Commit Graph

  • f826ee2998 [mod_setenv] warn if setenv.* incl invalid chars gstrauss 2025-06-22 03:20:54 -04:00
  • 64ea817b84 [mod_staticfile] reject pathinfo on static files gstrauss 2025-06-22 02:45:31 -04:00
  • d139e6ad45 [core] merge request trailers into request headers gstrauss 2025-06-21 03:17:06 -04:00
  • 0b9454e894 [core] fix stat_cache inotify for files in rootdir gstrauss 2025-06-20 01:28:44 -04:00
  • f861201238 [core] strict validate request headers end w/ CRLF gstrauss 2025-06-19 14:50:25 -04:00
  • d94e81dab1 [core] validate BACKEND_PROXY headers end w/ CRLF gstrauss 2025-06-19 14:49:00 -04:00
  • 9a447a7f44 [h2] stricter validation of HTTP/2 trailers gstrauss 2025-06-19 00:58:03 -04:00
  • 43ecb481d7 [core] unfold fields in http_header_parse_hoff() gstrauss 2025-06-19 00:53:35 -04:00
  • e166259137 [core] check HTTP/1.x field block fully consumed gstrauss 2025-06-18 17:14:25 -04:00
  • 545bf35116 [core] simplify hoff[] access when hoff[1] == 0 gstrauss 2025-06-18 17:10:06 -04:00
  • 36ee195656 [h2] fill in hoff[] for ":status: XXX\r\n\r\n" gstrauss 2025-06-18 17:00:22 -04:00
  • d594e4b869 [mod_magnet] stricter validation of request/response gstrauss 2025-06-14 01:08:55 -04:00
  • 0bdae879dd [core] stricter validation of backend response gstrauss 2025-06-14 01:07:52 -04:00
  • 56eb0f49a8 [core] http_request_field_check_name() code reuse gstrauss 2025-06-11 01:09:26 -04:00
  • 94d3b25779 [core] http_request_field_check_value() code reuse gstrauss 2025-06-11 01:06:10 -04:00
  • 4d5f76754f [core] http_header_str_contains_token() comment gstrauss 2025-06-09 11:43:00 -04:00
  • c72e9e4af2 [core] remove deprecated Expect-CT from enum gstrauss 2025-06-09 11:41:15 -04:00
  • edd6b5c43d [core] check Transfer-Encoding: chunked from backends gstrauss 2025-06-09 11:26:44 -04:00
  • 90002f4fd8 [core] stricter validate of trailers from backends gstrauss 2025-06-09 05:33:26 -04:00
  • 070317d7a8 [h2] h2_send_headers_hoff() to reduce stack use gstrauss 2025-06-08 22:13:51 -04:00
  • ab959ae6be [core] http_chunk_decode_append_* code reuse gstrauss 2025-06-05 18:27:44 -04:00
  • 8834056651 [mod_nss] more generic pkey read from PEM gstrauss 2025-06-04 16:37:29 -04:00
  • a22ffeea27 [mod_wolfssl] more generic pkey read from PEM gstrauss 2025-06-04 16:37:17 -04:00
  • 167bc6d87c [mod_boringssl] more generic pkey read from PEM gstrauss 2025-06-04 16:22:37 -04:00
  • 9639e85821 [mod_boringssl] wipe tmp_buf used to decode pkey gstrauss 2025-06-04 16:03:55 -04:00
  • f3b0dc6db3 [mod_boringssl] typo gstrauss 2025-06-04 15:09:14 -04:00
  • e54143c628 [mod_boringssl] shared code for parsing PEM files gstrauss 2025-06-04 03:09:23 -04:00
  • 09035352ab [mod_boringssl] skip BIO copy if pkey already DER gstrauss 2025-06-03 01:05:59 -04:00
  • 061d2b53ff [mod_openssl] revert commits; re-support AWS-LC gstrauss 2025-06-01 06:51:24 -04:00
  • efafdaed1e [mod_boringssl] load CRLs into STACK_OF(X509_CRL) gstrauss 2025-06-01 06:42:34 -04:00
  • 1a50a1d66d [ci] add package for SCONS "fullstatic" build gstrauss 2025-06-01 00:45:08 -04:00
  • 8e4a03ba81 [ci] bump actions/cache from 3 to 4 gstrauss 2025-06-01 00:20:01 -04:00
  • f3fb78dc41 [mod_boringssl] remove verify_callback (replaced) gstrauss 2025-06-01 00:19:22 -04:00
