rpms/httpd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
611 Commits 12 Branches 73 Tags 10 MiB
c1307960e6
Commit Graph

474 Commits

Author SHA1 Message Date
Fedora Release Engineering
887d8d1a45 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-02-01 02:28:37 +00:00
Igor Gnatenko
a0bbdf8c6c Remove obsolete Group tag 
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
 2019-01-28 20:24:07 +01:00
Lubos Uhliarik
584830e35e Updated release num 2019-01-23 12:34:26 +00:00
Joe Orton
a18552330d Update PKCS#11 patch. 2019-01-23 13:04:05 +01:00
Lubos Uhliarik
1810bd511f new version 2.4.38 (#1668125) 
adjusted patches
 2019-01-23 11:21:32 +00:00
Björn Esser
ccaa54fd8d
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 19:04:04 +01:00
Luboš Uhliarik
affd30da6f Resolves: #1652678 - TLS connection allowed while all protocols are forbidden 2018-11-23 11:11:59 +01:00
Joe Orton
f7bb212f40 add httpd.conf(5) (#1611361) 
Resolves: rhbz#1611361
 2018-11-09 09:01:23 +00:00
Joe Orton
36d7a68241 add httpd.conf(5) (#1611361) 
Resolves: rhbz#1611361
 2018-11-08 17:13:42 +00:00
Luboš Uhliarik
2fa14eded5 Resolves: #1647241 - fix apachectl script 2018-11-07 12:38:50 +01:00
Joe Orton
920857b24c add DefaultStateDir/ap_state_dir_relative() 
mod_dav_fs: use state dir for default DAVLockDB
mod_md: use state dir for default MDStoreDir
 2018-10-31 12:19:33 +00:00
Joe Orton
e869b8b799 update to 2.4.37 2018-10-31 10:08:18 +00:00
Joe Orton
c72daf66bd add htcacheclean.service(8) man page 2018-10-31 10:01:24 +00:00
Joe Orton
f201a4ebc1 apachectl: don't read /etc/sysconfig/httpd 2018-09-28 08:51:19 +01:00
Joe Orton
1f748ace31 fix build if OpenSSL built w/o SSLv3 support 2018-09-25 09:43:59 +01:00
Joe Orton
e6f5630905 comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in 
default configuration; now follow OpenSSL system default (#1468322)
Resolves: rhbz#1468322
 2018-09-21 15:22:11 +01:00
Joe Orton
89ff98903a Merge branch 'f29' 2018-09-21 15:19:28 +01:00
Joe Orton
86433978a1 mod_ssl: follow OpenSSL protocol defaults if SSLProtocol 
is not configured (Rob Crittenden, #1618371)
Resolves: rhbz#1618371
 2018-09-21 13:07:38 +01:00
Joe Orton
369db50dd0 mod_ssl: more TLSv1.3 fixes (#1619389) 
Resolves: rhbz#1619389
 2018-09-18 13:57:48 +01:00
Luboš Uhliarik
5bf30dc156 mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" 
configuration (#1624777)

Resolves: #1624777
 2018-09-03 11:29:22 +02:00
Joe Orton
b52ebeb33d mod_ssl: further TLSv1.3 fix (#1619389) 
Resolves: rhbz#1619389
 2018-08-21 08:34:34 +01:00
Joe Orton
2f9bc4598d mod_ssl: backport TLSv1.3 support changes from upstream (#1615059) 
Resolves: rhbz#1615059
 2018-08-13 14:43:07 +01:00
Joe Orton
e7a848a3db mod_ssl: fix OCSP regression (upstream r1555631) 2018-07-20 11:22:10 +01:00
Joe Orton
84d2251c2d - Fedora layout is now upstream, drop patch 2018-07-19 18:47:48 +01:00
Joe Orton
71609fae14 update Obsoletes for mod_proxy_uswgi (#1599113) 
Resolves: rhbz#httpd.spec
 2018-07-18 20:22:36 +01:00
Joe Orton
5072c65a7b update to 2.4.34 (#1601160) 
Resolves: rhbz#1601160
 2018-07-18 11:55:03 +01:00
Joe Orton
bc2b0a9538 BR gcc 2018-07-16 20:41:32 +01:00
Joe Orton
6fd32168ff don't block on service try-restart in posttrans scriptlet 
add Lua-based /server-status example page to docs
obsoletes: and provides: for mod_proxy_uswgi (#1599113)
Resolves: rhbz#1599113
 2018-07-16 17:11:20 +01:00
Joe Orton
23fb452dae don't block on service try-restart in posttrans scriptlet 2018-07-16 17:02:19 +01:00
Joe Orton
7a7c76fbe0 add Lua-based /server-status example page to docs 2018-07-16 17:01:34 +01:00
Fedora Release Engineering
68920957bf - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 05:07:26 +00:00
Jason Tibbitts
1ee4430d42 Remove needless use of %defattr 2018-07-10 01:20:33 -05:00
Joe Orton
cdc2806d68 Merge branch 'f28' 2018-07-06 17:06:19 +01:00
Joe Orton
8ab39c8ee0 add per-request memory leak fix (upstream r1833014) 2018-07-06 17:03:22 +01:00
Joe Orton
1d78fa49cb mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki) 2018-07-06 14:04:07 +01:00
Joe Orton
df56b6f20c - update for new mod_systemd patch 2018-06-12 16:08:30 +01:00
Joe Orton
3778b45de1 mod_systemd: show bound ports in status and log to journal 
at startup.
