summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Collapse)Author
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
pointer or non-const array, as that minimizes the symbols, maximizes the placement into read-only memory, and avoids warnings from gcc -Wformat=2 when they're used as format strings. ok deraadt@
2013-08-22Correct format string mismatches turned up by -Wformat=2Philip Guenther
suggestions and ok millert@
2013-08-18Fix calls to printf-like functions which passed a non-fixed stringPhilip Guenther
as the format and no variable args. Replace "%#0.*X" with "%#.*X": the zero-fill flag is ignored/implied on numeric conversions when a precision is specified. ok jung@ millert@ krw@
2013-08-08Prep for big ino_t: cast to unsigned long long and format with %ll or %qPhilip Guenther
httpd correction and ok kettenis@
2013-08-06Switch vax to gcc 3.3.6.Miod Vallat
2013-08-05Don't assume inode numbers fit in a longPhilip Guenther
ok kettenis@
2013-07-18Document SSLECDHCurve.Joel Sing
ok jmc@
2013-07-16Disable SSL compression in order to mitigate CRIME attacks. AddJoel Sing
an SSLCompression option so that it can be turned back on, however on this is currently a no-op due to the compile options for libssl. Requested by and ok djm@
2013-07-16Enable ECDHE support in httpd via a SSLECDHCurve option. This specifies theJoel Sing
named curve to use when generating ephemeral EC keys for an ECDHE-based cipher suite, or can be set to `none' to disable. The default is to use a prime256v1 curve. yay^Wok djm@
2013-07-16Define HonorCipherOrder as a FLAG (rather than as a TAKE1), so that itJoel Sing
works correctly as a boolean on/off flag. While here, rename the variable so that it is consistent with existing naming scheme. ok otto@ djm@
2013-07-12Commented out SSLHonorCipherOrder in example configs; ok jsing@Otto Moerbeek
2013-07-11document SSLHonorCipherOrder; ok jmc@Otto Moerbeek
2013-07-11introduce HonorCipherOrder to use the server's order of preference of ciphersOtto Moerbeek
ok djm@ guenther@
2013-03-25remove useless line that breaks with new perlStuart Henderson
2013-01-07Use __attribute__((__gnu_inline__)) with __inline__ if __GNUC_STDC_INLINE__Brad Smith
is defined. Fixes build with LLVM. From and OK millert@
2013-01-06acknowlege -> acknowledgeMartynas Venckus
compatability -> compatibility OK jmc@.
2012-08-24Link httpd with -lpthread; recent pthread work enforces that a programStuart Henderson
dlopen()ing a module which uses pthread functions is itself linked with the thread library. Specifically, this allows httpd to use php again without an LD_PRELOAD hack. ok espie@ matthew@
2012-07-07allow httpd to build if sslv2 is disabled, ok guenther@Stuart Henderson
2012-03-04In preparation for getline and getdelim additions to libc, rename getline()Federico G. Schwindt
occurrences to get_line(). Based on a diff from Jan Klemkow <j-dot-klemkow-at-wemelug-dot-de> to tech.
2012-02-24Correct the spelling of "transferred" and "transferring"Philip Guenthe
from Tobias Ulmer (tobiasu at tmux.org); ok jmc@, krw@
2012-01-29from Mikolaj Kucharski:Jason McIntyre
- move FAQ.html to misc/FAQ.html, since all docs point there - change a broken link in ssl_faq.html from Rares Aioanei: - underlaying -> underlying ok henning
2011-09-17Apply the fnmatch recursion limit fix to the local copy of fnmatch in httpd.Stefan Sperling
ok henning
2011-07-17typo in usage summaryjoshua stein
2011-06-23switch to installing source manuals (base part)Ingo Schwarze
discussed with lots of people, tested by naddy@, "move fast" deraadt@
2011-04-06Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0'Miod Vallat
for chars.
2011-04-06Local variables storing integer values and printed with %d should beMiod Vallat
declared as integer types, not pointers, really.
