Gráfico de commits

  • ff86b5cc67 [autobuild] create m4/ before calling autoreconf stbuehler 2013-11-10 13:59:43 +00:00
  • 4938c94ada fix typo (fixes #2519) stbuehler 2013-11-10 13:49:47 +00:00
  • 1985df2a48 add "packdist.sh" script to build (pre-) releases stbuehler 2013-11-10 13:41:12 +00:00
  • cb02c73860 [autobuild] use autoreconf instead of calling tools manually; add generated files to .gitignore stbuehler 2013-11-10 13:41:09 +00:00
  • 1af871fcef [ssl] fix SNI handling; only use key+cert+verify-client from SNI specific config (fixes #2525, CVE-2013-4508) stbuehler 2013-11-05 15:29:07 +00:00
  • 3ce548c8d0 remove unused members from struct server_socket stbuehler 2013-11-05 15:29:04 +00:00
  • 268c054c40 [mod_extforward] fix compilation without IPv6, (not) using undefined var (fixes #2515, thx mm) stbuehler 2013-10-13 11:34:55 +00:00
  • 9b0d54d7cc [mod_auth] explicitly link ssl for SHA1 (fixes #2517) stbuehler 2013-10-13 11:16:55 +00:00
  • 32199a7bdf - next is 1.4.34 stbuehler 2013-09-27 20:22:12 +00:00
  • a4640b457e [tests] use list for perl exec to skip the sh wrapper lighttpd-1.4.33 stbuehler 2013-09-06 16:44:41 +00:00
  • 3863053b99 [mod_scgi] fix log typos stbuehler 2013-09-06 16:44:39 +00:00
  • 29ff92d9ba [core] set signal handlers before forking child processes in modules/plugins_call_set_defaults (fixes #2502) stbuehler 2013-08-30 15:46:13 +00:00
  • 9cfc080ab7 [core] allow files to be used as document-root (fixes #2475) stbuehler 2013-08-30 15:02:44 +00:00
  • c26b0f9617 [mod_accesslog] add accesslog.syslog-level option (fixes #2480) stbuehler 2013-08-30 14:13:43 +00:00
  • f0e5b84c27 [mod_simple_vhost] fix cache; skip module if simple-vhost.server-root is empty (thx rm for reporting) stbuehler 2013-08-30 13:15:03 +00:00
  • 95dc1ed79e [tests] add mod_simplevhost tests stbuehler 2013-08-30 13:15:01 +00:00
  • 92567b8b8f [core] check whether server.chroot exists stbuehler 2013-08-30 13:14:59 +00:00
  • 916cf7cfc0 [core] remove requirement that default doc-root has to exist, there are reasonable scenarios not requiring static files at all stbuehler 2013-08-30 13:14:57 +00:00
  • f9d58670d5 [auth] new method "extern" to use already present REMOTE_USER (from magnet, ssl, ...) (fixes #2436) stbuehler 2013-08-30 13:14:56 +00:00
  • 2bcf65c285 [mod_auth] some cleanup, only search for matching auth.require path once stbuehler 2013-08-30 13:14:54 +00:00
  • 559b198f86 [auth] put REMOTE_USER into cgi environment, making it accessible to lua via lighty.req_env (fixes #2495) stbuehler 2013-08-30 13:14:52 +00:00
  • 93fd9ea7a4 [ssl] add option ssl.empty-fragments, defaulting to disabled (fixes #2492) stbuehler 2013-08-30 13:14:50 +00:00
  • 6d4d2118c3 [ssl] accept ssl renegotiations if they are not disabled (fixes #2491) stbuehler 2013-08-30 13:14:48 +00:00
  • 292b8d621b move ssl.disable-client-renegotiation and added note that it currently doesnt work inside conditionals Marcus Rückert 2013-08-15 10:33:00 +00:00
  • f8e9462d2f [autoconf] pkg-config: search for lua5.1 and lua-5.1 before lua stbuehler 2013-07-31 20:23:23 +00:00
  • 05858f6cf2 [ssl] Fix $HTTP["scheme"] conditional, could be "http" for ssl connections if the ssl $SERVER["socket"] conditional was nested (fixes #2501) stbuehler 2013-07-31 20:23:21 +00:00
  • 7147c84671 [mod_accesslog] fix log buffer <-> log file mapping stbuehler 2013-07-31 20:23:18 +00:00
  • 25a3f2e826 [network] use constants available at compile time for maximum number of chunks for writev instead of calling sysconf (fixes #2470) stbuehler 2013-06-29 12:46:02 +00:00
  • 6cdb46587c [ssl] use DH only if openssl supports it (fixes #2479) stbuehler 2013-06-29 12:46:00 +00:00
  • 3df2ec9248 [core] recognize more http methods to forward to backends (fixes #2346) stbuehler 2013-06-29 10:53:24 +00:00
  • 9b36534752 [core] return 501 Not Implemented in static file mode for all methods except GET/POST/HEAD/OPTIONS stbuehler 2013-06-29 10:53:22 +00:00
