]> git.ipfire.org Git - thirdparty/apache/httpd.git/log
thirdparty/apache/httpd.git
5 weeks agoRemoves the Comments section which has been broken for 8 years.
Rich Bowen [Mon, 16 Mar 2026 12:58:09 +0000 (12:58 +0000)] 
Removes the Comments section which has been broken for 8 years.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932335 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agoRemove obsolete Windows download sources
Rich Bowen [Mon, 16 Mar 2026 08:03:39 +0000 (08:03 +0000)] 
Remove obsolete Windows download sources

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932328 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agobz69851 repeated word
Rich Bowen [Mon, 16 Mar 2026 06:19:12 +0000 (06:19 +0000)] 
bz69851 repeated word

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932325 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agoRebuild docs, metadata
Rich Bowen [Mon, 16 Mar 2026 03:55:47 +0000 (03:55 +0000)] 
Rebuild docs, metadata

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932322 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agobz63716 Clarify sequence of steps in remapping
Rich Bowen [Mon, 16 Mar 2026 03:54:28 +0000 (03:54 +0000)] 
bz63716 Clarify sequence of steps in remapping

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932321 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agoRebuild docs and metadata.
Rich Bowen [Mon, 16 Mar 2026 03:45:27 +0000 (03:45 +0000)] 
Rebuild docs and metadata.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932318 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agobz60247 Updates to new log levels and error messages
Rich Bowen [Mon, 16 Mar 2026 03:43:10 +0000 (03:43 +0000)] 
bz60247 Updates to new log levels and error messages

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932317 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agorebuild docs and metadata
Rich Bowen [Mon, 16 Mar 2026 03:32:07 +0000 (03:32 +0000)] 
rebuild docs and metadata

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932314 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agobz52670 - clarify SSLStrictSNIVHostCheck scope
Rich Bowen [Mon, 16 Mar 2026 03:27:06 +0000 (03:27 +0000)] 
bz52670 - clarify SSLStrictSNIVHostCheck scope

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932312 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agoRebuild translation metadata
Rich Bowen [Mon, 16 Mar 2026 03:21:16 +0000 (03:21 +0000)] 
Rebuild translation metadata

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932311 13f79535-47bb-0310-9956-ffa450edef68

5 weeks agoAdditional clarity around type map precedence.
Rich Bowen [Mon, 16 Mar 2026 03:10:50 +0000 (03:10 +0000)] 
Additional clarity around type map precedence.
Fixes bz 50848

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932308 13f79535-47bb-0310-9956-ffa450edef68

7 weeks agoClarify this is a Y2038 issue. [skip ci]
Joe Orton [Mon, 2 Mar 2026 11:43:05 +0000 (11:43 +0000)] 
Clarify this is a Y2038 issue. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932108 13f79535-47bb-0310-9956-ffa450edef68

7 weeks agoPrevent Y2038 bug by using SSL_SESSION_get_time_ex
Joe Orton [Mon, 2 Mar 2026 11:17:51 +0000 (11:17 +0000)] 
Prevent Y2038 bug by using SSL_SESSION_get_time_ex

The previous function is deprecated, see:
* https://github.com/openssl/openssl/commit/00a6d0743a38e179f5f9b5de4b73be9fcec0bb4c
* https://github.com/openssl/openssl/issues/23648
* https://github.com/openssl/openssl/pull/21206
Implement check for the OpenSSL version

Submitted by: Daniel Ruf <daniel daniel-ruf.de>
Github: closes #607

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932104 13f79535-47bb-0310-9956-ffa450edef68

7 weeks ago* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_remain):
Joe Orton [Mon, 2 Mar 2026 11:13:46 +0000 (11:13 +0000)] 
* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_remain):
  Revert workaround for OpenSSL feature/ech branch, which is now updated.

Also refresh the CI cache for the feature/ech OpenSSL build.

Github: closes #608

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932103 13f79535-47bb-0310-9956-ffa450edef68

7 weeks agoHave "make check" run all of the libcheck-based unit tests,
Joe Orton [Sat, 28 Feb 2026 13:22:38 +0000 (13:22 +0000)] 
Have "make check" run all of the libcheck-based unit tests,
pytest-based tests, and perl-framework-based tests if available.

* test/pyhttpd/env.py (HttpdTestEnv.__init__): Use config.ini from
  $PYHTTPD_CONFIG if set.

* configure.in: Check for pytest-3, add check-pytest to $CHECK_TARGETS
  if found. Add check-unittests to $CHECK_TARGETS if test/httpdunit is
  generated. Add check-test-framework to $CHECK_TARGETS if the Perl test
  framework is present. Stop generating WITH_TEST_SUITE.

