Commit Graph

569 Commits

Author SHA1 Message Date
Lubos Uhliarik
845520ec3d new version 2.4.46
remove obsolete parts of this spec file
fix systemd detection patch
2020-08-25 15:09:53 +02:00
Fedora Release Engineering
52aed83c50 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 01:01:27 +00:00
Lubos Uhliarik
426fad198c fix macro in mod_lua for lua 4.5 2020-07-10 00:47:52 +02:00
Lubos Uhliarik
c592b007f9 Remove %ghosted /etc/sysconfig/httpd file (#1850082) 2020-07-09 16:59:57 +02:00
Joe Orton
c8206d083b use gettid() directly and use it for built-in ErrorLogFormat 2020-07-07 09:59:31 +01:00
Joe Orton
4928626a29 mod_ssl: updated coalescing filter to improve TLS efficiency 2020-04-17 11:57:47 +01:00
Joe Orton
356046ff98 mod_ssl: fix leak in OCSP stapling code (PR 63687, r1876548)
mod_systemd: restore descriptive startup logging
2020-04-17 08:50:06 +01:00
Lubos Uhliarik
76f6dc7dfc new version 2.4.43 (#1819023) 2020-03-31 16:30:12 +02:00
Fedora Release Engineering
002dac01c9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 04:28:08 +00:00
Joe Orton
603815e574 mod_systemd: fix timeouts on reload w/ExtendedStatus off (#1590877)
Resolves: rhbz#1590877
2020-01-20 09:09:56 +00:00
Joe Orton
289df822ec apachectl(8): update authors 2020-01-06 14:04:38 +00:00
FeRD (Frank Dana)
11b0ed9c90 Add man page for Fedora apachectl 2019-12-11 20:17:19 -05:00
Joe Orton
b3ceae982a mod_ssl: fix request body buffering w/TLSv1.3 PHA (#1775146) 2019-11-21 16:56:37 +00:00
Joe Orton
401f5d1ca7 mod_ssl: fix request body buffering w/TLSv1.3 PHA (#1775146)
Resolves: rhbz#1775146
2019-11-21 16:54:17 +00:00
Joe Orton
9d23b8bc3a apachectl: in graceful/graceful-stop, only signal main process (#1758798)
Resolves: rhbz#1758798
2019-11-13 17:39:53 +00:00
Lubos Uhliarik
087f93d480 Added missing BuildRequires for verifing src tarball 2019-11-11 17:37:37 +01:00
Lubos Uhliarik
4d13e72518 add automatic source tarball signature verification in %prep section 2019-11-11 17:27:51 +01:00
Joe Orton
aaba8b57e0 mod_cgid/mod_cgi: further upstream consolidation patches 2019-10-04 16:47:09 +01:00
Joe Orton
5f6c5adf6f Remove suexec patch already merged upstream. 2019-10-03 09:10:23 +01:00
Joe Orton
f1280d5f56 mod_proxy_balancer: fix balancer-manager XSRF check (PR 63688) 2019-10-03 09:06:46 +01:00
Joe Orton
5b6bedca6c mod_cgid: possible stdout timeout handling fix (#1757683)
Resolves: rhbz#1757683
2019-10-02 11:47:35 +01:00
Joe Orton
a4638c111c mod_ssl: restore dependency on /usr/bin/hostname (#1135118)
Resolves: rhbz#1135118
2019-09-25 15:23:20 +01:00
Stephen Gallagher
8c08392f60
Use testpage from system-logos-httpd for proper branding
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2019-09-19 13:18:22 -04:00
Joe Orton
1578b45343 update to 2.4.41 2019-08-15 06:44:03 +01:00
Fedora Release Engineering
84b529bffa - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 08:38:22 +00:00
Joe Orton
5586dfdc48 drop /var/lib/dav directory, since mod_dav_fs uses statedir 2019-07-23 10:41:39 +01:00
Lubos Uhliarik
fc0e844ce2 - Remove pointless creation of /var/lib/httpd/state dir in RPM build root
- Substitute tabs for spaces.