  • f0a2c0f293 [mod_user] add test cases to check handling of encoded ~ as %7E (#2124) stbuehler 2013-06-29 10:07:45 +00:00
  • 12c4a40b28 [mod_userdir] add userdir.active option, "enabled" by default stbuehler 2013-06-29 10:07:43 +00:00
  • 46240fdb7e [mod_auth] fix distcheck, depends on openssl now for {SHA} crypted passwords stbuehler 2013-06-29 09:45:31 +00:00
  • a6b42cc61e [auto* build] simplify autogen.sh, handle automake 1.13 test running (fixes #2490) stbuehler 2013-06-29 09:45:29 +00:00
  • c008fd7ec8 [mod_auth] fix invalid read in digest qop=auth-int handling (fixes #2478) stbuehler 2013-06-29 09:45:27 +00:00
  • 3caf47ecd9 [fdevent-libev] fix type punning warnings stbuehler 2013-06-29 09:45:25 +00:00
  • 680b714543 [cmake] Use TARGET_LINK_LIBRARIES instead of LINK_FLAGS for library dependencies, also add -Wl,--as-needed to extra warnings (fixes #2448) stbuehler 2013-06-29 09:45:23 +00:00
  • 838d771550 added mime type for json files Marcus Rückert 2013-06-25 10:20:15 +00:00
  • a0e93c678b fix undefined stuff found with clang stbuehler 2013-05-15 10:31:09 +00:00
  • 661efa3f37 fix some bugs found with canalyze (fixes #2484, thx Zhenbo Xu) stbuehler 2013-05-15 10:31:07 +00:00
  • ce4bc0c0f7 [mod_auth] fix base64_decode (#2484) stbuehler 2013-05-15 10:31:04 +00:00
  • c26b50d9ad [mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl for SHA1). This doesn't use any salt, md5 with salt is probably better. stbuehler 2013-04-29 13:08:25 +00:00
  • 0342dfef1d [mod_auth] use crypt() on encrypted password instead of extracting salt first (fixes #2483) stbuehler 2013-04-29 13:08:23 +00:00
  • b5da12c008 reject non ASCII characters in HTTP header names stbuehler 2013-03-25 17:22:36 +00:00
  • 25a2d665aa call ERR_clear_error only for ssl connections in CON_STATE_ERROR stbuehler 2013-03-25 17:22:34 +00:00
  • 0e48ef6acb [mod_fastcgi,log] support multi line logging (fixes #2252) stbuehler 2013-03-25 17:22:32 +00:00
  • 543bd249fb fix handling of If-Modified-Since if If-None-Match is present (don't return 412 for date parsing errors); follow current draft for HTTP/1.1, which tells us to ignore If-Modified-Since if we have matching etags. stbuehler 2013-01-22 13:08:21 +00:00
  • 9cd8faa1b6 mod_fastcgi: fix mix up of "mode" => "authorizer" in other fastcgi configs (fixes #2465, thx peex) stbuehler 2013-01-04 13:54:38 +00:00
  • 5aef370a2d - next is 1.4.33 stbuehler 2012-11-21 12:34:49 +00:00
  • 79fed4ec04 remove whitespace at end of header keys lighttpd-1.4.32 stbuehler 2012-11-21 12:01:46 +00:00
  • 6edfc40f93 fix DoS in Connection header value split (reported by Jesse Sipprell, CVE-2012-5533) stbuehler 2012-11-21 12:01:44 +00:00
  • 6200764f05 tests: check different combination of empty values, leading/trailing spaces and commas in the Connection header stbuehler 2012-11-21 12:01:42 +00:00
  • 29b126d5d3 mod_extforward: log address of untrusted proxy with debug.log-request-handling stbuehler 2012-11-15 08:44:10 +00:00
  • 4f4bcdd3c3 tests: make sure mod_proxy doesn't leave running processes (fixes #2435, thx kibi) Cyril Brulebois 2012-11-09 14:23:25 +00:00
  • 4002dce596 detect "x-gzip"/"x-bzip2" as separate encodings, more strict encoding matching (fixes #2443) stbuehler 2012-11-09 14:23:24 +00:00
  • c3a9948c75 network_server_init: fix double free and memleak on error (fixes #2440, thx kyprizel) stbuehler 2012-11-09 14:23:22 +00:00
  • 9b246c5e09 fix :port handling in $HTTP["host"] checks (fixes #2135. thx liming) stbuehler 2012-11-07 14:23:00 +00:00
  • d4d1ff36aa add PATCH method (fixes #2424) stbuehler 2012-11-07 13:53:00 +00:00
  • fcb3f42f11 configure.ac: remove old stuff, add some new to fix warnings in automake 1.12 (fixes #2419, thx blino) stbuehler 2012-11-07 13:07:02 +00:00
  • d09fdd877f Handle ENAMETOOLONG, return 404 Not Found (fixes #2396, thx dererkazo) stbuehler 2012-11-07 13:07:00 +00:00
  • db1d977dea Ignore EPIPE/ECONNRESET after SSL_shutdown (thx patdk-wk for reporting) stbuehler 2012-11-06 17:14:37 +00:00
  • 6c9d257742 Code cleanup with clang/sparse (fixes #2437, thx kibi) stbuehler 2012-08-31 14:11:48 +00:00
