Commit Graph

197 Commits

Author SHA1 Message Date
Glenn Strauss 0b4733f244 [doc] create-mime.conf.pl -v silent for mult vnd
Do not issue trace if multiple */vnd.* register the same extension

(silently mark mime-type for extension as application/octet-stream)
2021-01-09 12:39:45 -05:00
Glenn Strauss be8909833b [doc] create-mime.conf.pl -v for warnings
Do not issue warnings about duplicated entries unless called with -v

/etc/mime.types is not typically edited by the end user,
so the warning trace is noise to most end users.
2021-01-08 07:10:31 -05:00
Glenn Strauss 35675284a2 [doc] create-mime.conf.pl improve case handling
make create-mime.conf.pl more resilient to questionable edits
to /etc/mime.types

non-vnd.* subtype takes precedence over vnd.* subtype
  (type/subtype, e.g. text/plain)

x-ref:
  "lighttpd: does not start with media-types 1.1.0"
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979232
2021-01-07 10:45:24 -05:00
Glenn Strauss a282a57148 [doc] create-mime.conf.pl improve case handling
make create-mime.conf.pl more resilient to questionable edits
to /etc/mime.types

x-ref:
  "lighttpd: does not start with media-types 1.1.0"
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979232
2021-01-05 12:52:14 -05:00
Glenn Strauss db0cd76618 [build] add GNUMAKEFLAGS=--no-print-directory
quiet some automake noise during build
(can use 'make -s' to quiet more)

In doc/ and tests/docroot/, add GNUMAKEFLAGS=--no-print-directory -s
2020-12-27 21:37:28 -05:00
Glenn Strauss 4933a2259b [core] warn if mod_authn_file needed in conf
warn if mod_authn_file is not listed in lighttpd.conf, but is needed
2020-12-13 06:01:51 -05:00
Glenn Strauss 8a2f9c1173 [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
(thx flynn)  (patch from flynn)

x-ref:
  "cert-staple.sh not POSIX compatible"
  https://redmine.lighttpd.net/issues/3043
2020-12-09 17:07:43 -05:00
Glenn Strauss d5e899e299 [doc] refresh doc/config/conf.d/mime.conf 2020-10-30 00:27:14 -04:00
Glenn Strauss fef1a94509 [doc] /var/run -> /run 2020-10-22 00:24:22 -04:00
Glenn Strauss dab212b5f5 [doc] change mod_compress refs to mod_deflate 2020-10-21 19:14:55 -04:00
Glenn Strauss 2f7839e88f [doc] comment out config disabling Range for .pdf
comment out lighttpd.conf config disabling Range requests for .pdf

bug in Adobe Acrobat Reader browser plugin dates to over 10 years ago
https://redmine.lighttpd.net/issues/171
https://redmine.lighttpd.net/issues/541
https://jarrettbroder.blogspot.com/2010/11/adobe-acrobat-reader-plugin-stalls-when.html
one possible workaround was to disable "fast web view" in the
  Adobe Acrobat Reader

bug in Chrome fixed in 2015
https://bugs.chromium.org/p/chromium/issues/detail?id=442318

However, there still may be issues with PDF readers mishandling Range
requests, e.g. with coalesced ranges, so the section remains in the
sample lighttpd.conf, but is commented out.
https://github.com/mozilla/pdf.js/issues/9022
2020-10-19 21:40:14 -04:00
Glenn Strauss a7136aac8e [doc] refresh doc/config/*/* 2020-10-11 12:19:26 -04:00
Glenn Strauss f2e4e83a85 [mod_dirlisting] fix config parsing crash
(bug on master branch; never released)