* Makefile.in (check): Depend on $CHECK_TARGETS.
  (check-tree, check/bin/apachectl, check/config.ini, check/modules/stamp):
  New targets to fill out the check/ install tree for use with pyhttpd.
  (check-pytest): New target to run pytest-based tests.
  (check-unittests): New target to run libcheck-based tests.
  (check-test-framework): Renamed from "check-yes", runs Perl framework tests.

Github: closes #598

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932079 13f79535-47bb-0310-9956-ffa450edef68

7 weeks agoAdd missing module_index in the APLOG_MARK note for ap_log_error
Joe Orton [Sat, 28 Feb 2026 13:07:27 +0000 (13:07 +0000)] 
Add missing module_index in the APLOG_MARK note for ap_log_error

Submitted by: Vladimír Chlup <vchlup ibm.com>
Github: closes #606

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932078 13f79535-47bb-0310-9956-ffa450edef68

8 weeks agoCI: Add alternative path to build APR/APR-util releases from
Joe Orton [Mon, 23 Feb 2026 11:50:48 +0000 (11:50 +0000)] 
CI: Add alternative path to build APR/APR-util releases from
a tarball if TEST_APR_TARBALL is set.

GitHub: part of #605

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1932005 13f79535-47bb-0310-9956-ffa450edef68

8 weeks agocopy all the chars in ETag, included the last '"'
Giovanni Bechis [Fri, 20 Feb 2026 14:26:51 +0000 (14:26 +0000)] 
copy all the chars in ETag, included the last '"'
bz #69957

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931953 13f79535-47bb-0310-9956-ffa450edef68

8 weeks ago *) mod_md: update to version 2.6.8
Stefan Eissing [Fri, 20 Feb 2026 13:44:36 +0000 (13:44 +0000)] 
  *) mod_md: update to version 2.6.8
     - Fix the ARI related `replaces` property in ACME order creation to only
       be used when the CA supports ARI and it is enabled in the menu config.
     - Fix compatibility with APR versions before 1.6.0 which do not have
       `apr_cstr_casecmp` and should use `apr_strnatcasecmp` instead.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931951 13f79535-47bb-0310-9956-ffa450edef68

8 weeks ago *) mod_http2: update to version 2.0.39
Stefan Eissing [Fri, 20 Feb 2026 13:26:35 +0000 (13:26 +0000)] 
  *) mod_http2: update to version 2.0.39
     Remove streams own memory allocator after reports of memory problems
     with third party modules.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931949 13f79535-47bb-0310-9956-ffa450edef68

2 months ago* Use correct function name when compiling against APR < 1.6.0
Ruediger Pluem [Tue, 17 Feb 2026 19:37:17 +0000 (19:37 +0000)] 
* Use correct function name when compiling against APR < 1.6.0

PR: 69954
Submitted by: Tần Quảng <baobaoxich@gmail.com>
Reviewed by: rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931911 13f79535-47bb-0310-9956-ffa450edef68

2 months agoSet a security relevant release showstopper
Ruediger Pluem [Wed, 4 Feb 2026 17:16:14 +0000 (17:16 +0000)] 
Set a security relevant release showstopper

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931712 13f79535-47bb-0310-9956-ffa450edef68

2 months ago *) mod_http2: update to version 2.0.38
Stefan Eissing [Wed, 4 Feb 2026 13:19:25 +0000 (13:19 +0000)] 
  *) mod_http2: update to version 2.0.38
     Source sync with mod_h2 github repository. No functional change.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931709 13f79535-47bb-0310-9956-ffa450edef68

2 months ago* modules/dav/fs/quota.c (dav_fs_quota_precondition): Fix
Joe Orton [Mon, 2 Feb 2026 11:44:09 +0000 (11:44 +0000)] 
* modules/dav/fs/quota.c (dav_fs_quota_precondition): Fix
  operator-precedence bug which disabled quota enforcement for
  COPY/MOVE.

PR: 69795

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931654 13f79535-47bb-0310-9956-ffa450edef68

2 months agoCI: Bump OpenSSL versions for new releases.
Joe Orton [Thu, 29 Jan 2026 11:02:07 +0000 (11:02 +0000)] 
CI: Bump OpenSSL versions for new releases.

