Commit Graph

676 Commits

Author SHA1 Message Date
Joe Orton
ad89c85e8b Ignore more. 2017-09-22 08:04:57 +01:00
Joe Orton
87cc93ad96 Remove condition on localhost-ca.crt, tweak description. 2017-09-22 08:04:10 +01:00
Joe Orton
ccd2dc5050 Fix MPM defaults if building on RHEL, fix touch -r for 00-mpm.conf. 2017-09-22 08:03:13 +01:00
Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
fd03d5ee37 Address CVE-2017-9798 by applying upstream patch
Reference RHBZ #1490344
2017-09-21 19:32:53 +02:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5 Address CVE-2017-9798 by applying upstream patch
Reference RHBZ #1490344
2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740 use sscg defaults; append CA cert to generated cert
document httpd-init.service in httpd-init.service(8)
2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-20 15:00:20 -04:00
Joe Orton
870b71c4f0 httpd.service(5) update: show how to ungracefully stop/restart 2017-09-19 12:46:35 +01:00
Joe Orton
d5e6805c26 Update links to Fedora home page. 2017-09-19 12:36:38 +01:00
Joe Orton
e2185159ed move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:02:32 +01:00
Joe Orton
b022e3b523 add new content-length filter (upstream PR 61222) 2017-09-13 14:21:17 +01:00
Joe Orton
ddabcffa42 Switch to https:// URLs. 2017-08-04 13:19:55 +01:00
Fedora Release Engineering
da66bed0cf - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 23:33:12 +00:00
Fedora Release Engineering
bd989fa784 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 12:53:42 +00:00
Joe Orton
adcaa34289 update mod_systemd (r1802251) 2017-07-18 09:25:14 +01:00
Joe Orton
e9d2120fbf switch to event by default for Fedora 27 and later (#1471708)
Resolves: rhbz#1471708
2017-07-17 11:39:57 +01:00
Joe Orton
3150aa97f5 Shorter text in httpd.service. 2017-07-14 12:57:43 +01:00
Joe Orton
6de83362da Fix grammar. 2017-07-14 12:57:43 +01:00
Petr Písař
70d2b4ee4f perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-12 14:54:15 +02:00
Luboš Uhliarik
06cde88ecf Resolves: #1469959 - httpd update cleaned out /etc/sysconfig 2017-07-12 11:42:25 +02:00
Luboš Uhliarik
c6fd35316d new version 2.4.27 2017-07-10 15:25:44 +02:00
Joe Orton
1205ddb60b mod_proxy_fcgi: fix further regressions (PR 61202) 2017-06-30 17:01:34 +01:00
Luboš Uhliarik
fd6452a0f2 new version 2.4.26 2017-06-19 11:48:36 +02:00
Joe Orton
fce414a1c1 move unit man pages to section 8, add as Documentation= in units 2017-06-05 16:55:45 +01:00
Joe Orton
6fd8793087 Updated httpd.service man page text. 2017-05-26 16:51:56 +01:00
Joe Orton
ae962f359b License under AL2. 2017-05-19 11:47:21 +01:00
Joe Orton
bbb988f0f4 add httpd.service.xml to Sources. 2017-05-19 11:10:34 +01:00
Joe Orton
710b63c5e0 add httpd.service(5) and httpd.socket(5) man pages 2017-05-19 11:04:53 +01:00
Joe Orton
dbcbdf8a73 require mod_http2, now packaged separately 2017-05-16 10:00:54 +01:00
Joe Orton
55508e1530 Tweak wording. 2017-04-18 08:59:42 +01:00
Luboš Uhliarik
ee11bdee06 Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat
2017-03-30 16:20:00 +02:00
Luboš Uhliarik
c58fda3be9 Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat
2017-03-30 15:32:35 +02:00
Luboš Uhliarik
c79ba20a8d Resolves: #1434916 - httpd.service: Failed with result timeout 2017-03-28 13:11:07 +02:00
Joe Orton
59afc1533e link only httpd, not support/* against -lselinux -lsystemd 2017-03-24 17:05:26 +00:00
Fedora Release Engineering
65743a6b6a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 12:45:49 +00:00
Joe Orton
33e6dce94a mod_watchdog: restrict thread lifetime (#1410883)
Resolves: rhbz#1410883
2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac Resolves: #1358875 - require nghttp2 >= 1.5.0 2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0 new version 2.4.25 2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0 Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
LimitRequestFields directive in mod_http2
2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11 fix build with OpenSSL 1.1 (#1392900)
- fix typos in ssl.conf (josef randinger, #1379407)
Resolves: rhbz#1392900
Resolves: rhbz#1379407
2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a synch ssl.conf with upstream 2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c no longer package /etc/sysconfig/httpd 2016-11-02 11:32:07 +00:00
Joe Orton
60e3fdb529 - sync with upstream. 2016-11-02 11:29:45 +00:00
Joe Orton
4a0435cd7b add security fix for CVE-2016-5387 2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e load mod_watchdog by default (#1353582)
Resolves: rhbz#1325883
Resolves: rhbz#1353582
2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15 restore build of mod_proxy_fdpass (#1325883)
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
2016-07-07 15:27:42 +01:00
Joe Orton
8d393c50a5 Remove .18. 2016-07-07 15:27:27 +01:00
Joe Orton
a67a8d7392 update to 2.4.23 (#1325883, #1353203)
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00