2019-07-19 11:28:20 +02:00
Joe Orton
2993aea7a7 mod_cgid: use fd passing to fix script stderr handling (#1591157)
Resolves: rhbz#1591157
2019-07-17 11:31:15 +01:00
Joe Orton
7ee1cb5208 - apachectl: restore -V/-v/-t support (#1727434) 2019-07-08 09:23:48 +01:00
Joe Orton
2ae67b32b1 htpasswd: add SHA-256/512 support 2019-07-08 09:18:33 +01:00
Joe Orton
b18b77bc68 create instance-specific StateDir in httpd@.service, instance.conf 2019-06-21 09:00:52 +01:00
Joe Orton
10963a8dad remove superfluous ap_hack_ symbols from httpd binary
more verbose %check section
2019-06-20 11:52:17 +01:00
Lubos Uhliarik
16a6314f81 Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2019-06-13 17:40:20 +02:00
Lubos Uhliarik
e945a601ca Removed bundled mod_md 2019-06-13 17:38:40 +02:00
Joe Orton
720c6f392b mod_ssl: fix "httpd -L" (etc) before httpd-init.service runs 2019-06-13 16:37:06 +01:00
Joe Orton
67d32a785d fixes for StateDir directive (upstream r1857731, r1857731) 2019-06-12 10:48:06 +01:00
Lubos Uhliarik
bc95575bf5 httpd dependency on initscripts is unspecified (#1705188)
- substitute "service" cmd by "httpd" with -t arg

Resolves: #1705188
2019-05-02 14:46:02 +00:00
Joe Orton
db62736588 - fix systemd_postun usage. 2019-04-16 09:10:28 +01:00
Joe Orton
fc24275107 - mod_reqtimeout: fix default values regression (PR 63325) 2019-04-16 08:49:29 +01:00
Joe Orton
3aa63a93a9 - fix statedir symlink to point to /var/lib/httpd (#1697662) 2019-04-16 08:48:10 +01:00
Lubos Uhliarik
c6cd42af04 Fix wrong module name used in LoadModule directive 2019-04-02 15:27:39 +00:00
Lubos Uhliarik
c30e102180 update to 2.4.39 2019-04-02 10:53:17 +00:00
Joe Orton
b86b48c4a2 apachectl: cleanup and replace script wholesale (#1641237)
* drop "apachectl fullstatus" support
 * run systemctl with --no-pager option
 * implement graceful&graceful-stop by signal directly
run "httpd -t" from legacy action script
Resolves: rhbz#1641237
2019-03-14 10:30:15 +00:00
Lubos Uhliarik
9e462af294 segmentation fault fix (FIPS) 2019-02-05 12:39:17 +00:00
Joe Orton
80cf4174c6 use serverroot-relative statedir, rundir by default 2019-02-05 12:11:27 +00:00
Fedora Release Engineering
887d8d1a45 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 02:28:37 +00:00
Igor Gnatenko
a0bbdf8c6c Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:24:07 +01:00
Lubos Uhliarik
584830e35e Updated release num 2019-01-23 12:34:26 +00:00
Joe Orton
a18552330d Update PKCS#11 patch. 2019-01-23 13:04:05 +01:00
Lubos Uhliarik
1810bd511f new version 2.4.38 (#1668125)
adjusted patches
2019-01-23 11:21:32 +00:00
Björn Esser
ccaa54fd8d
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 19:04:04 +01:00
Luboš Uhliarik
affd30da6f Resolves: #1652678 - TLS connection allowed while all protocols are forbidden 2018-11-23 11:11:59 +01:00
Joe Orton
f7bb212f40 add httpd.conf(5) (#1611361)
Resolves: rhbz#1611361
2018-11-09 09:01:23 +00:00
Joe Orton
36d7a68241 add httpd.conf(5) (#1611361)
Resolves: rhbz#1611361
2018-11-08 17:13:42 +00:00
Luboš Uhliarik
2fa14eded5 Resolves: #1647241 - fix apachectl script 2018-11-07 12:38:50 +01:00