Github: closes #600

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931591 13f79535-47bb-0310-9956-ffa450edef68

2 months agofr doc rebuild.
Lucien Gentis [Sat, 24 Jan 2026 12:31:31 +0000 (12:31 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931502 13f79535-47bb-0310-9956-ffa450edef68

2 months agofr doc XML file update.
Lucien Gentis [Sat, 24 Jan 2026 12:30:18 +0000 (12:30 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931501 13f79535-47bb-0310-9956-ffa450edef68

2 months ago* server/log.c (log_ctime): Fix syntax error in r1931452
Joe Orton [Wed, 21 Jan 2026 11:09:55 +0000 (11:09 +0000)] 
* server/log.c (log_ctime): Fix syntax error in r1931452
  (added by me when tweaking whitespace, not from the PR author).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931453 13f79535-47bb-0310-9956-ffa450edef68

2 months agocore: Add millisecond support to ErrorLogFormat time specifiers
Joe Orton [Wed, 21 Jan 2026 11:05:12 +0000 (11:05 +0000)] 
core: Add millisecond support to ErrorLogFormat time specifiers

%{m} prints the timestamp in millisecond-resolution.

* include/util_time.h:
  Define new AP_CTIME_OPTION_MSEC option for printing time in milliseconds
  format.

* server/util_time.c (ap_recent_ctime_ex):
  Handle AP_CTIME_OPTION_MSEC to print time in a millisecond format.

* server/log.c (log_ctime):
  Recognize the m time option in both fast-path and composite %{...}t formats.

Submitted by: Luboš Uhliarik <luhliari redhat.com>
Github: closes #597

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931452 13f79535-47bb-0310-9956-ffa450edef68

2 months agoadd charset in the document if specified in IndexOptions
Giovanni Bechis [Wed, 21 Jan 2026 08:57:27 +0000 (08:57 +0000)] 
add charset in the document if specified in IndexOptions
bz #69930

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931451 13f79535-47bb-0310-9956-ffa450edef68

3 months ago* test/modules/core: Adds test for disabled note option in
Joe Orton [Mon, 19 Jan 2026 16:38:04 +0000 (16:38 +0000)] 
* test/modules/core: Adds test for disabled note option in
  RequestHeader

Submitted by: Giannis Christodoulou <io.xristod gmail.com>
Github: closes #594

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931424 13f79535-47bb-0310-9956-ffa450edef68

3 months agoAdds test for SSI query string injection
Joe Orton [Mon, 19 Jan 2026 14:25:20 +0000 (14:25 +0000)] 
Adds test for SSI query string injection

Submitted by: Giannis Christodoulou <io.xristod gmail.com>
Github: closes #591

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931423 13f79535-47bb-0310-9956-ffa450edef68

3 months ago* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert): Use
Joe Orton [Mon, 19 Jan 2026 12:43:36 +0000 (12:43 +0000)] 
* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert): Use
  ASN1_TIME_diff() if available to avoid parsing the ASN1_TIME.
  Temporarily disable the new ASN1_TIME_diff() code for the
  feature/ech branch build since that branch has a regression, once
  https://github.com/openssl/openssl/commit/9fb44b527ee3717795609fb876a7a81f8898c623
  is merged this workaround should be reverted.

Github: closes #596

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931421 13f79535-47bb-0310-9956-ffa450edef68

3 months ago* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_remain):
Joe Orton [Mon, 19 Jan 2026 12:41:30 +0000 (12:41 +0000)] 
* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_remain):
  Fix off-by-one in tm_mday calculation, identified by Gemini.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931420 13f79535-47bb-0310-9956-ffa450edef68

3 months agoAdd --enable-sigusr2 to use SIGUSR2 rather than SIGWINCH for graceful
Joe Orton [Mon, 19 Jan 2026 11:05:38 +0000 (11:05 +0000)] 
Add --enable-sigusr2 to use SIGUSR2 rather than SIGWINCH for graceful
stop, which requires APR 1.7+.

* configure.in: Add --enable-sigusr2; define AP_SIG_GRACEFUL_STOP* in
  ap_config.h.

* include/mpm_common.h: Define AP_SIG_GRACEFUL_STOP* conditionally.

* server/mpm/prefork/prefork.c (child_main): Don't mention SIGWINCH.

PR: 50669
Github: closes #595

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931418 13f79535-47bb-0310-9956-ffa450edef68

3 months agofr doc rebuild : env.html.fr.utf8 update and change from 2025 to 2026
Lucien Gentis [Sat, 17 Jan 2026 13:08:58 +0000 (13:08 +0000)] 
fr doc rebuild : env.html.fr.utf8 update and change from 2025 to 2026

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931388 13f79535-47bb-0310-9956-ffa450edef68

3 months agofr doc XML file update.
Lucien Gentis [Sat, 17 Jan 2026 12:59:59 +0000 (12:59 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931387 13f79535-47bb-0310-9956-ffa450edef68

3 months agos/it's/its/ rebuild
Rich Bowen [Fri, 16 Jan 2026 14:12:22 +0000 (14:12 +0000)] 
s/it's/its/ rebuild