(thx avij)

update doc that dir-listing.hide-dotfiles = "enable" by default
since lighttpd 1.4.40 https://redmine.lighttpd.net/issues/1081
2020-10-11 12:19:26 -04:00
Glenn Strauss 2cdb862787 [scripts] cert-staple.sh enhancements
support validation from list of multiple signers

attempt to handle older (end-of-life) versions of OpenSSL

(thx avij)
2020-10-11 12:19:26 -04:00
Jeff Zignego 3470919212 Add avahi service file under doc/avahi/
github: closes #104
2020-08-03 11:32:30 -04:00
Glenn Strauss 672891a7d6 [doc] mod_compress -> mod_deflate 2020-08-02 06:46:22 -04:00
Glenn Strauss 0563407d09 [TLS] cert-staple.sh - refresh OCSP responses (#2469)
convenience script that can be run periodically from scheduled job
to refresh OCSP responses used for OCSP stapling
2020-07-08 22:51:31 -04:00
Glenn Strauss 9570cc2f5c [doc] update comments in doc/config/modules.conf 2020-07-08 22:51:31 -04:00
Glenn Strauss c752d4696e [multiple] correct misspellings in comments
x-ref:
  "Script for fixing spelling errors with codespell"
  https://redmine.lighttpd.net/boards/3/topics/8947
2020-07-08 19:54:30 -04:00
Glenn Strauss e11f72b11d [doc] lighttpd.conf: lighttpd choose event-handler
comment out server.event-handler in sample lighttpd.conf
so that lighttpd chooses the recommended event-handler
for each OS
2020-07-08 19:54:29 -04:00
Glenn Strauss 48e272b347 [doc] add link to wiki in doc/outdated/ssl.txt 2020-07-08 19:54:29 -04:00
Elan Ruusamäe 15cdc313b5 [config] update /var/run -> /run for systemd
This gets rid of the warning:
> May 19 10:56:32 buster systemd[1]: /lib/systemd/system/lighttpd.service:6:
> PIDFile= references path below legacy directory /var/run/,
> updating /var/run/lighttpd.pid → /run/lighttpd.pid;
> please update the unit file accordingly.

refs:
- a2d1fb882c
- https://github.com/systemd/systemd/pull/9019
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929203
- Filesystem Hierarchy Standard 3.0 (FHS 3.0)

github: closes #100
2020-01-30 21:47:36 -05:00
Elan Ruusamäe 4f0261e5e1 [doc] systemd socket activation config example
(minor edits by gstrauss)

github: closes #96

x-ref:
  "doc/systemd: add example lighttpd.socket for systemd socket activation"
  https://github.com/lighttpd/lighttpd1.4/pull/96
2019-05-11 02:21:03 -04:00
Glenn Strauss 49e9f0acdc [doc] highlight relevance of module load order (fixes #2946)
x-ref:
  "modules.conf order unhelpful (setenv vs. redirect)"
  https://redmine.lighttpd.net/issues/2946
2019-05-04 17:10:35 -04:00
Glenn Strauss 1f7afa9c70 [doc] minor adjust create-mime.conf.pl regex match (#2942)
'-' in char class should be at beginning or end, or escaped with \-
so that it does not signify a char range in the char class

(In the prior regex, the misuse permitted matching the comma char,
which while mostly harmless, was not what was intended)

x-ref:
  "incorrect behaviour of create-mime.assign.pl"
  https://redmine.lighttpd.net/issues/2942
2019-03-14 01:38:46 -04:00
Glenn Strauss 8efa6a34f4 [mod_openssl] default: ssl.cipher-list = "HIGH" 2019-03-07 00:32:17 -05:00
Stefan Bühler 9b7a32ea70 [doc/conf] resolve some mime type conflicts from debian buster, regenerate mime.conf 2019-01-13 15:26:27 -05:00
Glenn Strauss ae9f354bae [doc] lighttpd.service uses network-online.target
doc/systemd/lighttpd.service now uses After=network-online.target
instead of After=network.target, as recommended in
  https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/

(thx janik)
2018-09-23 18:01:58 -04:00
Glenn Strauss 1c594f0629 [doc] minor update to *outdated* doc
x-ref:
  "unknown config-key: auth.debug (ignored)"
  https://redmine.lighttpd.net/boards/2/topics/7842

github: closes #89
2018-01-19 22:20:16 -05:00
Glenn Strauss d4cdaab15b [doc] fix doc/config/conf.d/fastcgi.conf example
x-ref:
  "Lighttpd not starting up with default fastcgi config"
  https://redmine.lighttpd.net/boards/2/topics/7780
2017-11-09 22:16:22 -05:00
Glenn Strauss 0c1aed55d5 [doc] use https:// URLs to .lighttpd.net resources 2017-10-22 15:01:48 -04:00
Gaël PORTAY e422ac128a [mod_openssl] ssl.ca-crl-file for CRL (fixes #2319)
(original patch by binbrain, and updated by flynn)

