryptoDevice since it's used outside MODSSL_HAVE_ENGINE_API.

SSLModConfigRec is a private struct, so no MMN change.

* modules/ssl/ssl_private(SSLModConfigRec):
  Provide szCryptoDevice (NULL) even if !MODSSL_HAVE_ENGINE_API.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915889 13f79535-47bb-0310-9956-ffa450edef68

17 months ago* modules/proxy/mod_proxy_scgi.c: Mark global variables as static and
Joe Orton [Mon, 19 Feb 2024 10:45:36 +0000 (10:45 +0000)] 
* modules/proxy/mod_proxy_scgi.c: Mark global variables as static and
  pointers as const. (no functional change)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915874 13f79535-47bb-0310-9956-ffa450edef68

17 months agoadded dsl.xml.es and dso.html.es.utf8
Daniel Ferradal [Sat, 17 Feb 2024 18:46:11 +0000 (18:46 +0000)] 
added dsl.xml.es and dso.html.es.utf8

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915843 13f79535-47bb-0310-9956-ffa450edef68

17 months agoAdded inicial dso.xml.es translation
Daniel Ferradal [Sat, 17 Feb 2024 18:44:27 +0000 (18:44 +0000)] 
Added inicial dso.xml.es translation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915841 13f79535-47bb-0310-9956-ffa450edef68

17 months agoAdd missing changes-entries.
Jean-Frederic Clere [Wed, 14 Feb 2024 13:36:58 +0000 (13:36 +0000)] 
Add missing changes-entries.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915785 13f79535-47bb-0310-9956-ffa450edef68

17 months agofr doc rebuild.
Lucien Gentis [Sat, 10 Feb 2024 14:32:03 +0000 (14:32 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915714 13f79535-47bb-0310-9956-ffa450edef68

17 months agofr doc XML files updates.
Lucien Gentis [Sat, 10 Feb 2024 14:30:57 +0000 (14:30 +0000)] 
fr doc XML files updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915713 13f79535-47bb-0310-9956-ffa450edef68

17 months agodocs: mod_dav: Remove references to DavLockDB being required
Joe Orton [Fri, 9 Feb 2024 10:06:38 +0000 (10:06 +0000)] 
docs: mod_dav: Remove references to DavLockDB being required
since it's not true for trunk mod_dav_fs; refresh seealso.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915685 13f79535-47bb-0310-9956-ffa450edef68

17 months agoUpdate SSLProxyMachineCertificateFile compat note after r1915679.
Joe Orton [Fri, 9 Feb 2024 09:13:50 +0000 (09:13 +0000)] 
Update SSLProxyMachineCertificateFile compat note after r1915679.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915680 13f79535-47bb-0310-9956-ffa450edef68

17 months agomod_dav: Update redirect-carefully example BrowserMatch config to
Joe Orton [Thu, 8 Feb 2024 14:37:13 +0000 (14:37 +0000)] 
mod_dav: Update redirect-carefully example BrowserMatch config to
match more recent client versions.

PR: 66148, 67039
Submitted by: Michal Maloszewski <michal.maloszewski canonical.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915651 13f79535-47bb-0310-9956-ffa450edef68

17 months ago* modules/filters/mod_xml2enc.c (xml2enc_ffunc): Accept any XML media
Joe Orton [Wed, 7 Feb 2024 15:26:27 +0000 (15:26 +0000)] 
* modules/filters/mod_xml2enc.c (xml2enc_ffunc): Accept any XML media
  type per RFC 7303, plus any text/ type.

PR: 64339
Github: closes #409

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915625 13f79535-47bb-0310-9956-ffa450edef68

18 months agofr doc rebuild.
Lucien Gentis [Sat, 3 Feb 2024 15:40:32 +0000 (15:40 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915567 13f79535-47bb-0310-9956-ffa450edef68

18 months agofr doc XML file update.
Lucien Gentis [Sat, 3 Feb 2024 15:38:18 +0000 (15:38 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915566 13f79535-47bb-0310-9956-ffa450edef68

18 months agofr doc XML files updates.
Lucien Gentis [Sat, 3 Feb 2024 15:35:20 +0000 (15:35 +0000)] 
fr doc XML files updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915565 13f79535-47bb-0310-9956-ffa450edef68

18 months agoMisplaced example title.
Lucien Gentis [Sat, 3 Feb 2024 15:32:20 +0000 (15:32 +0000)] 
Misplaced example title.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915564 13f79535-47bb-0310-9956-ffa450edef68