 2018-06-12 15:31:38 +01:00
Joe Orton
4bd9fa63fd add httpd@.service; update httpd.service(8) and add new stub 2018-05-01 09:49:06 +01:00
Joe Orton
e4c2da63b4 Omit multiproxy change. 2018-05-01 09:48:48 +01:00
Joe Orton
5dbb1d7cab mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511) 
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
 2018-05-01 09:48:09 +01:00
Joe Orton
07274a959f mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537) 
Resolves: rhbz#1564537
 2018-05-01 09:47:41 +01:00
Joe Orton
5860daab11 add httpd@.service; update httpd.service(8) and add new stub 2018-04-19 17:18:11 +01:00
Joe Orton
799dcecff8 Use updated sslmultiproxy patch. 2018-04-16 08:44:34 +01:00
Joe Orton
dbbe3f2b69 mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511) 
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
 2018-04-16 08:25:48 +01:00
Joe Orton
616eacccb0 mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537) 
Resolves: rhbz#1564537
 2018-04-12 08:03:52 +01:00
Adam Williamson
cb3c26bd43 Exclude mod_md config file from main package (#1562413) 2018-03-30 17:24:23 -07:00
Joe Orton
c7d07f31b9 rebase to 2.4.33 (#1560174) 
add mod_md subpackage; load mod_proxy_uwsgi by default
 2018-03-28 20:18:58 +01:00
Jitka Plesnikova
c144c0a274 Rebuilt with brotli 1.0.3 2018-03-05 09:36:51 +01:00
Joe Orton
4af7d39caf simplify liblua detection in configure 2018-02-26 12:28:41 +00:00
Igor Gnatenko
2919621fa4
Remove %clean section 
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-14 08:07:05 +01:00
Igor Gnatenko
5450cc3ba1 Remove BuildRoot definition 
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-13 23:30:42 +01:00
Fedora Release Engineering
cc87a074cd - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-07 16:31:52 +00:00
Joe Orton
2971e92b1f link mod_lua against -lcrypt (#1538992) 
Resolves: rhbz#1538992
 2018-01-27 09:19:58 +01:00
Paul Howarth
2820bed4db Rebuild with updated flags to work around compiler issues on i686 2018-01-26 17:23:59 +00:00
Björn Esser
b94d82008d
Rebuilt for switch to libxcrypt 2018-01-20 23:06:54 +01:00
Joe Orton
95a0c9518b build and load mod_brotli 2017-11-23 11:11:28 +00:00
Luboš Uhliarik
16b03b20d8 Removed patches, which are already included in upstream source 2017-10-25 14:28:47 +02:00
Luboš Uhliarik
082f3536aa new version 2.4.29 2017-10-25 14:20:19 +02:00
Joe Orton
596b5fc517 drop obsolete Obsoletes 
update docs, Summary
trim %changelog
 2017-10-10 15:23:11 +01:00
Patrick Uiterwijk
6ebb5a2203 Backport patch for fixing ticket key usage 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2017-10-10 13:31:46 +02:00
Luboš Uhliarik
01bcbc5642 new version 2.4.28 2017-10-06 18:14:03 +02:00
Joe Orton
6d96e6a193 add notes on enabling httpd_graceful_shutdown boolean for prefork 2017-10-03 09:16:29 +01:00
Joe Orton
d31ea66d9d drop Requires(post) for mod_ssl 2017-09-22 16:20:54 +01:00
Joe Orton
962c800331 better error handling in httpd-ssl-gencerts (#1494556) 
Resolves: rhbz#1494556
 2017-09-22 15:48:42 +01:00
Joe Orton
c094ba4827 Fix conditional. 2017-09-22 08:06:39 +01:00
Joe Orton
5ec11c5a4f Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2017-09-22 08:05:04 +01:00
Joe Orton
ccd2dc5050 Fix MPM defaults if building on RHEL, fix touch -r for 00-mpm.conf. 2017-09-22 08:03:13 +01:00
Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together 
