rpms/httpd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
655 Commits 12 Branches 73 Tags 10 MiB
d5e28192c4
Commit Graph

501 Commits

Author SHA1 Message Date
Joe Orton
5f6c5adf6f Remove suexec patch already merged upstream. 2019-10-03 09:10:23 +01:00
Joe Orton
f1280d5f56 mod_proxy_balancer: fix balancer-manager XSRF check (PR 63688) 2019-10-03 09:06:46 +01:00
Joe Orton
5b6bedca6c mod_cgid: possible stdout timeout handling fix (#1757683) 
Resolves: rhbz#1757683
 2019-10-02 11:47:35 +01:00
Joe Orton
a4638c111c mod_ssl: restore dependency on /usr/bin/hostname (#1135118) 
Resolves: rhbz#1135118
 2019-09-25 15:23:20 +01:00
Stephen Gallagher
8c08392f60
Use testpage from system-logos-httpd for proper branding 
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2019-09-19 13:18:22 -04:00
Joe Orton
1578b45343 update to 2.4.41 2019-08-15 06:44:03 +01:00
Fedora Release Engineering
84b529bffa - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-25 08:38:22 +00:00
Joe Orton
5586dfdc48 drop /var/lib/dav directory, since mod_dav_fs uses statedir 2019-07-23 10:41:39 +01:00
Lubos Uhliarik
fc0e844ce2 - Remove pointless creation of /var/lib/httpd/state dir in RPM build root 
- Substitute tabs for spaces.
 2019-07-19 11:28:20 +02:00
Joe Orton
2993aea7a7 mod_cgid: use fd passing to fix script stderr handling (#1591157) 
Resolves: rhbz#1591157
 2019-07-17 11:31:15 +01:00
Joe Orton
7ee1cb5208 - apachectl: restore -V/-v/-t support (#1727434) 2019-07-08 09:23:48 +01:00
Joe Orton
2ae67b32b1 htpasswd: add SHA-256/512 support 2019-07-08 09:18:33 +01:00
Joe Orton
b18b77bc68 create instance-specific StateDir in httpd@.service, instance.conf 2019-06-21 09:00:52 +01:00
Joe Orton
10963a8dad remove superfluous ap_hack_ symbols from httpd binary 
more verbose %check section
 2019-06-20 11:52:17 +01:00
Lubos Uhliarik
16a6314f81 Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2019-06-13 17:40:20 +02:00
Lubos Uhliarik
e945a601ca Removed bundled mod_md 2019-06-13 17:38:40 +02:00
Joe Orton
720c6f392b mod_ssl: fix "httpd -L" (etc) before httpd-init.service runs 2019-06-13 16:37:06 +01:00
Joe Orton
67d32a785d fixes for StateDir directive (upstream r1857731, r1857731) 2019-06-12 10:48:06 +01:00
Lubos Uhliarik
bc95575bf5 httpd dependency on initscripts is unspecified (#1705188) 
- substitute "service" cmd by "httpd" with -t arg

Resolves: #1705188
 2019-05-02 14:46:02 +00:00
Joe Orton
db62736588 - fix systemd_postun usage. 2019-04-16 09:10:28 +01:00
Joe Orton
fc24275107 - mod_reqtimeout: fix default values regression (PR 63325) 2019-04-16 08:49:29 +01:00
Joe Orton
3aa63a93a9 - fix statedir symlink to point to /var/lib/httpd (#1697662) 2019-04-16 08:48:10 +01:00
Lubos Uhliarik
c6cd42af04 Fix wrong module name used in LoadModule directive 2019-04-02 15:27:39 +00:00
Lubos Uhliarik
c30e102180 update to 2.4.39 2019-04-02 10:53:17 +00:00
Joe Orton
b86b48c4a2 apachectl: cleanup and replace script wholesale (#1641237) 
* drop "apachectl fullstatus" support
 * run systemctl with --no-pager option
 * implement graceful&graceful-stop by signal directly
run "httpd -t" from legacy action script
Resolves: rhbz#1641237
 2019-03-14 10:30:15 +00:00
Lubos Uhliarik
9e462af294 segmentation fault fix (FIPS) 2019-02-05 12:39:17 +00:00
Joe Orton
80cf4174c6 use serverroot-relative statedir, rundir by default 2019-02-05 12:11:27 +00:00
Fedora Release Engineering
887d8d1a45 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-02-01 02:28:37 +00:00
Igor Gnatenko
a0bbdf8c6c Remove obsolete Group tag 
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
 2019-01-28 20:24:07 +01:00
Lubos Uhliarik
584830e35e Updated release num 2019-01-23 12:34:26 +00:00
Joe Orton