Joe Orton
920857b24c add DefaultStateDir/ap_state_dir_relative()
mod_dav_fs: use state dir for default DAVLockDB
mod_md: use state dir for default MDStoreDir
2018-10-31 12:19:33 +00:00
Joe Orton
e869b8b799 update to 2.4.37 2018-10-31 10:08:18 +00:00
Joe Orton
c72daf66bd add htcacheclean.service(8) man page 2018-10-31 10:01:24 +00:00
Joe Orton
f201a4ebc1 apachectl: don't read /etc/sysconfig/httpd 2018-09-28 08:51:19 +01:00
Joe Orton
1f748ace31 fix build if OpenSSL built w/o SSLv3 support 2018-09-25 09:43:59 +01:00
Joe Orton
e6f5630905 comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in
default configuration; now follow OpenSSL system default (#1468322)
Resolves: rhbz#1468322
2018-09-21 15:22:11 +01:00
Joe Orton
89ff98903a Merge branch 'f29' 2018-09-21 15:19:28 +01:00
Joe Orton
86433978a1 mod_ssl: follow OpenSSL protocol defaults if SSLProtocol
is not configured (Rob Crittenden, #1618371)
Resolves: rhbz#1618371
2018-09-21 13:07:38 +01:00
Joe Orton
369db50dd0 mod_ssl: more TLSv1.3 fixes (#1619389)
Resolves: rhbz#1619389
2018-09-18 13:57:48 +01:00
Luboš Uhliarik
5bf30dc156 mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All"
configuration (#1624777)

Resolves: #1624777
2018-09-03 11:29:22 +02:00
Joe Orton
b52ebeb33d mod_ssl: further TLSv1.3 fix (#1619389)
Resolves: rhbz#1619389
2018-08-21 08:34:34 +01:00
Joe Orton
2f9bc4598d mod_ssl: backport TLSv1.3 support changes from upstream (#1615059)
Resolves: rhbz#1615059
2018-08-13 14:43:07 +01:00
Joe Orton
e7a848a3db mod_ssl: fix OCSP regression (upstream r1555631) 2018-07-20 11:22:10 +01:00
Joe Orton
84d2251c2d - Fedora layout is now upstream, drop patch 2018-07-19 18:47:48 +01:00
Joe Orton
71609fae14 update Obsoletes for mod_proxy_uswgi (#1599113)
Resolves: rhbz#httpd.spec
2018-07-18 20:22:36 +01:00
Joe Orton
5072c65a7b update to 2.4.34 (#1601160)
Resolves: rhbz#1601160
2018-07-18 11:55:03 +01:00
Joe Orton
bc2b0a9538 BR gcc 2018-07-16 20:41:32 +01:00
Joe Orton
6fd32168ff don't block on service try-restart in posttrans scriptlet
add Lua-based /server-status example page to docs
obsoletes: and provides: for mod_proxy_uswgi (#1599113)
Resolves: rhbz#1599113
2018-07-16 17:11:20 +01:00
Joe Orton
23fb452dae don't block on service try-restart in posttrans scriptlet 2018-07-16 17:02:19 +01:00
Joe Orton
7a7c76fbe0 add Lua-based /server-status example page to docs 2018-07-16 17:01:34 +01:00
Fedora Release Engineering
68920957bf - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 05:07:26 +00:00
Jason Tibbitts
1ee4430d42 Remove needless use of %defattr 2018-07-10 01:20:33 -05:00
Joe Orton
cdc2806d68 Merge branch 'f28' 2018-07-06 17:06:19 +01:00
Joe Orton
8ab39c8ee0 add per-request memory leak fix (upstream r1833014) 2018-07-06 17:03:22 +01:00
Joe Orton
1d78fa49cb mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki) 2018-07-06 14:04:07 +01:00
Joe Orton
df56b6f20c - update for new mod_systemd patch 2018-06-12 16:08:30 +01:00
Joe Orton
3778b45de1 mod_systemd: show bound ports in status and log to journal
at startup.
