Commit Graph

382 Commits

Author SHA1 Message Date
Joe Orton
33e6dce94a mod_watchdog: restrict thread lifetime (#1410883)
Resolves: rhbz#1410883
2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac Resolves: #1358875 - require nghttp2 >= 1.5.0 2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0 new version 2.4.25 2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0 Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
LimitRequestFields directive in mod_http2
2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11 fix build with OpenSSL 1.1 (#1392900)
- fix typos in ssl.conf (josef randinger, #1379407)
Resolves: rhbz#1392900
Resolves: rhbz#1379407
2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a synch ssl.conf with upstream 2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c no longer package /etc/sysconfig/httpd 2016-11-02 11:32:07 +00:00
Joe Orton
4a0435cd7b add security fix for CVE-2016-5387 2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e load mod_watchdog by default (#1353582)
Resolves: rhbz#1325883
Resolves: rhbz#1353582
2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15 restore build of mod_proxy_fdpass (#1325883)
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
2016-07-07 15:27:42 +01:00
Joe Orton
a67a8d7392 update to 2.4.23 (#1325883, #1353203)
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00
Petr Písař
aaf7efcca6 Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl> 2016-06-24 09:44:53 +02:00
Joe Orton
37b82598ea have "apachectl graceful" start httpd if not running, per man page 2016-04-07 14:07:25 +01:00
Joe Orton
a4ba0cdfda use redirects for lang-specific /manual/ URLs 2016-04-06 11:35:45 +01:00
Joe Orton
e67ea8a7b5 fix welcome page HTML validity (Ville Skyttä) 2016-03-18 13:08:34 +00:00
Joe Orton
0f2de0f53c remove httpd pre script (duplicate of httpd-filesystem's)
- in httpd-filesystem pre script, create group/user iff non-existent
2016-03-18 10:18:52 +00:00
Dennis Gilmore
1a66c1a6dd - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-03 23:56:42 +00:00
Jan Kaluza
c791d40a6b update to new version 2.4.18 2015-12-14 09:43:41 +01:00
Joe Orton
47b967cd91 re-enable mod_asis due to popular demand (#1284315)
Resolves: rhbz#1284315
2015-12-09 16:51:03 +00:00
Jan Kaluza
6abf69b549 fix crash when using -X argument (#1272234) 2015-10-26 08:02:55 +01:00
Jan Kaluza
c2c03777d6 rebase socket activation patch to 2.4.17 2015-10-14 10:52:58 +02:00
Joe Orton
91a2788bce update to 2.4.17 (#1271224)
- build, load mod_http2
- don't build mod_asis, mod_file_cache
- load mod_cache_socache, mod_proxy_wstunnel by default
- check every built mod_* is configured
- synch ssl.conf with upstream; disable SSLv3 by default
Resolves: rhbz#1271224
2015-10-14 09:06:30 +01:00
Jan Kaluza
c119a5ba7a Add right tarball... 2015-07-16 09:36:06 +02:00
Jan Kaluza
0d4633dbd4 Add missing tarball 2015-07-16 09:28:27 +02:00
Jan Kaluza
1cdbc457b3 update to 2.4.16 2015-07-15 15:29:48 +02:00
Joe Orton
db205dad27 mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars 2015-07-07 09:41:55 +01:00
Dennis Gilmore
b274835c1b - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 10:36:22 +00:00
Jan Kaluza
16a9524e26 update to 2.4.12 2015-03-27 09:33:08 +01:00
Jan Kaluza
571518a2a6 fix compilation with lua-5.3 2015-03-24 10:16:44 +01:00
Jan Kaluza
07b85b43f8 remove filter for auto-provides of httpd modules, it is not needed since F20 2015-03-24 09:41:33 +01:00
Jan Kaluza
af9996ce69 core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
- mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
- mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
  in multiple Require directives with different arguments (CVE-2014-8109)
2014-12-17 09:25:50 +01:00
Joe Orton
8c01244b34 require apr-util 1.5.x 2014-10-14 10:53:35 +01:00