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931361 13f79535-47bb-0310-9956-ffa450edef68

3 months agos/it's/its/ correction.
Rich Bowen [Fri, 16 Jan 2026 14:08:10 +0000 (14:08 +0000)] 
s/it's/its/ correction.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931360 13f79535-47bb-0310-9956-ffa450edef68

3 months ago* modules/dav/main/ms_wdv.c (mswdv_combined_proppatch): Drop redundant
Joe Orton [Thu, 8 Jan 2026 13:26:41 +0000 (13:26 +0000)] 
* modules/dav/main/ms_wdv.c (mswdv_combined_proppatch): Drop redundant
  check of proppatch_len against APR_SIZE_MAX, update comment.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931184 13f79535-47bb-0310-9956-ffa450edef68

3 months agomod_dav: Fix security issue in unreleased MS-WDV support:
Joe Orton [Tue, 6 Jan 2026 11:02:20 +0000 (11:02 +0000)] 
mod_dav: Fix security issue in unreleased MS-WDV support:

* modules/dav/main/ms_wdv.c (mswdv_combined_proppatch):
  The MS-WDV combined PROPPATCH handler reads a 16-byte hex length
  prefix from the request body and uses it directly for memory
  allocation without bounds checking. An attacker can specify an
  extremely large value to trigger OOM and crash the worker process.

  This patch validates the parsed length against LimitXMLRequestBody
  and APR_SIZE_MAX before allocation.

Reported by: Pavel Kohout, Aisle Research, www.aisle.com
Submitted by: Pavel Kohout, jorton
Github: closes #592

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931148 13f79535-47bb-0310-9956-ffa450edef68

3 months agoHappy New Year 2026 - part 2
Rainer Jung [Sun, 4 Jan 2026 15:14:52 +0000 (15:14 +0000)] 
Happy New Year 2026 - part 2

Consensus in the release branch seems to be to
update the year in NOTICE.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931105 13f79535-47bb-0310-9956-ffa450edef68

3 months agoHappy New Year 2026
Rainer Jung [Sun, 4 Jan 2026 15:11:13 +0000 (15:11 +0000)] 
Happy New Year 2026

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1931104 13f79535-47bb-0310-9956-ffa450edef68

3 months agoCI: Build and run the libcheck-based tests.
Joe Orton [Mon, 22 Dec 2025 11:59:10 +0000 (11:59 +0000)] 
CI: Build and run the libcheck-based tests.

Github: closes #590

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930795 13f79535-47bb-0310-9956-ffa450edef68

3 months ago* test/modules/core: Adds regression test for CGI env var override
Joe Orton [Mon, 22 Dec 2025 11:14:06 +0000 (11:14 +0000)] 
* test/modules/core: Adds regression test for CGI env var override

Submitted by: Giannis Christodoulou <io.xristod gmail.com>
Github: closes #589

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930794 13f79535-47bb-0310-9956-ffa450edef68

4 months agoRegenerate docs.
Joe Orton [Fri, 19 Dec 2025 12:49:53 +0000 (12:49 +0000)] 
Regenerate docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930727 13f79535-47bb-0310-9956-ffa450edef68

4 months ago* modules/proxy/mod_proxy_balancer.c (balancer_handler): Restore
Joe Orton [Thu, 18 Dec 2025 15:52:11 +0000 (15:52 +0000)] 
* modules/proxy/mod_proxy_balancer.c (balancer_handler): Restore
  logging in XSS protection failure path to match 2.4.x.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930712 13f79535-47bb-0310-9956-ffa450edef68

4 months agomod_md: change types of fields of ocsp_summary_ctx_t
Joe Orton [Thu, 18 Dec 2025 12:50:42 +0000 (12:50 +0000)] 
mod_md: change types of fields of ocsp_summary_ctx_t

The number of members in ostat_by_id may be up to UINT_MAX
and there are no guarantees that all types of members (good,
revoked or unknown) are present. An integer overflow may also
occur in md_ocsp_get_summary() when they are summed as ints.

Change types of good, revoked and unknown to unsigned.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Submitted by: Anastasia Belova <nabelova31 gmail.com>
Github: closes #534

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930710 13f79535-47bb-0310-9956-ffa450edef68

4 months agoCI: Update OpenSSL versions: test 3.0 (LTS) branch, latest 3.4/3.5,
Joe Orton [Thu, 18 Dec 2025 12:47:05 +0000 (12:47 +0000)] 
CI: Update OpenSSL versions: test 3.0 (LTS) branch, latest 3.4/3.5,
    reset/clear cache to refresh the feature/ech branch.

