| Age | Commit message (Expand) | Author |
|---|
| 2018-11-04 | isalpha(3) requires an unsigned char value (or -1). | Philip Guenther |
| 2018-11-01 | - odd condition/test in PF lexer | Alexandr Nedvedicky |
| 2018-10-15 | Omit HSTS headers over unencrypted connections, per RFC 6797. | Anthony J. Bentley |
| 2018-10-11 | Backout my previous commit: | Sebastian Benoit |
| 2018-10-01 | Only send 408 Timeout responses when we have seen at least part of a | Sebastian Benoit |
| 2018-09-09 | During the fork+exec implementation, daemon(3) was moved after | Alexander Bluhm |
| 2018-09-07 | Do not send a Content-Length header for 1xx and 204 status codes since | Florian Obser |
| 2018-09-07 | replace malloc()+strlcpy() with strndup() in cmdline_symset(). | miko |
| 2018-08-19 | double the allowed length for the 'tls ciphers' option | Jasper Lievisse Adriaanse |
| 2018-07-11 | Do for most running out of memory err() what was done for most running | Kenneth R Westerback |
| 2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | Kenneth R Westerback |
| 2018-06-20 | Add support for simple one-off internal rewrites. | Reyk Floeter |
| 2018-06-18 | remove the SECTIONS header, since a one line DESCRIPTION is a bit silly; | Jason McIntyre |
| 2018-06-15 | Something went wrong - the strip option was documented twice. | Reyk Floeter |
| 2018-06-15 | Fix 304 Not Modified response: don't send a body, use the correct MIME type. | Reyk Floeter |
| 2018-06-13 | one too many .El; | Jason McIntyre |
| 2018-06-13 | Rename httpd.conf "root strip" option to "request strip". | Reyk Floeter |
| 2018-06-11 | The http_query is already url_encoded; don't encode it twice. | Reyk Floeter |
| 2018-06-11 | Sorry, forgot a whitespace. | denis |
| 2018-06-11 | Fix an off-by-one line count when using include statements. | denis |
| 2018-05-23 | Set the port.op value when parsing the httpd.conf port value. | Alexander Bluhm |
| 2018-05-23 | Forgot to revert another "port 80" | Reyk Floeter |
| 2018-05-19 | Add support for client certificate authentication to httpd. | Joel Sing |
| 2018-05-18 | Move LISTEN ON {} code into a function listen_on(). | Reyk Floeter |
| 2018-05-18 | Revert manpage description as well | Reyk Floeter |
| 2018-05-18 | Revert previous: it introduced a shift/reduce conflict in the grammar. | Reyk Floeter |
| 2018-05-18 | Allow to omit the listen port configuration. Default to port 80, tls port 443. | Reyk Floeter |
| 2018-04-26 | Plug leak in error case of the common 'varset' implementations. | Kenneth R Westerback |
| 2018-04-11 | Make httpd listen on all IPv4 and IPv6 addresses for | Florian Obser |
| 2018-04-06 | After processing of a range request httpd would never close the | Florian Obser |
| 2018-02-07 | NAME_MAX is the length of the thing between / / in a path *without* | Florian Obser |
| 2018-01-04 | from paul de weerd: provide a more helpful Xr to ocspcheck, and note | Jason McIntyre |
| 2017-12-21 | typo; | Jason McIntyre |
| 2017-12-14 | set Location header for 307 and 308 status codes | Sebastian Benoit |
| 2017-11-29 | Don't do OCSP stapling only if the staple file is 0 length. | Bob Beck |
| 2017-11-28 | tweak previous; | Jason McIntyre |
| 2017-11-28 | Disable oscp stapling on invalid staple, rather than failing to start. | Bob Beck |
| 2017-08-28 | 65535 is a valid port to listen on. | Florian Obser |
| 2017-08-11 | punctuation; | Jason McIntyre |
| 2017-08-11 | Convert httpd to tls_config_set_ecdhecurves(), allowing a list of curves | Joel Sing |
| 2017-07-31 | Don't set HTTP date header if already set. | ians |
| 2017-07-19 | Rework the way that TLS configuration is sent/received via imsgs, so that | Joel Sing |
| 2017-07-03 | no need to generate y.tab.h if nothing uses it, set YFLAGS to nothing | Marc Espie |
| 2017-06-10 | Fix broken escaping: "\." is almost never what you want; found with | Ingo Schwarze |
| 2017-05-28 | use __func__ in log messages. | Sebastian Benoit |
| 2017-05-15 | Avoid a crash servicing requests when a server is configured with | Jonathan Gray |
| 2017-04-17 | some freezero() calls | Theo de Raadt |
| 2017-04-09 | image/svg+xml is a default inbuilt media type. | Florian Obser |
| 2017-04-04 | Do not purge the CONFIG_SERVERS config in the parent. The ticket code uses | Claudio Jeker |
| 2017-03-25 | Implement TLS ticket support in httpd. Off by default. Use | Claudio Jeker |