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5 Address CVE-2017-9798 by applying upstream patch 
Reference RHBZ #1490344
 2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740 use sscg defaults; append CA cert to generated cert 
document httpd-init.service in httpd-init.service(8)
 2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start 
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2017-09-20 15:00:20 -04:00
Joe Orton
e2185159ed move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:02:32 +01:00
Joe Orton
b022e3b523 add new content-length filter (upstream PR 61222) 2017-09-13 14:21:17 +01:00
Joe Orton
ddabcffa42 Switch to https:// URLs. 2017-08-04 13:19:55 +01:00
Fedora Release Engineering
da66bed0cf - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 23:33:12 +00:00
Fedora Release Engineering
bd989fa784 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 12:53:42 +00:00
Joe Orton
adcaa34289 update mod_systemd (r1802251) 2017-07-18 09:25:14 +01:00
Joe Orton
e9d2120fbf switch to event by default for Fedora 27 and later (#1471708) 
Resolves: rhbz#1471708
 2017-07-17 11:39:57 +01:00
Petr Písař
70d2b4ee4f perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-12 14:54:15 +02:00
Luboš Uhliarik
06cde88ecf Resolves: #1469959 - httpd update cleaned out /etc/sysconfig 2017-07-12 11:42:25 +02:00
Luboš Uhliarik
c6fd35316d new version 2.4.27 2017-07-10 15:25:44 +02:00
Joe Orton
1205ddb60b mod_proxy_fcgi: fix further regressions (PR 61202) 2017-06-30 17:01:34 +01:00
Luboš Uhliarik
fd6452a0f2 new version 2.4.26 2017-06-19 11:48:36 +02:00
Joe Orton
fce414a1c1 move unit man pages to section 8, add as Documentation= in units 2017-06-05 16:55:45 +01:00
Joe Orton
bbb988f0f4 add httpd.service.xml to Sources. 2017-05-19 11:10:34 +01:00
Joe Orton
710b63c5e0 add httpd.service(5) and httpd.socket(5) man pages 2017-05-19 11:04:53 +01:00
Joe Orton
dbcbdf8a73 require mod_http2, now packaged separately 2017-05-16 10:00:54 +01:00
Luboš Uhliarik
c58fda3be9 Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp: 
patch to set worker secret passed to tomcat
 2017-03-30 15:32:35 +02:00
Luboš Uhliarik
c79ba20a8d Resolves: #1434916 - httpd.service: Failed with result timeout 2017-03-28 13:11:07 +02:00
Joe Orton
59afc1533e link only httpd, not support/* against -lselinux -lsystemd 2017-03-24 17:05:26 +00:00
Fedora Release Engineering
65743a6b6a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 12:45:49 +00:00
Joe Orton
33e6dce94a mod_watchdog: restrict thread lifetime (#1410883) 
Resolves: rhbz#1410883
 2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac Resolves: #1358875 - require nghttp2 >= 1.5.0 2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0 new version 2.4.25 2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0 Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of 
LimitRequestFields directive in mod_http2
 2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11 fix build with OpenSSL 1.1 (#1392900) 
- fix typos in ssl.conf (josef randinger, #1379407)
Resolves: rhbz#1392900
Resolves: rhbz#1379407
 2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a synch ssl.conf with upstream 2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c no longer package /etc/sysconfig/httpd 2016-11-02 11:32:07 +00:00
Joe Orton
4a0435cd7b add security fix for CVE-2016-5387 2016-07-18 16:31:52 +01:00