Github: closes #586

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930709 13f79535-47bb-0310-9956-ffa450edef68

4 months agoSteal 2x lognos.
Joe Orton [Thu, 18 Dec 2025 10:09:34 +0000 (10:09 +0000)] 
Steal 2x lognos.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930704 13f79535-47bb-0310-9956-ffa450edef68

4 months ago* acinclude.m4 (APACHE_CHECK_SYSTEMD): Define AP_SYSTEMD_VERSION if
Joe Orton [Thu, 18 Dec 2025 09:54:28 +0000 (09:54 +0000)] 
* acinclude.m4 (APACHE_CHECK_SYSTEMD): Define AP_SYSTEMD_VERSION if
  the version of libsystemd is available from pkg-config.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930703 13f79535-47bb-0310-9956-ffa450edef68

4 months agoFollow up to r1930632 -
Joe Orton [Tue, 16 Dec 2025 16:11:24 +0000 (16:11 +0000)] 
Follow up to r1930632 -

* modules/cache/mod_file_cache.c (mmap_handler): Remove unused
  variable.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930633 13f79535-47bb-0310-9956-ffa450edef68

4 months agomod_file_cache: Fix crashes for mmap'ed files under threaded MPM.
Joe Orton [Tue, 16 Dec 2025 16:05:10 +0000 (16:05 +0000)] 
mod_file_cache: Fix crashes for mmap'ed files under threaded MPM.

* modules/cache/mod_file_cache.c (mmap_handler): fix file getting
  unmapped erroneously when server is under load in multi-thread
  multi-core configuration

PR: 69901
Submitted by: barr.israel <barr.israel campus.technion.ac.il>
Github: closes #582

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930632 13f79535-47bb-0310-9956-ffa450edef68

4 months agofr doc rebuild.
Lucien Gentis [Sat, 13 Dec 2025 14:03:53 +0000 (14:03 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930511 13f79535-47bb-0310-9956-ffa450edef68

4 months agofr doc XML file update.
Lucien Gentis [Sat, 13 Dec 2025 14:01:53 +0000 (14:01 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930510 13f79535-47bb-0310-9956-ffa450edef68

4 months ago *) mod_http2: update to version 2.0.37
Stefan Eissing [Thu, 11 Dec 2025 08:45:15 +0000 (08:45 +0000)] 
  *) mod_http2: update to version 2.0.37
     Prevent double purge of a stream, resulting in a double free.
     Fixes PR 69899.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930444 13f79535-47bb-0310-9956-ffa450edef68

4 months agomod_md: document the forgotten MDCACertificateFile directive.
Stefan Eissing [Tue, 9 Dec 2025 09:04:36 +0000 (09:04 +0000)] 
mod_md: document the forgotten MDCACertificateFile directive.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930379 13f79535-47bb-0310-9956-ffa450edef68

4 months ago *) mod_md: update to version 2.6.7
Stefan Eissing [Mon, 8 Dec 2025 12:54:34 +0000 (12:54 +0000)] 
  *) mod_md: update to version 2.6.7
     - Fix a regression in `MDStapleOthers` which broke in v2.6.0 and no longer
       applied, no matter the configuration.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930363 13f79535-47bb-0310-9956-ffa450edef68

4 months agofeat: add HEIC, HEIF and related mime types
Joe Orton [Tue, 2 Dec 2025 16:10:37 +0000 (16:10 +0000)] 
feat: add HEIC, HEIF and related mime types

See https://en.wikipedia.org/wiki/High_Efficiency_Image_File_Format

Submitted by: Alexandru Mărășteanu <hello alexei.ro>
Github: closes #580

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930199 13f79535-47bb-0310-9956-ffa450edef68

4 months agodon't use request notes for suexec
Eric Covener [Mon, 1 Dec 2025 12:04:29 +0000 (12:04 +0000)] 
don't use request notes for suexec

also, stop accepting the obscure "note" option in
RequestHeader, it is only documented/described as being
meant for Header (output filter).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930164 13f79535-47bb-0310-9956-ffa450edef68

4 months agoenvvars from HTTP headers low precedence
Eric Covener [Mon, 1 Dec 2025 12:03:12 +0000 (12:03 +0000)] 
envvars from HTTP headers low precedence

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930163 13f79535-47bb-0310-9956-ffa450edef68

4 months agocover mixed slashes, simplify
Eric Covener [Mon, 1 Dec 2025 12:01:44 +0000 (12:01 +0000)] 
cover mixed slashes, simplify

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930162 13f79535-47bb-0310-9956-ffa450edef68