  • 6404e3ba09 [lighttpd-angel] Remove unused variable. Cyril Brulebois 2012-08-31 14:11:46 +00:00
  • b6757eaae5 [lemon] Use void* as generic pointer instead of char*. Cyril Brulebois 2012-08-31 14:11:45 +00:00
  • 9c43331382 Use NULL instead of 0 where pointers are expected. Cyril Brulebois 2012-08-31 14:11:43 +00:00
  • b6b6eda292 [md5] Fix non-ANSI function definitions. Cyril Brulebois 2012-08-31 14:11:42 +00:00
  • 0c6a564543 Fix non-ANSI function declarations. Cyril Brulebois 2012-08-31 14:11:41 +00:00
  • f4ba2d4f24 Mark some data as static. Cyril Brulebois 2012-08-31 14:11:39 +00:00
  • b6b694df3d - next is 1.4.32 stbuehler 2012-08-31 14:11:37 +00:00
  • 100ed91f2d Fix --enable-mmap handling in configure.ac lighttpd-1.4.31 stbuehler 2012-05-31 15:08:36 +00:00
  • 172eeebfaa [mod_redirect] Support url.redirect-code option (fixes #2247) stbuehler 2012-05-30 16:58:34 +00:00
  • 1ee35acc6f [mod_extforward] Support ipv6 addresses (fixes #1889) stbuehler 2012-05-18 13:28:00 +00:00
  • 3a13ab8bf2 Detect multiple -f options: show error message instead of assert (fixes #2416) stbuehler 2012-05-18 12:56:30 +00:00
  • bbaef6ab87 fix typo in debug output stbuehler 2012-05-18 12:56:28 +00:00
  • 5677f17442 [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu) stbuehler 2012-04-19 13:02:13 +00:00
  • 7187271fb6 [auth] Add "AUTH_TYPE" environment (for *cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889) stbuehler 2012-04-19 13:02:11 +00:00
  • 61047369c7 [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (fixes #2410) stbuehler 2012-04-19 13:02:09 +00:00
  • ab0fa7d873 Fix access log escaping of " and \\ (fixes #1551) stbuehler 2012-04-19 13:02:08 +00:00
  • 01f9debec3 Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413) stbuehler 2012-04-19 13:02:06 +00:00
  • e697869e34 buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405) stbuehler 2012-04-08 08:02:44 +00:00
  • f4c3a99eea Disable mmap by default (fixes #2391) stbuehler 2012-02-24 18:34:20 +00:00
  • 33f1ec6d28 [mod_compress] fix handling if etags are disabled but cache-dir is set - may lead to double response stbuehler 2012-01-11 21:59:51 +00:00
  • 35875cd515 [ssl] include more headers explicitly stbuehler 2011-12-27 13:45:36 +00:00
  • 6f0752da38 list all network handlers in lighttpd -V (fixes #2376) stbuehler 2011-12-27 12:14:23 +00:00
  • 79bcfab083 Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373) stbuehler 2011-12-25 15:35:01 +00:00
  • d194c09da9 [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI stbuehler 2011-12-23 10:31:57 +00:00
  • 10e5fda664 [doc] add systemd/lighttpd.service to Makefiles, so it ends up in the tarball stbuehler 2011-12-23 10:31:53 +00:00
  • beb6709b6c - next is 1.4.31 stbuehler 2011-12-18 16:35:12 +00:00
  • 13d0440ac5 [doc] add systemd lighttpd.service file lighttpd-1.4.30 stbuehler 2011-12-18 14:36:35 +00:00
  • d83b009d54 [doc] fix ssl config exaple for ssl.cipher-list stbuehler 2011-12-18 12:58:08 +00:00
  • 761bedd7fe [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324) stbuehler 2011-12-18 12:58:04 +00:00
  • 7bdb75fb47 [ssl] fix segfault on "ssl.honor-cipher-order" option while parsing the config stbuehler 2011-12-06 20:03:42 +00:00
  • d964e49874 [ssl] document new options in config example stbuehler 2011-12-06 11:26:51 +00:00
  • 38e3e4a65a [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) stbuehler 2011-12-05 17:08:17 +00:00
  • 456d7f4790 fix compile error when ssl is not enabled stbuehler 2011-11-30 20:57:54 +00:00
  • b748fb890d [core] accept dots in ipv6 addresses in host header (fixes #2359) stbuehler 2011-11-30 20:46:49 +00:00
  • 0f96222e7e [ssl] add option to honor server cipher order, true by default (fixes #2364) stbuehler 2011-11-30 19:59:24 +00:00
  • 8c482a496d remove copy/paste remainings from previous commit stbuehler 2011-11-30 19:59:20 +00:00
  • a94bdd07df [ssl] count renegotiations to prevent client renegotiations stbuehler 2011-11-30 18:40:08 +00:00