Commit Graph

1701 Commits (27ab3f76dbedbb48cfb84e1bfc61e403f0a2c851)
 

Author SHA1 Message Date
Stefan Bühler ae1335503a [stat-cache] FAM: fix use after free (CVE-2013-4560)
9 years ago
Stefan Bühler 6f208cfde1 fix/silence bugs reported by ccc-analyzer (clang)
9 years ago
Stefan Bühler 6b7240f2d8 NEWS entry for previous commit
9 years ago
Stefan Bühler cdcd49b547 [doc] update ssl.cipher-list recommendation
9 years ago
Stefan Bühler ff86b5cc67 [autobuild] create m4/ before calling autoreconf
9 years ago
Stefan Bühler 4938c94ada fix typo (fixes #2519)
9 years ago
Stefan Bühler 1985df2a48 add "packdist.sh" script to build (pre-) releases
9 years ago
Stefan Bühler cb02c73860 [autobuild] use autoreconf instead of calling tools manually; add generated files to .gitignore
9 years ago
Stefan Bühler 1af871fcef [ssl] fix SNI handling; only use key+cert+verify-client from SNI specific config (fixes #2525, CVE-2013-4508)
10 years ago
Stefan Bühler 3ce548c8d0 remove unused members from struct server_socket
10 years ago
Stefan Bühler 268c054c40 [mod_extforward] fix compilation without IPv6, (not) using undefined var (fixes #2515, thx mm)
10 years ago
Stefan Bühler 9b0d54d7cc [mod_auth] explicitly link ssl for SHA1 (fixes #2517)
10 years ago
Stefan Bühler 32199a7bdf - next is 1.4.34
10 years ago
Stefan Bühler a4640b457e [tests] use list for perl exec to skip the sh wrapper
10 years ago
Stefan Bühler 3863053b99 [mod_scgi] fix log typos
10 years ago
Stefan Bühler 29ff92d9ba [core] set signal handlers before forking child processes in modules/plugins_call_set_defaults (fixes #2502)
10 years ago
Stefan Bühler 9cfc080ab7 [core] allow files to be used as document-root (fixes #2475)
10 years ago
Stefan Bühler c26b0f9617 [mod_accesslog] add accesslog.syslog-level option (fixes #2480)
10 years ago
Stefan Bühler f0e5b84c27 [mod_simple_vhost] fix cache; skip module if simple-vhost.server-root is empty (thx rm for reporting)
10 years ago
Stefan Bühler 95dc1ed79e [tests] add mod_simplevhost tests
10 years ago
Stefan Bühler 92567b8b8f [core] check whether server.chroot exists
10 years ago
Stefan Bühler 916cf7cfc0 [core] remove requirement that default doc-root has to exist, there are reasonable scenarios not requiring static files at all
10 years ago
Stefan Bühler f9d58670d5 [auth] new method "extern" to use already present REMOTE_USER (from magnet, ssl, ...) (fixes #2436)
10 years ago
Stefan Bühler 2bcf65c285 [mod_auth] some cleanup, only search for matching auth.require path once
10 years ago
Stefan Bühler 559b198f86 [auth] put REMOTE_USER into cgi environment, making it accessible to lua via lighty.req_env (fixes #2495)
10 years ago
Stefan Bühler 93fd9ea7a4 [ssl] add option ssl.empty-fragments, defaulting to disabled (fixes #2492)
10 years ago
Stefan Bühler 6d4d2118c3 [ssl] accept ssl renegotiations if they are not disabled (fixes #2491)
10 years ago
Marcus Rückert 292b8d621b move ssl.disable-client-renegotiation and added note that it currently doesnt work inside conditionals
10 years ago
Stefan Bühler f8e9462d2f [autoconf] pkg-config: search for lua5.1 and lua-5.1 before lua
10 years ago
Stefan Bühler 05858f6cf2 [ssl] Fix $HTTP["scheme"] conditional, could be "http" for ssl connections if the ssl $SERVER["socket"] conditional was nested (fixes #2501)
10 years ago
Stefan Bühler 7147c84671 [mod_accesslog] fix log buffer <-> log file mapping
10 years ago
Stefan Bühler 25a3f2e826 [network] use constants available at compile time for maximum number of chunks for writev instead of calling sysconf (fixes #2470)
10 years ago
Stefan Bühler 6cdb46587c [ssl] use DH only if openssl supports it (fixes #2479)
10 years ago
Stefan Bühler 3df2ec9248 [core] recognize more http methods to forward to backends (fixes #2346)
10 years ago
Stefan Bühler 9b36534752 [core] return 501 Not Implemented in static file mode for all methods except GET/POST/HEAD/OPTIONS
10 years ago
Stefan Bühler f0a2c0f293 [mod_user] add test cases to check handling of encoded ~ as %7E (#2124)
10 years ago
Stefan Bühler 12c4a40b28 [mod_userdir] add userdir.active option, "enabled" by default
10 years ago
Stefan Bühler 46240fdb7e [mod_auth] fix distcheck, depends on openssl now for {SHA} crypted passwords
10 years ago
Stefan Bühler a6b42cc61e [auto* build] simplify autogen.sh, handle automake 1.13 test running (fixes #2490)
10 years ago
Stefan Bühler c008fd7ec8 [mod_auth] fix invalid read in digest qop=auth-int handling (fixes #2478)
10 years ago
Stefan Bühler 3caf47ecd9 [fdevent-libev] fix type punning warnings
10 years ago
Stefan Bühler 680b714543 [cmake] Use TARGET_LINK_LIBRARIES instead of LINK_FLAGS for library dependencies, also add -Wl,--as-needed to extra warnings (fixes #2448)
10 years ago
Marcus Rückert 838d771550 added mime type for json files
10 years ago
Stefan Bühler a0e93c678b fix undefined stuff found with clang
10 years ago
Stefan Bühler 661efa3f37 fix some bugs found with canalyze (fixes #2484, thx Zhenbo Xu)
10 years ago
Stefan Bühler ce4bc0c0f7 [mod_auth] fix base64_decode (#2484)
10 years ago
Stefan Bühler c26b50d9ad [mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl for SHA1). This doesn't use any salt, md5 with salt is probably better.
10 years ago
Stefan Bühler 0342dfef1d [mod_auth] use crypt() on encrypted password instead of extracting salt first (fixes #2483)
10 years ago
Stefan Bühler b5da12c008 reject non ASCII characters in HTTP header names
10 years ago
Stefan Bühler 25a2d665aa call ERR_clear_error only for ssl connections in CON_STATE_ERROR
10 years ago