summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Expand)Author
2015-04-25Prepend files or directories containing ":" with "./" in directoryFlorian Obser
2015-04-23We cannot log errors with server_close() before allocatingFlorian Obser
2015-04-18Regis Leroy reported that httpd does not strictly accept CRLF forJonathan Gray
2015-04-11Always check the return value of proc_composev_imsg() and handle failuresJoel Sing
2015-04-09Revert previous as this breaks stuff.Florian Obser
2015-04-08Do not silently accept multiple Content-Length headers.Florian Obser
2015-04-01Zero the tls cert/key length variables when inheriting a serverJonathan Gray
2015-03-26pointers to slowcgi(8); from alexei malininJason McIntyre
2015-03-26Allow more characters in CGI environment variables as specified by RFCFlorian Obser
2015-03-15Prevent use after free.Florian Obser
2015-03-11Wrap long line. This is another airplane commit from an 747-8Reyk Floeter
2015-03-09Document the TLSv1.2-only change.Reyk Floeter
2015-03-09Make httpd TLSv1.2-only by default. Some older browsers, like IE 10,Reyk Floeter
2015-03-06Fix minor manpage bug: it is a server, not a relay.Reyk Floeter
2015-02-24Mark up filenames with Pa.Anthony J. Bentley
2015-02-23Use the rewritten (index file appended) uri as DOCUMENT_URI.Christopher Zimmermann
2015-02-23Allow to specify CGI variables as macros in redirection strings, eg.Reyk Floeter
2015-02-23Fix an issues that was found by halex@: we didn't set the return_uriReyk Floeter
2015-02-23Add -O0 to the DEBUG example. Figured out while analysing core dumpsReyk Floeter
2015-02-23Add return_uri to serverconfig_reset() to avoid using garbage from theReyk Floeter
2015-02-19Typo.Florian Obser
2015-02-15Document the tls protocols option.Joel Sing
2015-02-12Rename escape_uri() to url_encode() because it is the opposite ofReyk Floeter
2015-02-12Allow TLS protocols to be specified via a "tls protocols" configurationJoel Sing
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLJoel Sing
2015-02-11More http status codes.Florian Obser
2015-02-10Encode directory listings.Florian Obser
2015-02-08Use AI_ADDRCONFIG when resolv hosts on startup.Reyk Floeter
2015-02-08spacingReyk Floeter
2015-02-07spacingReyk Floeter
2015-02-07Remove server_load_file() in favor of tls_load_file(3)Reyk Floeter
2015-02-07double word fix;Jason McIntyre
2015-02-07Document tls dhe and tls ecdhe options.Joel Sing
2015-02-07Add httpd configuration options to allow the specification of DHEJoel Sing
2015-02-07Add support for blocking, dropping, and redirecting requests.Reyk Floeter
2015-02-06Fix log options in locations.Reyk Floeter
2015-02-05Fix potential NULL pointer dereference.Reyk Floeter
2015-02-05Add missing error case to free allocated server_config on failure.Reyk Floeter
2015-01-29Fix a regression that removed support for using service names insteadReyk Floeter
2015-01-21Ooops, no need to include sys/cdefs.h.Reyk Floeter
2015-01-21httpd is based on relayd and had included many headers that are onlyReyk Floeter
2015-01-19No need to include pfvar.h, another leftover from relayd. It was alsoReyk Floeter
2015-01-19Log the remote user in the access.log.Florian Obser
2015-01-19s/clt_fcgi_remote_user/clt_remote_user/Florian Obser
2015-01-19Decouple auth parameters from struct server_config into struct auth.Reyk Floeter
2015-01-18tweak previousFlorian Obser
2015-01-18First stab at implementing basic auth.Florian Obser
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-13bump copyright yearReyk Floeter
2015-01-13Abort if fcgi_chunked is not true to avoid sending additional garbageReyk Floeter