4 months agodon't pass args for SSI request
Eric Covener [Mon, 1 Dec 2025 12:00:14 +0000 (12:00 +0000)] 
don't pass args for SSI request

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930161 13f79535-47bb-0310-9956-ffa450edef68

4 months agofeat: add HEIC, HEIF and related mime types
Joe Orton [Wed, 26 Nov 2025 11:30:42 +0000 (11:30 +0000)] 
feat: add HEIC, HEIF and related mime types

See https://en.wikipedia.org/wiki/High_Efficiency_Image_File_Format

Submitted by: Alexandru Mărășteanu <hello alexei.ro>
Github: closes #580

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1930012 13f79535-47bb-0310-9956-ffa450edef68

4 months agoFollow up to r1929972: CHANGES entry.
Yann Ylavic [Tue, 25 Nov 2025 11:43:03 +0000 (11:43 +0000)] 
Follow up to r1929972: CHANGES entry.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929973 13f79535-47bb-0310-9956-ffa450edef68

4 months agomod_proxy_hcheck: Fix healthcheck disabled due to child restart while updating
Yann Ylavic [Tue, 25 Nov 2025 11:39:28 +0000 (11:39 +0000)] 
mod_proxy_hcheck: Fix healthcheck disabled due to child restart while updating

When a child gets restarted while the healthcheck watchdog running for a
worker, the healcheck will be disabled for that worker indefinitively because
its ->updated time remains zero. Fix all zero ->updated time at startup.

* mod_proxy_hcheck.c(hc_watchdog_callback):
  Have AP_WATCHDOG_STATE_STARTING set the ->updated time of all the workers to
  "now" (if zero).
  Move up scoped variables common to AP_WATCHDOG_STATE_{STARTING,RUNNING}
  loops.

Reported by: Lubos Uhliarik <luhliari redhat.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929972 13f79535-47bb-0310-9956-ffa450edef68

4 months agoCI: Try to fix ab failures during OpenSSL ech job, set RPATH via LDFLAGS
Joe Orton [Fri, 21 Nov 2025 09:38:42 +0000 (09:38 +0000)] 
CI: Try to fix ab failures during OpenSSL ech job, set RPATH via LDFLAGS

CI: For OpenSSL branch builds, always build a fresh version of the
OpenSSL branch and cache the commit hash to allow checking for freshness.
Also clone with --depth=1 to save time+bandwidth.

Github: closes #579

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929891 13f79535-47bb-0310-9956-ffa450edef68

4 months ago *) mod_md: update to version 2.6.6
Stefan Eissing [Thu, 20 Nov 2025 12:52:24 +0000 (12:52 +0000)] 
  *) mod_md: update to version 2.6.6
     - Fix a small memory leak when using OpenSSL's BIGNUMs. [Theo Buehler]
     - Fix reuse of curl easy handles by resetting them. [Michael Kaufmann]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929883 13f79535-47bb-0310-9956-ffa450edef68

5 months agofeat: add vnd.sqlite3 mime type and extensions
Joe Orton [Thu, 13 Nov 2025 09:43:43 +0000 (09:43 +0000)] 
feat: add vnd.sqlite3 mime type and extensions

Submitted by: Alexandru Mărășteanu <hello alexei.ro>
Github: closes #563

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929706 13f79535-47bb-0310-9956-ffa450edef68

5 months agoUpdate credit and bump next-number after r1929581.
Joe Orton [Thu, 13 Nov 2025 08:49:10 +0000 (08:49 +0000)] 
Update credit and bump next-number after r1929581.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929705 13f79535-47bb-0310-9956-ffa450edef68

5 months ago* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): Adjust comments
Joe Orton [Thu, 13 Nov 2025 08:46:23 +0000 (08:46 +0000)] 
* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): Adjust comments
  to line up with the current code better; no functional change. [skip ci]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929704 13f79535-47bb-0310-9956-ffa450edef68

5 months ago* modules/ssl/ssl_engine_kernel.c (ssl_check_vhost_sni_policy):
Joe Orton [Mon, 10 Nov 2025 15:30:46 +0000 (15:30 +0000)] 
* modules/ssl/ssl_engine_kernel.c (ssl_check_vhost_sni_policy):
  Fix handling of STRICT mode.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929631 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc rebuild.
Lucien Gentis [Sat, 8 Nov 2025 14:19:56 +0000 (14:19 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929599 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc XML file updates.
Lucien Gentis [Sat, 8 Nov 2025 14:15:15 +0000 (14:15 +0000)] 
fr doc XML file updates.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929598 13f79535-47bb-0310-9956-ffa450edef68

5 months agodocs: Update compatibility note for SSLVHostSNIPolicy
Joe Orton [Fri, 7 Nov 2025 13:58:34 +0000 (13:58 +0000)] 
docs: Update compatibility note for SSLVHostSNIPolicy

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929582 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_dav, mod_dav_fs: Add opt-in support for controlling resource
Joe Orton [Fri, 7 Nov 2025 12:57:48 +0000 (12:57 +0000)] 
mod_dav, mod_dav_fs: Add opt-in support for controlling resource
modification times via the X-Oc-Mtime header in the PUT and MKCOL
method implementations.

