Checkout Tools
  • last updated 8 hours ago
Constraints: committers
Constraints: files
Constraints: dates

Changeset 105740 is being indexed.

* modules/ssl/config.m4: Use libtool's -export-symbols-regex flag to

hide all global symbols defined by mod_ssl other than the module

structure (where possible).

* modules/ssl/ssl_engine_io.c, modules/ssl/ssl_engine_kernel.c,

modules/mod_ssl.c: Switch to using ap_log_cerror() in place of

ap_log_error() everywhere that the conn_rec * is available.

Vote on some locally tested backports.


Obtained from:

Submitted by:

Reviewed by:

Synch history with 2.0 branch.

Synch with 2.0 branch.

Consistently format SECURITY entries.

Backports done.

Backport from HEAD:

* modules/ssl/ssl_engine_init.c (ssl_init_proxy_certs): Fail early

(rather than segfault later) if a client cert is configured which is

missing either the certificate or private key.

PR: 24030

Reviewed by: jorton, minfrin, jerenkrantz, wrowe

Backport fix for CAN-2004-0885:

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that a

correct cipher suite has been negotiated, else deny access.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): With OpenSSL

0.9.7, prevent session resumption during a renegotiation to force the

client to negotiate a new (and acceptable) cipher suite.

PR: 31505

Submitted by: Hartmut Keil <Hartmut.Keil>, Joe Orton

Reviewed by: jorton, pquerna, minfrin, wrowe

Revert r1.135.2.32, fixing regression in QUERY_STRING handling since

for [P] rules since 2.0.52.

Reviewed by: jorton, nd, wrowe

Backport fix for memory consumption DoS, CVE CAN-2004-0942:

* server/protocol.c (ap_rgetline_core): Don't trim trailing whitespace

from the buffer here.

(ap_get_mime_headers_core): Trim trailing whitespace here, after

reading a complete field including continuation lines. Also simplify

code to remove whitespace between field-name and colon.

Reviewed by: stoddard, jorton, nd

Explain why the tests are skipped.

oops :)


This commit was manufactured by cvs2svn to create tag


official 1.16

Spending a little time in the garage, these mostly look like pretty good

suggestions. A few nak's on proposals with real issues.

add test example

add php files to the manifest

add a simple INSTALL file to help new users

    • ?
skip_all addition to plan()

Wording tweaks.

new two Korean translations and up-to-date patches

  1. … 12 more files in changeset.
update my key

Add info about mod_filter

First Swing at a 2.0 -> 2.2 New Features Document.

This is only a very rough start, feel free to add new features/modules

and edit my initial version.

    • ?
    • ?
    • ?
    • ?
add generated manpage for htcacheclean(8)

    • ?
update transformation

    • ?
mention the new manual page everywhere

document htcacheclean (more or less taken from the program itself)

    • ?