  • bae589135a [mod_boringssl] alt callbacks for client cert vfy gstrauss 2025-06-01 00:18:08 -04:00
  • da1ec1072f [mod_boringssl] elide excess time() calls gstrauss 2025-05-31 19:43:58 -04:00
  • 048f046acc [mod_boringssl] more CRYPTO_BUFFER code, less X509 gstrauss 2025-05-29 02:05:28 -04:00
  • 2f27f4d4b4 [mod_boringssl] code reuse gstrauss 2025-05-28 15:13:31 -04:00
  • 4014f26d70 [mod_boringssl] using AWS-LC does not build gstrauss 2025-05-27 23:37:43 -04:00
  • 88eaf707ad [mod_boringssl] use SSL_get0_peer_certificates() gstrauss 2025-05-26 16:34:23 -04:00
  • dbd050fc7e [mod_boringssl] init/enable CRYPTO_BUFFER_POOL gstrauss 2025-05-26 05:34:21 -04:00
  • 4f7bad7148 [mod_boringssl] TLS_with_buffers_method() optim gstrauss 2025-05-25 10:55:12 -04:00
  • 9af69c9ec8 [mod_boringssl] ignore ssl.read-ahead gstrauss 2025-05-24 02:50:16 -04:00
  • 49b2eb696d [mod_openssl] remove code specific to boringssl gstrauss 2025-05-24 00:50:25 -04:00
  • d9a2a89391 [mod_boringssl] remove openssl/libressl code gstrauss 2025-05-24 00:49:15 -04:00
  • 3ce0bc38a3 [mod_boringssl] rename plugin init func gstrauss 2025-05-23 02:57:58 -04:00
  • c359f5ef5b [build] build support for mod_boringssl gstrauss 2025-05-23 02:16:44 -04:00
  • 2550e65083 [mod_boringssl] cp mod_openssl.c mod_boringssl.c gstrauss 2025-05-23 02:15:12 -04:00
  • df091e3e75 [mod_openssl] use BoringSSL APIs w/ SSL_CREDENTIAL gstrauss 2025-05-22 22:38:03 -04:00
  • daeda03031 [ci] use actions/cache@v3 to cache Cygwin install gstrauss 2025-05-19 00:14:21 -04:00
  • 5ac7eecb42 [mod_openssl] AWS-LC limitations/compatibility (#3282) gstrauss 2025-05-17 00:57:35 -04:00
  • c010afe1d6 [mod_openssl] avoid BoringSSL/AWS-LC compiler warn gstrauss 2025-05-17 00:55:22 -04:00
  • 0e258b9c85 [ci] set SHELL=/bin/sh for builds on alpine gstrauss 2025-05-11 17:03:39 -04:00
  • 45918e7a2a [mod_ssi] set tmp file length if ssi exec fails gstrauss 2025-05-11 16:59:43 -04:00
  • 5f5983666c [build] check for C23 memset_explicit() gstrauss 2025-05-11 13:09:24 -04:00
  • 85e4a9937d [mod_webdav] log trace for EACCES on PUT gstrauss 2025-05-06 23:47:41 -04:00
  • 351971da02 [core] h1_chunked_400_bad_request() gstrauss 2025-05-06 18:14:17 -04:00
  • 37093ccf60 [core] http_chunk_decode_append_error() gstrauss 2025-05-06 18:13:44 -04:00
  • 464eb65e2f [tests] reject stray \r or \n in chunked headers gstrauss 2025-05-10 21:52:02 -04:00
  • 71e7c299ae [core] reject stray \r in chunked headers gstrauss 2025-05-06 17:30:09 -04:00
  • ac91a6b19f [doc] systemd lighttpd.service SystemCallFilter gstrauss 2025-04-21 01:00:15 -04:00
  • 2a6975ab70 [autotools] LIGHTTPD_STATIC in config.h if static build gstrauss 2025-04-19 02:54:57 -04:00
  • 3d550097d2 [TLS] 0-init plugin_ssl_ctx (fixes #3281) gstrauss 2025-04-17 21:39:39 -04:00
  • 5ff8bb3e3f workaround unsupported PR_CAP_AMBIENT_CLEAR_ALL on Cloud Run Martin Nowak 2025-04-16 17:01:56 +02:00
  • e7f50ad8d5 [multiple] stricter string init without trail '\0' gstrauss 2025-04-16 02:01:37 -04:00
  • 88595bd4ea [build] remove references to libev; no longer used gstrauss 2025-04-09 23:06:26 -04:00
  • 9e67497931 [core] adjust malloc_top_pad after srv->srvconf.max_conns gstrauss 2025-04-09 07:42:36 -04:00