a18552330d Update PKCS#11 patch. 2019-01-23 13:04:05 +01:00
Lubos Uhliarik
1810bd511f new version 2.4.38 (#1668125) 
adjusted patches
 2019-01-23 11:21:32 +00:00
Björn Esser
ccaa54fd8d
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 19:04:04 +01:00
Luboš Uhliarik
affd30da6f Resolves: #1652678 - TLS connection allowed while all protocols are forbidden 2018-11-23 11:11:59 +01:00
Joe Orton
f7bb212f40 add httpd.conf(5) (#1611361) 
Resolves: rhbz#1611361
 2018-11-09 09:01:23 +00:00
Joe Orton
36d7a68241 add httpd.conf(5) (#1611361) 
Resolves: rhbz#1611361
 2018-11-08 17:13:42 +00:00
Luboš Uhliarik
2fa14eded5 Resolves: #1647241 - fix apachectl script 2018-11-07 12:38:50 +01:00
Joe Orton
920857b24c add DefaultStateDir/ap_state_dir_relative() 
mod_dav_fs: use state dir for default DAVLockDB
mod_md: use state dir for default MDStoreDir
 2018-10-31 12:19:33 +00:00
Joe Orton
e869b8b799 update to 2.4.37 2018-10-31 10:08:18 +00:00
Joe Orton
c72daf66bd add htcacheclean.service(8) man page 2018-10-31 10:01:24 +00:00
Joe Orton
f201a4ebc1 apachectl: don't read /etc/sysconfig/httpd 2018-09-28 08:51:19 +01:00
Joe Orton
1f748ace31 fix build if OpenSSL built w/o SSLv3 support 2018-09-25 09:43:59 +01:00
Joe Orton
e6f5630905 comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in 
default configuration; now follow OpenSSL system default (#1468322)
Resolves: rhbz#1468322
 2018-09-21 15:22:11 +01:00
Joe Orton
89ff98903a Merge branch 'f29' 2018-09-21 15:19:28 +01:00
Joe Orton
86433978a1 mod_ssl: follow OpenSSL protocol defaults if SSLProtocol 
is not configured (Rob Crittenden, #1618371)
Resolves: rhbz#1618371
 2018-09-21 13:07:38 +01:00
Joe Orton
369db50dd0 mod_ssl: more TLSv1.3 fixes (#1619389) 
Resolves: rhbz#1619389
 2018-09-18 13:57:48 +01:00
Luboš Uhliarik
5bf30dc156 mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" 
configuration (#1624777)

Resolves: #1624777
 2018-09-03 11:29:22 +02:00
Joe Orton
b52ebeb33d mod_ssl: further TLSv1.3 fix (#1619389) 
Resolves: rhbz#1619389
 2018-08-21 08:34:34 +01:00
Joe Orton
2f9bc4598d mod_ssl: backport TLSv1.3 support changes from upstream (#1615059) 
Resolves: rhbz#1615059
 2018-08-13 14:43:07 +01:00
Joe Orton
e7a848a3db mod_ssl: fix OCSP regression (upstream r1555631) 2018-07-20 11:22:10 +01:00
Joe Orton
84d2251c2d - Fedora layout is now upstream, drop patch 2018-07-19 18:47:48 +01:00
Joe Orton
71609fae14 update Obsoletes for mod_proxy_uswgi (#1599113) 
Resolves: rhbz#httpd.spec
 2018-07-18 20:22:36 +01:00
Joe Orton
5072c65a7b update to 2.4.34 (#1601160) 
Resolves: rhbz#1601160
 2018-07-18 11:55:03 +01:00
Joe Orton
bc2b0a9538 BR gcc 2018-07-16 20:41:32 +01:00
Joe Orton
6fd32168ff don't block on service try-restart in posttrans scriptlet 
add Lua-based /server-status example page to docs
obsoletes: and provides: for mod_proxy_uswgi (#1599113)
Resolves: rhbz#1599113
 2018-07-16 17:11:20 +01:00
Joe Orton
23fb452dae don't block on service try-restart in posttrans scriptlet 2018-07-16 17:02:19 +01:00
Joe Orton
7a7c76fbe0 add Lua-based /server-status example page to docs 2018-07-16 17:01:34 +01:00
Fedora Release Engineering
68920957bf - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 05:07:26 +00:00
Jason Tibbitts
1ee4430d42 Remove needless use of %defattr 2018-07-10 01:20:33 -05:00
Joe Orton
cdc2806d68 Merge branch 'f28' 2018-07-06 17:06:19 +01:00
Joe Orton
8ab39c8ee0 add per-request memory leak fix (upstream r1833014) 2018-07-06 17:03:22 +01:00
Joe Orton
1d78fa49cb mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki) 2018-07-06 14:04:07 +01:00
Joe Orton
df56b6f20c - update for new mod_systemd patch 2018-06-12 16:08:30 +01:00
Joe Orton
3778b45de1 mod_systemd: show bound ports in status and log to journal 
at startup.