18 months ago* server/util_expr_parse.c (yyparse): Fix typo in comment.
Joe Orton [Fri, 2 Feb 2024 14:49:06 +0000 (14:49 +0000)] 
* server/util_expr_parse.c (yyparse): Fix typo in comment.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915543 13f79535-47bb-0310-9956-ffa450edef68

18 months agomod_dav: Add a title to the example config snippet for DavBasePath.
Joe Orton [Fri, 2 Feb 2024 11:16:28 +0000 (11:16 +0000)] 
mod_dav: Add a title to the example config snippet for DavBasePath.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915532 13f79535-47bb-0310-9956-ffa450edef68

18 months agomod_http2 docs: Typo fix
Joe Orton [Fri, 2 Feb 2024 11:12:11 +0000 (11:12 +0000)] 
mod_http2 docs: Typo fix

Submitted by: Justin Vreeland <j_vreeland apple.com>
Github: closes #407

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915531 13f79535-47bb-0310-9956-ffa450edef68

18 months agoAdd MPEG-TS file extensions
Joe Orton [Thu, 1 Feb 2024 15:36:20 +0000 (15:36 +0000)] 
Add MPEG-TS file extensions

Submitted by: Mohamed Akram <mohd.akram outlook.com>
Github: closes #372

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915514 13f79535-47bb-0310-9956-ffa450edef68

18 months agoMinor CI changes:
Joe Orton [Thu, 1 Feb 2024 15:34:22 +0000 (15:34 +0000)] 
Minor CI changes:
- Add --enable-reduced-exports test.
- test running apachectl -V in the TEST_INSTALL case
- test running httpd -V in the SKIP_TESTING case
- rejig to exit if SKIP_TESTING, un-nest the if block around testing
  (no functional change from this part)

Github: closes #405

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915513 13f79535-47bb-0310-9956-ffa450edef68

18 months ago* support/htcacheclean.c (list_urls): Continue rather than stopping
Joe Orton [Thu, 1 Feb 2024 08:39:48 +0000 (08:39 +0000)] 
* support/htcacheclean.c (list_urls): Continue rather than stopping
  after listing a file for each subdirectory.

PR: 65091
Submitted by: Artem Egorenkov <aegorenkov.91 gmail.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915508 13f79535-47bb-0310-9956-ffa450edef68

18 months agoRebuilds a number of pending doc changes
Rich Bowen [Mon, 29 Jan 2024 18:06:15 +0000 (18:06 +0000)] 
Rebuilds a number of pending doc changes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915460 13f79535-47bb-0310-9956-ffa450edef68

18 months agoRemove redundant slash from example - mod_proxy doc
Rich Bowen [Mon, 29 Jan 2024 17:44:31 +0000 (17:44 +0000)] 
Remove redundant slash from example - mod_proxy doc

Submitted by: nisbet-hubbard <87453615+nisbet-hubbard@users.noreply.github.com>

Github: closes #378

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915459 13f79535-47bb-0310-9956-ffa450edef68

18 months agoClarifies advice around quoting regular expressions.
Rich Bowen [Mon, 29 Jan 2024 14:24:31 +0000 (14:24 +0000)] 
Clarifies advice around quoting regular expressions.

Submitted by: nisbet-hubbard <87453615+nisbet-hubbard@users.noreply.github.com>

Github: closes #379

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915443 13f79535-47bb-0310-9956-ffa450edef68

18 months agofill in empty descriptions from command_rec
Eric Covener [Sat, 27 Jan 2024 14:24:48 +0000 (14:24 +0000)] 
fill in empty descriptions from command_rec

[skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915423 13f79535-47bb-0310-9956-ffa450edef68

18 months agoAdd missing mod_proxy_hchech
Jean-Frederic Clere [Fri, 26 Jan 2024 16:26:53 +0000 (16:26 +0000)] 
Add missing mod_proxy_hchech

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915414 13f79535-47bb-0310-9956-ffa450edef68

18 months agoab needs an additional Ws2_32.lib (like abs)
Jean-Frederic Clere [Fri, 26 Jan 2024 16:15:18 +0000 (16:15 +0000)] 
ab needs an additional Ws2_32.lib (like abs)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915413 13f79535-47bb-0310-9956-ffa450edef68

18 months agoundo previous commit.
Jean-Frederic Clere [Fri, 26 Jan 2024 16:11:49 +0000 (16:11 +0000)] 
undo previous commit.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915412 13f79535-47bb-0310-9956-ffa450edef68

18 months agoab needs an additional Ws2_32.lib (like abs)
Jean-Frederic Clere [Fri, 26 Jan 2024 14:25:15 +0000 (14:25 +0000)] 
ab needs an additional Ws2_32.lib (like abs)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1915411 13f79535-47bb-0310-9956-ffa450edef68