* modules/dav/fs/mod_dav.h: Extend dav_hooks_repository struct
  with set_mtime function pointer.

* modules/dav/fs/repos.c (dav_fs_set_mtime): New function.

* modules/dav/main/mod_dav.c (dav_cmd_davhonormtimeheader,
  dav_parse_mtime): New functions.
  (dav_method_put, dav_method_mkcol): Add X-Oc-Mtime handling.
  (dav_cmds): Add DAVHonorMtimeHeader directive.

Submitted by: Leo <i hardrain980.com>
Github: closes #556

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929581 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_ssl: Keep existing flags when calling SSL_set_shutdown()
Joe Orton [Fri, 7 Nov 2025 12:39:45 +0000 (12:39 +0000)] 
mod_ssl: Keep existing flags when calling SSL_set_shutdown()

Preserve existing flags (SSL_RECEIVED_SHUTDOWN or SSL_SENT_SHUTDOWN) when
calling SSL_set_shutdown().

For abortive or unclean shutdowns, additionally call SSL_set_quiet_shutdown().

Submitted by: Michael Kaufmann <mail michael-kaufmann.ch>
Github: closes #560

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929580 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_http2: use ap_cstr_casecmpn for check header names
Stefan Eissing [Tue, 4 Nov 2025 16:54:07 +0000 (16:54 +0000)] 
mod_http2: use ap_cstr_casecmpn for check header names

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929527 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_http2: use length supplied by nghttp2 to check trailers.
Stefan Eissing [Tue, 4 Nov 2025 15:49:44 +0000 (15:49 +0000)] 
mod_http2: use length supplied by nghttp2 to check trailers.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929517 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_md, update tp v2.6.5
Stefan Eissing [Tue, 4 Nov 2025 14:30:49 +0000 (14:30 +0000)] 
mod_md, update tp v2.6.5

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929514 13f79535-47bb-0310-9956-ffa450edef68

5 months agoImprove grammar.
Joe Orton [Tue, 4 Nov 2025 08:25:02 +0000 (08:25 +0000)] 
Improve grammar.

Submitted by: rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929503 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc rebuild.
Lucien Gentis [Sat, 1 Nov 2025 13:40:58 +0000 (13:40 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929460 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc XML file update.
Lucien Gentis [Sat, 1 Nov 2025 13:37:42 +0000 (13:37 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929459 13f79535-47bb-0310-9956-ffa450edef68

5 months agoAdd missing ) in the writelog message.
Joe Orton [Tue, 28 Oct 2025 13:42:07 +0000 (13:42 +0000)] 
Add missing ) in the writelog message.

Submitted by: Jean-Frederic Clere <jfclere apache.org>
Github: closes #543

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929393 13f79535-47bb-0310-9956-ffa450edef68

5 months agoUpdate docs on SSLVhostSNIPolicy to cover the impact on
Joe Orton [Mon, 27 Oct 2025 10:30:41 +0000 (10:30 +0000)] 
Update docs on SSLVhostSNIPolicy to cover the impact on
non-SNI connections. Reorder the table for clarity.

Submitted by: Aaron Ogburn <aogburn redhat.com>, jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929361 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc rebuild.
Lucien Gentis [Sat, 25 Oct 2025 12:23:32 +0000 (12:23 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929335 13f79535-47bb-0310-9956-ffa450edef68

5 months agofr doc XML file update.
Lucien Gentis [Sat, 25 Oct 2025 12:04:12 +0000 (12:04 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929334 13f79535-47bb-0310-9956-ffa450edef68

5 months agomisplaced tags in english version and fr doc XML file update.
Lucien Gentis [Sat, 25 Oct 2025 11:58:42 +0000 (11:58 +0000)] 
misplaced tags in english version and fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929333 13f79535-47bb-0310-9956-ffa450edef68

5 months agoRegenerate docs.
Joe Orton [Thu, 23 Oct 2025 11:52:43 +0000 (11:52 +0000)] 
Regenerate docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929309 13f79535-47bb-0310-9956-ffa450edef68

5 months agomod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility
Joe Orton [Thu, 23 Oct 2025 11:51:28 +0000 (11:51 +0000)] 
mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility
level required for VirtualHost matching.