github: closes #82

x-ref:
  "Support CRLs for client certificate verification"
  https://redmine.lighttpd.net/issues/2319
  https://github.com/lighttpd/lighttpd1.4/pull/82
2017-05-15 22:02:33 -04:00
Glenn Strauss 46ff978fa0 [doc] simple-vhost.debug takes an integer value (fixes #2797) 2017-03-13 13:50:07 -04:00
Stefan Bühler 1c3e7095d9 [mime.conf] add text/markdown to utf-8 list, regenerate mime.conf 2017-01-31 14:40:05 -05:00
Glenn Strauss 0ae6bab4a9 [doc] SIGUSR1 doc and lighttpd-angel SIGUSR1
lighttpd-angel:
  add paranoid check to avoid sending kill(-1, <signal>) as root
2017-01-31 14:40:05 -05:00
Glenn Strauss 92c724eac6 [doc] doc/initscripts.txt (fixes #2782)
add doc/initscripts.txt with description of lighttpd signal handling
  and links to the initscripts of various operating system distros

remove doc/initscripts/*

x-ref:
  "init scripts outdated, should be removed"
  https://redmine.lighttpd.net/issues/2782
2017-01-31 14:40:02 -05:00
Glenn Strauss 1584c5d7d2 [doc] remove reference to Linux rt-signals
Linux rt-signals fdevent mechanism was removed a while ago
2016-12-05 02:55:22 -05:00
sugilog 331ac4f177 set systemd settings similar to lighttpd2
except that HUP does not reload lighttpd 1.4.x config
Those who only use systemd lighttpd service 'reload' to rotate
access log files might choose to add a command to send lighttpd a
HUP signal.  See github pull request (below) for further discussion.

[patch edited by gstrauss]

x-ref:
  https://github.com/lighttpd/lighttpd1.4/pull/72
2016-12-05 02:40:12 -05:00
fbrosson 4481489078 suggest inclusion of mod_geoip... before mod_ssi.
* In modules.conf, mod_geoip needs to be loaded before mod_ssi,
  otherwise GeoIP vars won't be available to SSI pages.
* In geoip.conf suggest GeoLiteCity.dat instead of GeoCityLite.dat.

github: closes #73
2016-12-05 02:40:12 -05:00
Glenn Strauss f664e77909 load mod_auth & mod_authn_file in sample/test.conf 2016-11-29 22:32:28 -05:00
Stefan Bühler 8e678653be [autobuild] put ax_prog_cc_for_build.m4 in top directory
- "autoreconf --force --install" should be enough to get autobuild
  running, manual cp / running ./autogen.sh should not be required
- reorganize files laters, e.g. scripts/{cmake,m4}
- include ax_prog_cc_for_build.m4 manually in configure.ac as it is not
  automatically loaded if it is not in m4/
2016-10-29 18:02:12 +02:00
Glenn Strauss cd48c2804b move script to doc/scripts/ax_prog_cc_for_build.m4
m4/ directory is listed in .gitignore and should be generated
2016-10-29 09:51:37 -04:00
Glenn Strauss 4943dac851 [doc] lighttpd-angel.8 (fixes #2254)
x-ref:
  "lighttpd-angel doesn't have man page"
  https://redmine.lighttpd.net/issues/2254
2016-10-18 13:09:48 -04:00
Glenn Strauss 5dfe21acc9 [mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092, fixes #2025, fixes #1962, fixes #1938)
(add to default build to reduce distributor package maintenance)

x-ref:
  "broken module API since 1.4.38"
  https://redmine.lighttpd.net/issues/2705
  "lighttpd-1.4.24 fails to compile with mod_geoip.c"
  https://redmine.lighttpd.net/issues/2101
  "unsafe sprintfs mod_geoip"
  https://redmine.lighttpd.net/issues/2092
  "mod_geoip crashes lighttpd 1.5.x on FreeBSD 7.2 AMD64"
  https://redmine.lighttpd.net/issues/2025
  "mod_geoip"
  https://redmine.lighttpd.net/issues/1962
  "lighttpd 1.4 crashes on FreeBSD 7.0 AMD64 when mod_geoip compiled in"
  https://redmine.lighttpd.net/issues/1938
2016-09-13 02:49:00 -04:00
Glenn Strauss adf91591fc [doc] update memcache references to memcached 2016-07-17 00:30:24 -04:00
Glenn Strauss 4eeeb8fc76 [config] server.bsd-accept-filter option
BSD accept() filters

server.bsd-accept-filter = ""           (default)
server.bsd-accept-filter = "httpready"
server.bsd-accept-filter = "dataready"