  • 35a5d91454 [doc] refresh INSTALL gstrauss 2025-04-07 04:38:34 -04:00
  • 4b8282ef26 [doc] move comments in systemd lighttpd.service gstrauss 2025-04-06 03:59:01 -04:00
  • 5e30bbe9a8 - next is 1.4.80 gstrauss 2025-04-04 01:32:32 -04:00
  • 59797af1f7 [doc] NEWS lighttpd-1.4.79 gstrauss 2025-04-04 01:28:20 -04:00
  • 530edb0407 [ci] fix meson build execution selection gstrauss 2025-04-03 20:09:02 -04:00
  • 6d9cd8b06d [core] default listen() backlog to SOMAXCONN gstrauss 2025-04-03 16:35:25 -04:00
  • a49af04d59 [doc] systemd lighttpd*.socket activation examples gstrauss 2025-04-03 14:36:02 -04:00
  • 9de9a660d4 [doc] systemd lighttpd.service hardening addition gstrauss 2025-04-03 14:36:48 -04:00
  • 53b13667f3 [doc] move TLS config to separate file tls.conf gstrauss 2025-04-02 14:17:44 -04:00
  • cfb332b2cf [doc] systemd lighttpd.service hardening gstrauss 2025-04-02 05:21:49 -04:00
  • 3591836da9 [core] retry pidfile open on Linux gstrauss 2025-04-02 05:13:58 -04:00
  • af8fe1bfe5 [core] rename remove_pid_file() -> server_pid_file_remove() gstrauss 2025-04-02 04:58:26 -04:00
  • e06c8b5a0a [core] clear Linux ambient capabilities, if any gstrauss 2025-04-02 02:48:33 -04:00
  • 2c982c192a [core] set server.max-fds = 4096 if not specified gstrauss 2025-04-01 22:59:02 -04:00
  • be24e01b0b [ci] Cygwin remove redundant call to setup.exe gstrauss 2025-03-27 01:20:22 -04:00
  • 1ed5a31cd1 [ci] Cygwin prefer D:\ drive gstrauss 2025-03-27 01:05:41 -04:00
  • 73626ffee5 [ci] Cygwin Invoke-WebRequest -MaximumRetryCount 3 gstrauss 2025-03-26 08:07:17 -04:00
  • 069971fb21 [TLS] issue trace if unable to check/refresh cert gstrauss 2025-03-26 00:28:05 -04:00
  • 9e60222c46 [mod_openssl] spelling in comment gstrauss 2025-03-25 17:01:05 -04:00
  • cd4460f6b3 [mod_openssl] revert SSL_CTX default cert assign gstrauss 2025-03-25 16:05:19 -04:00
  • 6eb07afedd [autotools] spelling Couldn't => Could not gstrauss 2025-03-23 00:24:39 -04:00
  • 7f48bdc903 [ci] MSYS detection kludge in tests/LightyTest.pm gstrauss 2025-03-22 21:56:27 -04:00
  • 7cdb3fddfa [ci] update deps pkg names for lighttpd on Cygwin gstrauss 2025-03-22 21:41:44 -04:00
  • 406187a7d4 - next is 1.4.79 gstrauss 2025-03-22 19:27:55 -04:00
  • ebcfc929ac [doc] NEWS lighttpd-1.4.78 gstrauss 2025-03-17 00:29:46 -04:00
  • ad913e3c79 [ci] ci-build.sh adjust cov-int/ dir for coverity gstrauss 2025-03-22 15:39:39 -04:00
  • 4bc6295c17 [ci] use meson build with cov-build for coverity gstrauss 2025-03-22 15:28:09 -04:00
  • 6216dfaf32 [meson] set default buildtype=debugoptimized gstrauss 2025-03-21 10:36:09 -04:00
  • 1e141cf2ce [core] yield after HTTP/1.x response end gstrauss 2025-03-17 00:07:42 -04:00
  • 4e67264255 [mod_dirlisting] fix JS date sorting (fixes #3279) gstrauss 2025-03-08 12:12:38 -05:00
  • 230a4f53a4 [mod_dirlisting] Swap A(scending) and D(escending) values (A=0, D=1) Phaze-III 2025-02-16 17:57:12 +01:00
  • 8803fba904 [mod_dirlisting] Fix off-by-one error in date conversion for sorting on mtime Phaze-III 2025-02-16 17:55:05 +01:00
  • d83fead588 [multiple] check EAGAIN and EWOULDBLOCK, if diff gstrauss 2025-03-03 08:09:08 -05:00
  • 4ce9a483ca [mod_openssl] reload CRLs for openssl >= 1.1.0 gstrauss 2025-03-02 13:09:38 -05:00