rpms/httpd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
422 Commits 12 Branches 73 Tags 10 MiB
b20eb97391
Commit Graph

357 Commits

Author SHA1 Message Date
Jeroen van Meeuwen (Ergo Project)
b20eb97391 Address CVE-2017-9798 by applying upstream patch 
Reference RHBZ #1490344
 2017-10-03 10:04:03 +01:00
Joe Orton
45393c8877 use sscg defaults; append CA cert to generated cert 
document httpd-init.service in httpd-init.service(8)
 2017-10-03 10:04:03 +01:00
Stephen Gallagher
f0c4143d98 Generate SSL keys on service start 
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2017-10-03 10:04:03 +01:00
Joe Orton
8b3e8259a7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-10-03 10:03:22 +01:00
Joe Orton
abf387add2 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-10-03 10:03:22 +01:00
Jeroen van Meeuwen (Ergo Project)
fd03d5ee37 Address CVE-2017-9798 by applying upstream patch 
Reference RHBZ #1490344
 2017-09-21 19:32:53 +02:00
Joe Orton
b022e3b523 add new content-length filter (upstream PR 61222) 2017-09-13 14:21:17 +01:00
Joe Orton
ddabcffa42 Switch to https:// URLs. 2017-08-04 13:19:55 +01:00
Fedora Release Engineering
da66bed0cf - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 23:33:12 +00:00
Fedora Release Engineering
bd989fa784 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 12:53:42 +00:00
Joe Orton
adcaa34289 update mod_systemd (r1802251) 2017-07-18 09:25:14 +01:00
Joe Orton
e9d2120fbf switch to event by default for Fedora 27 and later (#1471708) 
Resolves: rhbz#1471708
 2017-07-17 11:39:57 +01:00
Petr Písař
70d2b4ee4f perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-12 14:54:15 +02:00
Luboš Uhliarik
06cde88ecf Resolves: #1469959 - httpd update cleaned out /etc/sysconfig 2017-07-12 11:42:25 +02:00
Luboš Uhliarik
c6fd35316d new version 2.4.27 2017-07-10 15:25:44 +02:00
Joe Orton
1205ddb60b mod_proxy_fcgi: fix further regressions (PR 61202) 2017-06-30 17:01:34 +01:00
Luboš Uhliarik
fd6452a0f2 new version 2.4.26 2017-06-19 11:48:36 +02:00
Joe Orton
fce414a1c1 move unit man pages to section 8, add as Documentation= in units 2017-06-05 16:55:45 +01:00
Joe Orton
bbb988f0f4 add httpd.service.xml to Sources. 2017-05-19 11:10:34 +01:00
Joe Orton
710b63c5e0 add httpd.service(5) and httpd.socket(5) man pages 2017-05-19 11:04:53 +01:00
Joe Orton
dbcbdf8a73 require mod_http2, now packaged separately 2017-05-16 10:00:54 +01:00
Luboš Uhliarik
c58fda3be9 Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp: 
patch to set worker secret passed to tomcat
 2017-03-30 15:32:35 +02:00
Luboš Uhliarik
c79ba20a8d Resolves: #1434916 - httpd.service: Failed with result timeout 2017-03-28 13:11:07 +02:00
Joe Orton
59afc1533e link only httpd, not support/* against -lselinux -lsystemd 2017-03-24 17:05:26 +00:00
Fedora Release Engineering
65743a6b6a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 12:45:49 +00:00
Joe Orton
33e6dce94a mod_watchdog: restrict thread lifetime (#1410883) 
Resolves: rhbz#1410883
 2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac Resolves: #1358875 - require nghttp2 >= 1.5.0 2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0 new version 2.4.25 2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0 Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of 
LimitRequestFields directive in mod_http2
 2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11 fix build with OpenSSL 1.1 (#1392900) 
- fix typos in ssl.conf (josef randinger, #1379407)
Resolves: rhbz#1392900
Resolves: rhbz#1379407
 2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a synch ssl.conf with upstream 2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c no longer package /etc/sysconfig/httpd 2016-11-02 11:32:07 +00:00
Joe Orton
4a0435cd7b add security fix for CVE-2016-5387 2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e load mod_watchdog by default (#1353582) 
Resolves: rhbz#1325883
Resolves: rhbz#1353582
 2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15 restore build of mod_proxy_fdpass (#1325883) 
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
 2016-07-07 15:27:42 +01:00
Joe Orton
a67a8d7392 update to 2.4.23 (#1325883, #1353203) 
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
 2016-07-07 13:22:30 +01:00
Petr Písař
aaf7efcca6 Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl> 2016-06-24 09:44:53 +02:00
Joe Orton
37b82598ea have "apachectl graceful" start httpd if not running, per man page 2016-04-07 14:07:25 +01:00
Joe Orton
a4ba0cdfda use redirects for lang-specific /manual/ URLs 2016-04-06 11:35:45 +01:00
Joe Orton
e67ea8a7b5 fix welcome page HTML validity (Ville Skyttä) 2016-03-18 13:08:34 +00:00
Joe Orton
0f2de0f53c remove httpd pre script (duplicate of httpd-filesystem's) 
- in httpd-filesystem pre script, create group/user iff non-existent
 2016-03-18 10:18:52 +00:00
Dennis Gilmore
1a66c1a6dd - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-03 23:56:42 +00:00
Jan Kaluza
c791d40a6b update to new version 2.4.18 2015-12-14 09:43:41 +01:00
Joe Orton
47b967cd91 re-enable mod_asis due to popular demand (#1284315) 
Resolves: rhbz#1284315
 2015-12-09 16:51:03 +00:00
Jan Kaluza
6abf69b549 fix crash when using -X argument (#1272234) 2015-10-26 08:02:55 +01:00
Jan Kaluza
c2c03777d6 rebase socket activation patch to 2.4.17 2015-10-14 10:52:58 +02:00
Joe Orton
91a2788bce update to 2.4.17 (#1271224) 
- build, load mod_http2
- don't build mod_asis, mod_file_cache
- load mod_cache_socache, mod_proxy_wstunnel by default
- check every built mod_* is configured
- synch ssl.conf with upstream; disable SSLv3 by default
Resolves: rhbz#1271224
 2015-10-14 09:06:30 +01:00
Jan Kaluza
c119a5ba7a Add right tarball... 2015-07-16 09:36:06 +02:00
Jan Kaluza
0d4633dbd4 Add missing tarball 2015-07-16 09:28:27 +02:00
Jan Kaluza
1cdbc457b3 update to 2.4.16 2015-07-15 15:29:48 +02:00