2018-06-12 15:31:38 +01:00
Joe Orton
4bd9fa63fd add httpd@.service; update httpd.service(8) and add new stub 2018-05-01 09:49:06 +01:00
Joe Orton
e4c2da63b4 Omit multiproxy change. 2018-05-01 09:48:48 +01:00
Joe Orton
5dbb1d7cab mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511)
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
2018-05-01 09:48:09 +01:00
Joe Orton
07274a959f mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537)
Resolves: rhbz#1564537
2018-05-01 09:47:41 +01:00
Joe Orton
5860daab11 add httpd@.service; update httpd.service(8) and add new stub 2018-04-19 17:18:11 +01:00
Joe Orton
799dcecff8 Use updated sslmultiproxy patch. 2018-04-16 08:44:34 +01:00
Joe Orton
dbbe3f2b69 mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511)
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
2018-04-16 08:25:48 +01:00
Joe Orton
616eacccb0 mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537)
Resolves: rhbz#1564537
2018-04-12 08:03:52 +01:00
Adam Williamson
cb3c26bd43 Exclude mod_md config file from main package (#1562413) 2018-03-30 17:24:23 -07:00
Joe Orton
c7d07f31b9 rebase to 2.4.33 (#1560174)
add mod_md subpackage; load mod_proxy_uwsgi by default
2018-03-28 20:18:58 +01:00
Jitka Plesnikova
c144c0a274 Rebuilt with brotli 1.0.3 2018-03-05 09:36:51 +01:00
Joe Orton
4af7d39caf simplify liblua detection in configure 2018-02-26 12:28:41 +00:00
Igor Gnatenko
2919621fa4
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 08:07:05 +01:00
Igor Gnatenko
5450cc3ba1 Remove BuildRoot definition
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-13 23:30:42 +01:00
Fedora Release Engineering
cc87a074cd - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 16:31:52 +00:00
Joe Orton
2971e92b1f link mod_lua against -lcrypt (#1538992)
Resolves: rhbz#1538992
2018-01-27 09:19:58 +01:00
Paul Howarth
2820bed4db Rebuild with updated flags to work around compiler issues on i686 2018-01-26 17:23:59 +00:00
Björn Esser
b94d82008d
Rebuilt for switch to libxcrypt 2018-01-20 23:06:54 +01:00
Joe Orton
95a0c9518b build and load mod_brotli 2017-11-23 11:11:28 +00:00
Luboš Uhliarik
16b03b20d8 Removed patches, which are already included in upstream source 2017-10-25 14:28:47 +02:00
Luboš Uhliarik
082f3536aa new version 2.4.29 2017-10-25 14:20:19 +02:00
Joe Orton
596b5fc517 drop obsolete Obsoletes
update docs, Summary
trim %changelog
2017-10-10 15:23:11 +01:00
Patrick Uiterwijk
6ebb5a2203 Backport patch for fixing ticket key usage
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-10 13:31:46 +02:00
Luboš Uhliarik
01bcbc5642 new version 2.4.28 2017-10-06 18:14:03 +02:00
Joe Orton
6d96e6a193 add notes on enabling httpd_graceful_shutdown boolean for prefork 2017-10-03 09:16:29 +01:00
Joe Orton
d31ea66d9d drop Requires(post) for mod_ssl 2017-09-22 16:20:54 +01:00
Joe Orton
962c800331 better error handling in httpd-ssl-gencerts (#1494556)
Resolves: rhbz#1494556
2017-09-22 15:48:42 +01:00
Joe Orton
c094ba4827 Fix conditional. 2017-09-22 08:06:39 +01:00
Joe Orton
5ec11c5a4f Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2017-09-22 08:05:04 +01:00
Joe Orton
ccd2dc5050 Fix MPM defaults if building on RHEL, fix touch -r for 00-mpm.conf. 2017-09-22 08:03:13 +01:00
Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5 Address CVE-2017-9798 by applying upstream patch
Reference RHBZ #1490344
2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740 use sscg defaults; append CA cert to generated cert
document httpd-init.service in httpd-init.service(8)