Jan Kaluza
5d7dedd78c use NoDelay and DeferAcceptSec in httpd.socket 2014-09-18 08:04:18 +02:00
Jan Kaluza
46346fae47 increase suexec minimum acceptable uid/gid to 1000 (#1136391) 2014-09-08 14:12:40 +02:00
Jan Kaluza
b430bfe6b0 fix hostname requirement and conflict with openssl-libs 2014-09-03 16:17:05 +02:00
Jan Kaluza
36930381bc use KillMode=mixed in httpd.service (#1135122) 2014-09-01 09:32:54 +02:00
Joe Orton
92ee9cf626 set vstring based on /etc/os-release (Pat Riehecky, #1114539)
Resolves: rhbz#1114539
2014-08-29 16:13:01 +01:00
Joe Orton
793563ad40 pull in httpd-filesystem as Requires(pre) (#1128328)
- fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
- require hostname for mod_ssl post script (#1135118)
Resolves: rhbz#1135118
Resolves: rhbz#1134348
Resolves: rhbz#1128328
2014-08-29 14:45:59 +01:00
Joe Orton
452da8d9b6 pull in httpd-filesystem as Requires(pre) (#1128328)
Resolves: rhbz#1128328
2014-08-29 14:35:18 +01:00
Jan Kaluza
94399e06f8 mod_systemd: updated to the latest version
- use -lsystemd instead of -lsystemd-daemon (#1125084)
- fix possible crash in SIGINT handling (#958934)
2014-08-22 12:11:38 +02:00
Joe Orton
4475e3e262 mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
- switch default ssl.conf to use PROFILE=SYSTEM (#1109119)
Resolves: rhbz#1109119
2014-08-21 11:32:44 +01:00
Peter Robinson
f65d1ef433 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 20:45:39 +00:00
Jan Kaluza
5ee418c3b4 add /usr/bin/useradd dependency to -filesystem requires 2014-08-15 09:34:45 +02:00
Jan Kaluza
34169cb8c8 fix creating apache user in pre script (#1128328) 2014-08-14 19:45:12 +02:00
Jan Kaluza
bb13a678b7 fix creating apache user in pre script (#1128328) 2014-08-14 19:41:29 +02:00
Joe Orton
b46475bf5a enable mod_request by default for mod_auth_form
- move disabled-by-default modules from 00-base.conf to 00-optional.conf
2014-07-31 12:16:47 +01:00
Joe Orton
1fce54ba4f expand variables in docdir example configs 2014-07-21 22:06:14 +01:00
Joe Orton
94c96741e2 update to 2.4.10 2014-07-21 22:05:49 +01:00
Jan Kaluza
572a5df9ee add support for systemd socket activation (#1111648) 2014-07-08 15:52:58 +02:00
Jan Kaluza
63d5e3d13d remove conf.modules.d from httpd-filesystem subpackage (#1081453) 2014-07-07 13:16:02 +02:00
Jan Kaluza
fa66d3ef87 add httpd-filesystem subpackage (#1081453) 2014-07-07 12:47:52 +02:00
Joe Orton
c0bdfa464b mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)
Resolves: rhbz#1109119
2014-06-20 10:54:36 +01:00
Dennis Gilmore
2d734473b0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 15:31:52 -05:00
Jan Kaluza
5b3da1ff0f add support for SetHandler + proxy (#1078970) 2014-03-28 11:35:30 +01:00
Jan Kaluza
6228c46ec0 move macros from /etc/rpm to macros.d (#1074277)
- remove unused patches
2014-03-27 12:39:16 +01:00
Jan Kaluza
9f6ae98c27 update to 2.4.9 2014-03-18 07:55:27 +01:00
Joe Orton
8efab6ad85 use 2048-bit RSA key with SHA-256 signature in dummy certificate 2014-02-28 17:45:18 +00:00
Joe Orton
6a627fd53c Create drop directory for systemd snippets 2014-02-28 08:10:10 +00:00
Joe Orton
15ab7bceeb Create drop directory for systemd snippets 2014-02-28 08:09:14 +00:00
Jan Kaluza
a035f96c4e remove provides of old MMN, because it contained double-dash (#1068851) 2014-02-27 12:03:34 +01:00
Jan Kaluza
567c7a9431 fix graceful restart using legacy actions 2014-02-20 12:19:52 +01:00
Joe Orton
a2e9cec246 conflict with pre-1.5.0 APR
- fix sslsninotreq patch
2013-12-12 14:13:38 +00:00
Joe Orton
ed353d03f2 update to 2.4.7 (#1034071) 2013-11-27 17:19:09 +00:00
Joe Orton
fdd0182ac0 switch to requiring system-logos-httpd (#1031288) 2013-11-22 19:03:44 +00:00
Joe Orton
353758d2ab change mmnisa to drop "-" altogether 2013-11-12 12:45:29 +00:00
Joe Orton
b39251e583 drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide
