Stephen Gallagher
d614e8aa11
Require sscg 2.2.0 for creating service and CA certificates together
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-21 14:55:16 -04:00
Jeroen van Meeuwen (Ergo Project)
fd03d5ee37
Address CVE-2017-9798 by applying upstream patch
...
Reference RHBZ #1490344
2017-09-21 19:32:53 +02:00
Jeroen van Meeuwen (Ergo Project)
10a87792e5
Address CVE-2017-9798 by applying upstream patch
...
Reference RHBZ #1490344
2017-09-21 19:28:15 +02:00
Joe Orton
6a77761740
use sscg defaults; append CA cert to generated cert
...
document httpd-init.service in httpd-init.service(8)
2017-09-21 16:41:20 +01:00
Stephen Gallagher
180ad320f4
Generate SSL keys on service start
...
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:
* Waiting until the first boot will help avoid some issues with
limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
limited-trust CA alongside it that can be safely imported by a
client.
For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-09-20 15:00:20 -04:00
Joe Orton
870b71c4f0
httpd.service(5) update: show how to ungracefully stop/restart
2017-09-19 12:46:35 +01:00
Joe Orton
d5e6805c26
Update links to Fedora home page.
2017-09-19 12:36:38 +01:00
Joe Orton
e2185159ed
move httpd.service.d, httpd.socket.d dirs to -filesystem
2017-09-19 10:08:07 +01:00
Joe Orton
a7a88382f7
move httpd.service.d, httpd.socket.d dirs to -filesystem
2017-09-19 10:02:32 +01:00
Joe Orton
b022e3b523
add new content-length filter (upstream PR 61222)
2017-09-13 14:21:17 +01:00
Joe Orton
ddabcffa42
Switch to https:// URLs.
2017-08-04 13:19:55 +01:00
Fedora Release Engineering
da66bed0cf
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-02 23:33:12 +00:00
Fedora Release Engineering
bd989fa784
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-26 12:53:42 +00:00
Joe Orton
adcaa34289
update mod_systemd (r1802251)
2017-07-18 09:25:14 +01:00
Joe Orton
e9d2120fbf
switch to event by default for Fedora 27 and later ( #1471708 )
...
Resolves: rhbz#1471708
2017-07-17 11:39:57 +01:00
Joe Orton
3150aa97f5
Shorter text in httpd.service.
2017-07-14 12:57:43 +01:00
Joe Orton
6de83362da
Fix grammar.
2017-07-14 12:57:43 +01:00
Petr Písař
70d2b4ee4f
perl dependency renamed to perl-interpreter < https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules >
2017-07-12 14:54:15 +02:00
Luboš Uhliarik
06cde88ecf
Resolves : #1469959 - httpd update cleaned out /etc/sysconfig
2017-07-12 11:42:25 +02:00
Luboš Uhliarik
c6fd35316d
new version 2.4.27
2017-07-10 15:25:44 +02:00
Joe Orton
1205ddb60b
mod_proxy_fcgi: fix further regressions (PR 61202)
2017-06-30 17:01:34 +01:00
Luboš Uhliarik
fd6452a0f2
new version 2.4.26
2017-06-19 11:48:36 +02:00
Joe Orton
fce414a1c1
move unit man pages to section 8, add as Documentation= in units
2017-06-05 16:55:45 +01:00
Joe Orton
6fd8793087
Updated httpd.service man page text.
2017-05-26 16:51:56 +01:00
Joe Orton
ae962f359b
License under AL2.
2017-05-19 11:47:21 +01:00
Joe Orton
bbb988f0f4
add httpd.service.xml to Sources.
2017-05-19 11:10:34 +01:00
Joe Orton
710b63c5e0
add httpd.service(5) and httpd.socket(5) man pages
2017-05-19 11:04:53 +01:00
Joe Orton
dbcbdf8a73
require mod_http2, now packaged separately
2017-05-16 10:00:54 +01:00
Joe Orton
55508e1530
Tweak wording.
2017-04-18 08:59:42 +01:00
Luboš Uhliarik
ee11bdee06
Resolves : #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
...
patch to set worker secret passed to tomcat
2017-03-30 16:20:00 +02:00
Luboš Uhliarik
c58fda3be9
Resolves : #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
...
patch to set worker secret passed to tomcat
2017-03-30 15:32:35 +02:00
Luboš Uhliarik
c79ba20a8d
Resolves : #1434916 - httpd.service: Failed with result timeout
2017-03-28 13:11:07 +02:00
Joe Orton
59afc1533e
link only httpd, not support/* against -lselinux -lsystemd
2017-03-24 17:05:26 +00:00
Fedora Release Engineering
65743a6b6a
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-10 12:45:49 +00:00
Joe Orton
33e6dce94a
mod_watchdog: restrict thread lifetime ( #1410883 )
...
Resolves: rhbz#1410883
2017-01-20 20:16:04 +00:00
Luboš Uhliarik
4e2c6125ac
Resolves : #1358875 - require nghttp2 >= 1.5.0
2016-12-22 16:58:29 +01:00
Luboš Uhliarik
ad0d0a1ae0
new version 2.4.25
2016-12-22 16:05:36 +01:00
Luboš Uhliarik
92e639b8c0
Resolves : #1401530 - CVE-2016-8740 httpd: Incomplete handling of
...
LimitRequestFields directive in mod_http2
2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11
fix build with OpenSSL 1.1 ( #1392900 )
...
- fix typos in ssl.conf (josef randinger, #1379407 )
Resolves: rhbz#1392900
Resolves: rhbz#1379407
2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a
synch ssl.conf with upstream
2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c
no longer package /etc/sysconfig/httpd
2016-11-02 11:32:07 +00:00
Joe Orton
60e3fdb529
- sync with upstream.
2016-11-02 11:29:45 +00:00
Joe Orton
4a0435cd7b
add security fix for CVE-2016-5387
2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e
load mod_watchdog by default ( #1353582 )
...
Resolves: rhbz#1325883
Resolves: rhbz#1353582
2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15
restore build of mod_proxy_fdpass ( #1325883 )
...
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
2016-07-07 15:27:42 +01:00
Joe Orton
8d393c50a5
Remove .18.
2016-07-07 15:27:27 +01:00
Joe Orton
a67a8d7392
update to 2.4.23 ( #1325883 , #1353203 )
...
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00
Petr Písař
aaf7efcca6
Mandatory Perl build-requires added < https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl >
2016-06-24 09:44:53 +02:00
Joe Orton
37b82598ea
have "apachectl graceful" start httpd if not running, per man page
2016-04-07 14:07:25 +01:00
Joe Orton
a4064261ea
Fix (harmless) typo.
2016-04-06 11:39:40 +01:00