v1.2.103.d021376

Cherokee Web Server v1.2.103.d021376

December 4th, 2013

commit d021376
Merge: 9ba9922 88f1c71
Author: Stefan de Konink stefan@konink.de
Date: Wed Dec 4 09:58:38 2013 -0800

Merge pull request #1035 from BeQ/fix_admin_osx_10.9

Fix issue #1034 thanks for fixing this one guys!

commit 88f1c71
Author: Lev Bartashevsky lev@globalit.no
Date: Wed Dec 4 19:35:08 2013 +0200

fix issue #1034

commit 9ba9922
Merge: 61a7e63 40c66ca
Author: Stefan de Konink stefan@konink.de
Date: Thu Nov 21 01:47:33 2013 +0100

Merge branch 'feature_ssl_client_cert_tolerate' of github.com:smunaut/webserver into smunaut-feature_ssl_client_cert_tolerate

Conflicts:
    admin/PageVServer.py

commit 61a7e63
Merge: d91c9c1 884c686
Author: Stefan de Konink stefan@konink.de
Date: Wed Nov 20 16:33:12 2013 -0800

Merge pull request #1023 from smunaut/feature_dh_length

ssl: Allow to specify a fixed length

commit 40c66ca
Author: Sylvain Munaut tnt@246tNt.com
Date: Mon Nov 18 15:28:50 2013 +0100

ssl: Add a 'tolerate' option for client certificate verification

This option is very similar to accept with the exception that if the
certificate that's sent by the client can't be validated, the SSL
handshake will not be abruptly terminate but it will continue.

The application that use the client certificate should in any case call
the SSL_get_verify_status and this will still return that the validation
failed and the cert be ignored.

This is mainly useful because Apple, in it's great wisdom, decided to
make Safari send just about any client cert, even those not matching at
all the CA list sent by the server ... The only way to use client cert
with Safari is then to just accept any client cert and just ignore it
if it's invalid rather than preventing the SSL negotiation.

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>

commit d91c9c1
Merge: 4119ec4 bb2ea41
Author: Stefan de Konink stefan@konink.de
Date: Tue Nov 5 02:23:23 2013 -0800

Merge pull request #1028 from smunaut/fix_ecdh_openssl_0.9.8

ssl: OpenSSL 0.9.8 can support ECDH as well

commit bb2ea41
Author: Sylvain Munaut tnt@246tNt.com
Date: Tue Nov 5 11:17:25 2013 +0100

ssl: OpenSSL 0.9.8 can support ECDH as well

It's true that ECDH ciphers are not in the default cipher suites in this
release, but it fully supports ECDH and if you explicitely ask for theses
cipher, it will work just fine.

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>

commit 884c686
Author: Sylvain Munaut tnt@246tNt.com
Date: Thu Oct 31 15:24:32 2013 +0100

ssl: Allow to specify a fixed length

By default openssl will only get 512 or 1024 (depending only of the
"export" setting). But 1024 is a bit short nowadays and 2048 is
recommended. It does break compatibility in very rare case, so it's
left by default to auto. (there is no negotiation, the client has to
support whatever the server sends)

Signed-off-by: Sylvain Munaut <tnt@246tNt.com>

commit 4119ec4
Author: Stefan de Konink stefan@konink.de
Date: Thu Oct 24 23:55:25 2013 +0200

We did not check if a selected wildcard match actually had any wildcard rule.
We do so now, next to that the redirection between any vserver check now forces an explicit
redirection which forces the Error box to be gone when pressing solve.

Thanks a million for @manykg who reported this issue #1017, commiting directly to master.

commit 7fa6c91
Merge: 6355959 843ae4b
Author: Stefan de Konink stefan@konink.de
Date: Tue Aug 13 01:00:58 2013 -0700

Merge pull request #1005 from cherokee/fix-for-missing-closing-delimiter-in-asciidoc-file

Fix for missing closing delimiter in asciidoc file. Thanks @mdavid for this fix!

commit 843ae4b
Author: M. David Peterson m.david@3rdandurban.com
Date: Tue Aug 13 07:31:38 2013 +0000

This was autogenerated from automake --add-missing

commit 5c80c9c
Author: M. David Peterson m.david@3rdandurban.com
Date: Tue Aug 13 07:30:42 2013 +0000

missing closing asciidoc delimeter

commit aea96e7
Author: M. David Peterson m.david@3rdandurban.com
Date: Tue Aug 13 07:30:07 2013 +0000

Missing from inclusion due to build error related to missing closing delimeter in asciidoc file

commit 6355959
Author: Stefan de Konink stefan@konink.de
Date: Sun Aug 11 12:42:44 2013 +0200