for transition
2013-11-12 09:54:01 +00:00
Jan Kaluza
13efaf1ac9 systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg 2013-11-01 12:44:15 +01:00
Jan Kaluza
51fe77bc1f systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg 2013-11-01 12:43:40 +01:00
Joe Orton
8de85ede52 Merge. 2013-10-31 16:04:17 +00:00
Joe Orton
42eaf6a375 mod_ssl: allow SSLEngine to override Listen-based default (r1537535) 2013-10-31 15:54:58 +00:00
Jan Kaluza
f735ee187e Fix merge conflicts 2013-10-24 12:30:13 +02:00
Jan Kaluza
b3f304619b systemd: send SIGWINCH signal without httpd -k in ExecStop 2013-10-24 12:26:47 +02:00
Joe Orton
aa55b1c6dd load mod_macro by default (#998452)
- add README to conf.modules.d
- mod_proxy_http: add possible fix for threading issues (r1534321)
- core: add fix for truncated output with CGI scripts (r1530793)
Resolves: rhbz#998452
2013-10-21 20:17:46 +01:00
Jan Kaluza
15de99261c require fedora-logos-httpd (#1009162) 2013-10-10 08:55:13 +02:00
Jan Kaluza
0527022d9f revert fix for dumping vhosts twice 2013-07-31 08:06:52 +02:00
Joe Orton
e90db98c1f update to 2.4.6
- mod_ssl: use revised NPN API (r1487772)
2013-07-22 17:39:21 +01:00
Joe Orton
3b5640856d mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
- apxs: mention -p option in manpage
2013-07-22 17:03:38 +01:00
Jan Kaluza
2bc59c9a44 mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
- apxs: mention -p option in manpage
2013-07-11 09:25:13 +02:00
Joe Orton
0fcd609ffe add patch for aarch64 (Dennis Gilmore, #925558)
Resolves: rhbz#925558
2013-07-02 16:43:29 +01:00
Joe Orton
6d8684fc6a remove duplicate apxs man page from httpd-tools 2013-07-01 12:47:28 +01:00
Joe Orton
2c793419b9 remove zombie dbmmanage script 2013-06-17 16:11:50 +01:00
Jan Kaluza
3d06e82ead return 400 Bad Request on malformed Host header 2013-05-31 12:42:42 +02:00
Jan Kaluza
0b19f7b6e1 ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file 2013-05-24 10:24:09 +02:00
Jan Kaluza
46396bf734 htpasswd/htdbm: fix hash generation bug (#956344)
- do not dump vhosts twice in httpd -S output (#928761)
- mod_cache: fix potential crash caused by uninitialized variable (#954109)
2013-05-20 09:54:07 +02:00
Jan Kaluza
e3774a7565 mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured 2013-04-18 08:47:04 +02:00
Jan Kaluza
3f84aef712 forward-port CacheMaxExpire "hard" option 2013-04-18 08:22:20 +02:00
Jan Kaluza
08bb147aa8 mod_ssl: ignore SNI hints unless required by config 2013-04-18 07:50:29 +02:00
Jan Kaluza
9de9bf8dd6 execute systemctl reload as result of apachectl graceful 2013-04-18 07:41:11 +02:00
Jan Kaluza
110beb1317 fix service file to not send SIGTERM after ExecStop (#906321, #912288) 2013-04-16 14:11:13 +02:00
Jan Kaluza
f3b6742d9b protect MIMEMagicFile with IfModule (#893949) 2013-03-27 09:42:23 +01:00
Joe Orton
ef6affde7d really package mod_auth_form in mod_session (#915438)
Resolves: rhbz#915438
2013-02-26 10:14:44 +00:00
Joe Orton
cb59f09544 - fix duplicate ownership of mod_session config (#914901) 2013-02-26 09:46:28 +00:00
Joe Orton
a6b2023764 Merge 2.4.4 changes. 2013-02-26 09:45:09 +00:00
Joe Orton
a3c2292edd update to 2.4.4 2013-02-26 09:37:09 +00:00
Joe Orton
d70345aecd add mod_session subpackage, move mod_auth_form there (#894500)
Resolves: rhbz#894500
2013-02-22 13:59:36 +01:00
Dennis Gilmore
9a2c5cf84b - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-13 19:16:50 -06:00
Joe Orton
55e18b467e add systemd service for htcacheclean 2013-01-08 13:19:12 +00:00
Joe Orton
ce68488a8e drop patch for r1344712 2012-11-13 16:49:42 +00:00
Joe Orton
402cdf6b80 filter mod_*.so auto-provides (thanks to rcollet)
- pull in syslog logging fix from upstream (r1344712)
2012-11-13 16:32:01 +00:00
Joe Orton
a9defba46a rebuild to pick up new apr-util-ldap 2012-10-26 15:05:43 +01:00