For "secure" and "authonly" modes, a hash of the policy-relevant vhost
configuration is created and stored in the post_config hooks, reducing
the runtime code complexity (and overhead).

* modules/ssl/ssl_engine_kernel.c (ssl_check_vhost_sni_policy): New
  function, replacing ssl_server_compatible et al.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLVHostSNIPolicy): New
  function.

* modules/ssl/ssl_engine_init.c (md5_strarray_cmp, md5_strarray_hash,
  hash_sni_policy_pk, hash_sni_policy_auth, create_sni_policy_hash):
  New functions.
  (ssl_init_Module): Invoke create_sni_policy_hash to store the hash
  for every SSLSrvConfigRec.

* modules/ssl/ssl_private.h (SSLModConfigRec): Add snivh_policy field.
  (SSLSrvConfigRec): Add sni_policy_hash field.

PR: 69743
GitHub: closes #561

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929308 13f79535-47bb-0310-9956-ffa450edef68

6 months agoRemove duplicate config merging
Ruediger Pluem [Sat, 18 Oct 2025 10:34:37 +0000 (10:34 +0000)] 
Remove duplicate config merging

The removed ternary does the same as the following macro
call to AP_CORE_MERGE_FLAG.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1929201 13f79535-47bb-0310-9956-ffa450edef68

6 months agoUpdate the favicon in the doc to the new leaf logo.
Christophe Jaillet [Thu, 2 Oct 2025 19:57:52 +0000 (19:57 +0000)] 
Update the favicon in the doc to the new leaf logo.

Take the one used on w.a.o which is a png file, instead of the previous ico file.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928911 13f79535-47bb-0310-9956-ffa450edef68

6 months agoCorrectly parse Range headers with multiple ranges
Ruediger Pluem [Thu, 2 Oct 2025 13:00:44 +0000 (13:00 +0000)] 
Correctly parse Range headers with multiple ranges

Correctly parse Range headers with multiple ranges that have
whitespaces around the comma separating the ranges from each other by
trimming the whitespace.

PR: 69831

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928901 13f79535-47bb-0310-9956-ffa450edef68

6 months ago* modules/ssl/ssl_private.h (SSLModConfigRec): Make szCryptoDevice
Joe Orton [Wed, 1 Oct 2025 08:23:55 +0000 (08:23 +0000)] 
* modules/ssl/ssl_private.h (SSLModConfigRec): Make szCryptoDevice
  conditional on ENGINE API support.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLCryptoDevice): Log a
  warning if the directive is used in a non-ENGINE OpenSSL build;
  only touch szCryptoDevice for with-ENGINE builds.

* modules/ssl/ssl_engine_init.c (ssl_init_server_certs): Only
  use szCryptoDevice for with-ENGINE builds.

Submitted by: Joe Orton <jorton redhat.com>

Github: closes #559

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928874 13f79535-47bb-0310-9956-ffa450edef68

6 months agoSteal a aplogno id [skip ci].
Joe Orton [Tue, 30 Sep 2025 10:14:22 +0000 (10:14 +0000)] 
Steal a aplogno id [skip ci].

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928862 13f79535-47bb-0310-9956-ffa450edef68

6 months agoRevert part of r1928839 which stripped the APLOGNO() tags.
Joe Orton [Tue, 30 Sep 2025 10:06:43 +0000 (10:06 +0000)] 
Revert part of r1928839 which stripped the APLOGNO() tags.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928861 13f79535-47bb-0310-9956-ffa450edef68

6 months agosync with mod_md github
Stefan Eissing [Mon, 29 Sep 2025 15:09:23 +0000 (15:09 +0000)] 
sync with mod_md github

* src/md_util.h: Include <apr_cstr.h> for APR 1.6+, or else define
  apr_cstr_casecmp to apr_natcasecmp as previously.

by notroj

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928839 13f79535-47bb-0310-9956-ffa450edef68

7 months agofr doc rebuild.
Lucien Gentis [Sat, 13 Sep 2025 13:34:03 +0000 (13:34 +0000)] 
fr doc rebuild.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928430 13f79535-47bb-0310-9956-ffa450edef68

7 months agofr doc XML file update.
Lucien Gentis [Sat, 13 Sep 2025 13:32:52 +0000 (13:32 +0000)] 
fr doc XML file update.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928429 13f79535-47bb-0310-9956-ffa450edef68

7 months agotypo correction.
Lucien Gentis [Sat, 13 Sep 2025 13:31:23 +0000 (13:31 +0000)] 
typo correction.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928428 13f79535-47bb-0310-9956-ffa450edef68