Add the extra QA-tests we have in the folder for quite some while, we already pass them.

commit 7493a85
Merge: 291a521 cb0e73b
Author: Stefan de Konink stefan@konink.de
Date: Sun Aug 11 00:29:24 2013 +0200

Merge branch 'master' of github.com:cherokee/webserver

commit 291a521
Author: Stefan de Konink stefan@konink.de
Date: Sun Aug 11 00:09:25 2013 +0200

We are in 2013 for quite some time now.

commit cb0e73b
Merge: 67367f2 dc73ebf
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Fri Aug 9 09:29:16 2013 -0700

Merge pull request #1000 from cherokee/add-remote-debugging

Add Remote Debugging

commit dc73ebf
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Fri Aug 9 18:28:29 2013 +0200

Add Remote Debugging

Adding lines for remote debugging. Must be enabled by uncommenting two lines.

commit 67367f2
Merge: 1a0e4ba a02ced1
Author: Stefan de Konink stefan@konink.de
Date: Fri Aug 9 13:27:38 2013 +0200

Merge branch 'master' of github.com:cherokee/webserver

commit 1a0e4ba
Author: Stefan de Konink stefan@konink.de
Date: Fri Aug 9 13:23:13 2013 +0200

Fix #998

We try a last gracefull check of php-cgi, without setting the variable. That solves the program is later invoked to check for CGI.

commit a02ced1
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Fri Aug 9 11:29:55 2013 +0200

Update developers.py

commit 1348e27
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Tue Aug 6 20:55:54 2013 +0200

Hotfixing #53 (cleanup)

Forgot to remove some lines with the removal of the validation.

commit d1cc949
Merge: abdc705 17d37fa
Author: Stefan de Konink stefan@konink.de
Date: Tue Aug 6 11:44:54 2013 -0700

Merge pull request #995 from cherokee/fix_hotlinking

Potential fix for Issue #709

commit abdc705
Merge: 7341b79 dd298e4
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Tue Aug 6 11:20:04 2013 -0700

Merge pull request #994 from cherokee/fix-53

Fix #53

commit dd298e4
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Tue Aug 6 20:15:19 2013 +0200

Fix #53

The form should be validated when it is saved, rather than when changing the interpreter type.

Validation is being removed completely. Feel free to add the mentions validation.

commit 7341b79
Merge: ca85bde b49b7f7
Author: Stefan de Konink stefan@konink.de
Date: Sun Aug 4 02:45:04 2013 -0700

Merge pull request #989 from Gerjo/master

Added missing LSB tags and overrides. Thanks @Gerjo for the enhancement.

commit b49b7f7
Author: Gerard gerjoo@gmail.com
Date: Sun Aug 4 05:38:03 2013 -0400

Added missing LSB tags and overrides.

commit ca85bde
Merge: ea55caa 48dd429
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Fri Aug 2 17:45:52 2013 -0700

Merge pull request #988 from Borkason/fix-80

fix #80

commit 48dd429
Author: Birk Borkason daniel.niccoli@gmail.com
Date: Sat Aug 3 02:43:53 2013 +0200

fix #80

Missing import statement

commit ea55caa
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 22:43:41 2013 +0200

Fixes #813

Dear IE10 users, my sisters netbook and the Internet Explorer Developer Toolbar salute you.

commit f29a690
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 21:20:54 2013 +0200

Fixes #975

When virtualservers have a longer than SSL_MAX_SSL_SESSION_ID_LENGTH we limit the session_id length to that value, instead of the full virualserver name.

commit 6658351
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 17:49:00 2013 +0200

Fixes bug #587 - strdup crashes on NULL, our validators user/password buffers remain NULL given they are not provided.

commit d5f3517
Merge: 4c1b898 760fe7c
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 13:46:40 2013 +0200

Merge branch 'master' of github.com:cherokee/webserver

commit 4c1b898
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 13:44:54 2013 +0200

It is about time to require autoconf 2.68.

commit 760fe7c
Merge: 16116e6 a88c564
Author: Stefan de Konink stefan@konink.de
Date: Sat Jul 27 03:07:40 2013 -0700

Merge pull request #987 from alanswanson/master

Enable ECDH cipher support. Thanks @alanswanson for this patch and fixing #984 !!

commit a88c564
Author: Alan Swanson swanson@ukfsn.org
Date: Thu Jul 25 19:05:17 2013 +0100

Enable ECDH cipher support
With OpenSSL 1.0.0, default key parameter...