 2018-06-12 15:31:38 +01:00
Joe Orton
4bd9fa63fd add httpd@.service; update httpd.service(8) and add new stub 2018-05-01 09:49:06 +01:00
Joe Orton
e4c2da63b4 Omit multiproxy change. 2018-05-01 09:48:48 +01:00
Joe Orton
5dbb1d7cab mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511) 
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
 2018-05-01 09:48:09 +01:00
Joe Orton
07274a959f mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537) 
Resolves: rhbz#1564537
 2018-05-01 09:47:41 +01:00
Joe Orton
5860daab11 add httpd@.service; update httpd.service(8) and add new stub 2018-04-19 17:18:11 +01:00
Joe Orton
799dcecff8 Use updated sslmultiproxy patch. 2018-04-16 08:44:34 +01:00
Joe Orton
dbbe3f2b69 mod_ssl: fix mod_nss compat patch (Rob Crittenden, #1566511) 
mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
Resolves: rhbz#1566511
Resolves: rhbz#1563846
 2018-04-16 08:25:48 +01:00
Joe Orton
616eacccb0 mod_ssl: drop implicit 'SSLEngine on' for vhost w/o certs (#1564537) 
Resolves: rhbz#1564537
 2018-04-12 08:03:52 +01:00
Adam Williamson
cb3c26bd43 Exclude mod_md config file from main package (#1562413) 2018-03-30 17:24:23 -07:00
Joe Orton
c7d07f31b9 rebase to 2.4.33 (#1560174) 
add mod_md subpackage; load mod_proxy_uwsgi by default
 2018-03-28 20:18:58 +01:00
Jitka Plesnikova
c144c0a274 Rebuilt with brotli 1.0.3 2018-03-05 09:36:51 +01:00
Joe Orton
4af7d39caf simplify liblua detection in configure 2018-02-26 12:28:41 +00:00
Igor Gnatenko
2919621fa4
Remove %clean section 
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-14 08:07:05 +01:00
Igor Gnatenko
5450cc3ba1 Remove BuildRoot definition 
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-13 23:30:42 +01:00
Fedora Release Engineering
cc87a074cd - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-07 16:31:52 +00:00
Joe Orton
2971e92b1f link mod_lua against -lcrypt (#1538992) 
Resolves: rhbz#1538992
 2018-01-27 09:19:58 +01:00
Paul Howarth
2820bed4db Rebuild with updated flags to work around compiler issues on i686 2018-01-26 17:23:59 +00:00
Björn Esser
b94d82008d
Rebuilt for switch to libxcrypt 2018-01-20 23:06:54 +01:00
Joe Orton
95a0c9518b build and load mod_brotli 2017-11-23 11:11:28 +00:00
Luboš Uhliarik
16b03b20d8 Removed patches, which are already included in upstream source 2017-10-25 14:28:47 +02:00
Luboš Uhliarik
082f3536aa new version 2.4.29 2017-10-25 14:20:19 +02:00
Joe Orton
596b5fc517 drop obsolete Obsoletes 
update docs, Summary
trim %changelog
 2017-10-10 15:23:11 +01:00
Patrick Uiterwijk
6ebb5a2203 Backport patch for fixing ticket key usage 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2017-10-10 13:31:46 +02:00
Luboš Uhliarik
01bcbc5642 new version 2.4.28 2017-10-06 18:14:03 +02:00
Joe Orton
6d96e6a193 add notes on enabling httpd_graceful_shutdown boolean for prefork 2017-10-03 09:16:29 +01:00
Joe Orton
d31ea66d9d drop Requires(post) for mod_ssl 2017-09-22 16:20:54 +01:00
Joe Orton
962c800331 better error handling in httpd-ssl-gencerts (#1494556) 
Resolves: rhbz#1494556
 2017-09-22 15:48:42 +01:00
Joe Orton
c094ba4827 Fix conditional. 2017-09-22 08:06:39 +01:00
Joe Orton
5ec11c5a4f Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/httpd 2017-09-22 08:05:04 +01:00
Joe Orton
ccd2dc5050 Fix MPM defaults if building on RHEL, fix touch -r for 00-mpm.conf. 2017-09-22 08:03:13 +01:00
Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together 
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5 Address CVE-2017-9798 by applying upstream patch 
Reference RHBZ #1490344
 2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740 use sscg defaults; append CA cert to generated cert 
document httpd-init.service in httpd-init.service(8)
 2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start 
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2017-09-20 15:00:20 -04:00
Joe Orton
e2185159ed move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7 move httpd.service.d, httpd.socket.d dirs to -filesystem 2017-09-19 10:02:32 +01:00