Note: this is a behavior change from prior versions.
The default is now no additional accept() filter, whereas prior
versions unconditionally enabled "httpready" accept() filter

Additionally, server.defer-accept (Linux) is inherited from global scope
into $SERVER["socket"] blocks

github: closes #65
2016-06-04 18:59:03 -04:00
Glenn Strauss 1812f5541a [core] lighttpd -1 handles single request on stdin socket (fixes #1584)
(e.g. when called from xinetd)

Note: lighttpd is designed as a high performance, long-running server,
not a one-shot executable.  This one-shot mode of operation has not been
tuned for performance.  lighttpd server start-up and initialization aims
for correctness, not speed.  If using this one-shot mode as part of fork
and exec from xinetd, then performance is already not of high concern.

x-ref:
  "support for xinetd"
  https://redmine.lighttpd.net/issues/1584
2016-05-02 15:29:33 -04:00
Glenn Strauss 06b87dee34 [core] cmd line opt to shutdown after idle time limit (fixes #2696)
-i <secs>  graceful shutdown after <secs> of inactivity

Option might be used with applications such as git instaweb.
While git instaweb does have command line options of its own
to [start,stop,restart], some may find it convenient to configure
git instaweb to start lighttpd with a default idle time limit,
after which lighttpd will gracefully shut itself down without
any further action from the user.

x-ref:
  "[PATCH] support -i <secs> idle timeout option"
  https://redmine.lighttpd.net/issues/2696
  original request and patch submitted by mackyle.  thx.
2016-05-02 15:29:17 -04:00
Glenn Strauss 7841bab0ec [doc] add mimetype.use-xattr to create-mime.conf.pl
x-ref:
  "Migrate to freedesktop.org definition of xattr mimetype"
  https://redmine.lighttpd.net/issues/2631
2016-04-28 13:29:31 -04:00
Glenn Strauss b9940f9856 [mod_fastcgi] use http_response_xsendfile() (fixes #799, fixes #851, fixes #2017, fixes #2076)
handle X-Sendfile and X-LIGHTTPD-send-file w/ http_response_xsendfile()
  if host is configured ( "x-sendfile" = "enable" )

Note: X-Sendfile path is url-decoded for consistency, like X-Sendfile2
      (response headers should be url-encoded to avoid tripping over
       chars allowed in filesystem but which might change response
       header parsing semantics)

Note: deprecated: "allow-x-send-file";         use "x-sendfile"
Note: deprecated: X-LIGHTTPD-send-file header; use X-Sendfile header
Note: deprecated: X-Sendfile2 header;          use X-Sendfile header
For now, X-Sendfile2 is still handled internally by mod_fastcgi.

Since http_response_send_file() supports HTTP Range requests,
X-Sendfile2 is effectively obsolete.  However, any code, e.g. PHP,
currently using X-Sendfile2 is probably manually generating 206 Partial
Content status and Range response headers.  A future version of lighttpd
might *remove* X-Sendfile2.  Existing code should be converted to use
X-Sendfile, which is easily done by removing all the special logic
around using X-Sendfile2, since the 206 Partial Content status and Range
response headers are handled in http_response_send_file().

x-ref:
  "mod_fastcgi + X-Sendfile -> mod_staticfile"
  https://redmine.lighttpd.net/issues/799
  "Feature Request: New option "x-send-file-docroot""
  https://redmine.lighttpd.net/issues/851
  "X-Sendfile handoff to mod-static-file in 1.4.x"
  https://redmine.lighttpd.net/issues/2017
  "X-sendfile should be able to set content-type"
  https://redmine.lighttpd.net/issues/2076
2016-04-27 23:10:24 -04:00