2011-01-05- properly fix pr6009. a different fix was commited as the original patchJasper Lievisse Adriaanse
used atoi(). this fix uses strtonum() instead. from bjorn ketelaars, pr6515. ok henning@
2010-11-29add rss mime type; while here, use tabs instead of spaces in atom+xml type.Igor Sobrado
ok henning@
2010-10-01adapt to API changes in OpenSSL-1.0.0aDamien Miller
2010-09-26Allow mod_headers to handle RequestHeader directives known from apache2,Sebastian Reitenbach
and update documentation accordingly. Patch mostly based on an old patch from Martin Algesten he posted 2002 in apache bugzilla entry: 10772 OK, pyr@
2010-09-09nessesary -> necessary.Miod Vallat
2010-09-03add an EXIT STATUS section for /usr/sbin;Jason McIntyre
2010-05-18use the right capitalization for "HyperText Transfer Protocol (HTTP)"Igor Sobrado
and "server". fixes for bgplg(8) and relayd.conf(5) suggested by jmc@, good catch! ok jmc@
2010-05-10Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' ->Kenneth R Westerback
'possibility', 'optins' -> 'options', 'resposne' -> 'response', 'unecessary' -> 'unnecessary', 'desination' -> 'destination'. Collected from various misc@ and tech@ postings, many by Brad Tilley.
2010-05-05Unconditionally set HAVE_ISINF and HAVE_ISNAN in the generatedMark Kettenis
ap_config_auto.h. We know we have these functions in libc on OpenBSD, but the check for them fails with gcc due to some __builtin__xxx stupidity. ok drahn@, sthen@, henning@
2010-03-31make ProxyPass exclude directives only exclude on match, instead of alwaysAlexander Hall
noted by Vasiliy Kiryanov, thanks! ok stephan@
2010-02-25- apache would send the wrong Host-Header back when setup as a reverse proxyJasper Lievisse Adriaanse
with ProxyPreserveHost. fixes pr6009, though i applied a different fix as what was suggested in that pr. ok sthen@
2010-02-25fix some fallout from the >2G commit. namely allow for all byte counters toPierre-Yves Ritschard
report the correct size when it exceeds a long's capacity. From Dan Harnett <daniel @ harnett . name>
2010-02-23Add opendocument mime types, from Lars Nooden.Stuart Henderson
Pointed out by deraadt@, ok henning@
2010-02-23Fix byte range parsing, broken in last revision of http_protocol.c,Pierre-Yves Ritschard
unfortunately this backs out the use of strtonum and goes back to strtoll will need more love in a future diff. This fix from Dan Harnett <daniel @ harnett . name> ok deraadt@
2010-02-03Add a SECURITY FIX for CVE-2010-0010Jasper Lievisse Adriaanse
"on 64-bit platforms this allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow." "looks good" to henning@ ok otto@
2010-01-20Apache manual is now part of the "man" file set.Antoine Jacoutot
wording from and ok jmc@ ok sthen@ on a previous diff
2009-12-14could write one word too far, found by parfait; ok millertTheo de Raadt
2009-12-14wrote one byte too far, found by parfait; ok beck millertTheo de Raadt
2009-12-13repair typeTheo de Raadt
2009-12-13copy correctly sized object, found by parfait; ok jsgTheo de Raadt
2009-10-31s/Mhz/MHz/, MHz is a multiple of the SI unit hertz (whose symbol is Hz).Igor Sobrado
2009-10-25s/openSSL/OpenSSL/Antoine Jacoutot
ok jdixon@ sthen@
2009-08-26Add ogg media types from RFC 5334 and update application/ogg as well.Federico G. Schwindt
From Lars Nooden <lars dot curator at gmail dot com>. deraadt@ agrees.
2009-08-26Add ! support to ProxyPass to exclude directories from being proxied.Federico G. Schwindt
From Stephan A. Rickauer <stephan dot rickauer at startek dot ch> with minor tweaks. ok by many.