2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-20 15:00:20 -04:00
Joe Orton
e2185159ed move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:02:32 +01:00
Joe Orton
b022e3b523 add new content-length filter (upstream PR 61222) 2017-09-13 14:21:17 +01:00
Joe Orton
ddabcffa42 Switch to https:// URLs. 2017-08-04 13:19:55 +01:00
Fedora Release Engineering
da66bed0cf - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 23:33:12 +00:00
Fedora Release Engineering
bd989fa784 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 12:53:42 +00:00
Joe Orton
adcaa34289 update mod_systemd (r1802251) 2017-07-18 09:25:14 +01:00
Joe Orton
e9d2120fbf switch to event by default for Fedora 27 and later (#1471708)
Resolves: rhbz#1471708
2017-07-17 11:39:57 +01:00
Petr Písař
70d2b4ee4f perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-12 14:54:15 +02:00
Luboš Uhliarik
06cde88ecf Resolves: #1469959 - httpd update cleaned out /etc/sysconfig 2017-07-12 11:42:25 +02:00
Luboš Uhliarik
c6fd35316d new version 2.4.27 2017-07-10 15:25:44 +02:00
Joe Orton
1205ddb60b mod_proxy_fcgi: fix further regressions (PR 61202) 2017-06-30 17:01:34 +01:00
Luboš Uhliarik
fd6452a0f2 new version 2.4.26 2017-06-19 11:48:36 +02:00
Joe Orton
fce414a1c1 move unit man pages to section 8, add as Documentation= in units 2017-06-05 16:55:45 +01:00
Joe Orton
bbb988f0f4 add httpd.service.xml to Sources. 2017-05-19 11:10:34 +01:00
Joe Orton
710b63c5e0 add httpd.service(5) and httpd.socket(5) man pages 2017-05-19 11:04:53 +01:00
Joe Orton
dbcbdf8a73 require mod_http2, now packaged separately 2017-05-16 10:00:54 +01:00
Luboš Uhliarik
c58fda3be9 Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat
2017-03-30 15:32:35 +02:00
Luboš Uhliarik
c79ba20a8d Resolves: #1434916 - httpd.service: Failed with result timeout 2017-03-28 13:11:07 +02:00
Joe Orton
59afc1533e link only httpd, not support/* against -lselinux -lsystemd 2017-03-24 17:05:26 +00:00
Fedora Release Engineering
65743a6b6a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 12:45:49 +00:00
Joe Orton
33e6dce94a mod_watchdog: restrict thread lifetime (#1410883)
Resolves: rhbz#1410883
2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac Resolves: #1358875 - require nghttp2 >= 1.5.0 2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0 new version 2.4.25 2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0 Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
LimitRequestFields directive in mod_http2
2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11 fix build with OpenSSL 1.1 (#1392900)
- fix typos in ssl.conf (josef randinger, #1379407)
Resolves: rhbz#1392900
Resolves: rhbz#1379407
2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a synch ssl.conf with upstream 2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c no longer package /etc/sysconfig/httpd 2016-11-02 11:32:07 +00:00
Joe Orton
4a0435cd7b add security fix for CVE-2016-5387 2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e load mod_watchdog by default (#1353582)
Resolves: rhbz#1325883
Resolves: rhbz#1353582
2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15 restore build of mod_proxy_fdpass (#1325883)
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
2016-07-07 15:27:42 +01:00
Joe Orton
a67a8d7392 update to 2.4.23 (#1325883, #1353203)
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00
Petr Písař
aaf7efcca6 Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl> 2016-06-24 09:44:53 +02:00
Joe Orton
37b82598ea have "apachectl graceful" start httpd if not running, per man page 2016-04-07 14:07:25 +01:00