Changelog for lighttpd2-2.0.0~snap_20170729_134019_gbc6b25-85.28.i586.rpm :

* Sat Jul 29 2017 jenkinsAATTlighttpd.net- update to gbc6b25 + [mod_openssl] fix crash with libressl or openssl < 1.1 + [mod_openssl] fix C90 mixed declarations and code warning + [core] use readdir instead of readdir_r
* Wed Jul 26 2017 jenkinsAATTlighttpd.net- update to g8c68b1 + [cmake] handle include directories separately + [config] expect exactly one comma between list entries + use _DEFAULT_SOURCE instead of _BSD_SOURCE + [parsers] fix unused variable warnings + [mod_gnutls] use only pin callback, don\'t pass pin as parameter + [mod_gnutls] add basic OCSP response stapling support + [core] disable strict-alias warnings for libev wrappers + [mod_gnutls] use gnutls_pem_base64_decode_alloc instead of gnutls_pem_base64_decode2 (compat name for old versions) + [mod_gnutls/docs] ocsptool is the ocsp tool + [doc] decode HTML entities in code/markdown/textile blocks + [mod_gnutls/doc] more details which certificates are needed for OCSP + [mod_gnutls] workaround gnutls API breakage, and prepare for future ones + Add NO_TLSv1_1 and higher options + [mod_openssl/doc] Update links to man pages + [mod_openssl] fix warnings and compile breaks with openssl 1.1.0 + [mimetypes.conf] add text/markdown to utf-8 list, regenerate mimetypes.conf + [plugin_core] support patterns in alias target + [doc build] remove markdown support + handle ENAMETOOLONG in various places + [plugin_core] fix segfault in fetch.files_static init + [mod_gnutls] support OCSP responses in sni backends
* Fri Dec 18 2015 jenkinsAATTlighttpd.net- update to g3a4698 + [pattern] fix all calls of li_pattern_eval to provide latest regex match
* Thu Aug 13 2015 jenkinsAATTlighttpd.net- update to gd2c6a2 + [core] close out stream nicely on regular shutdown (fixes openssl session problem) + [mod_openssl] various fixes, fix error handling + Add systemd unit file + track event \"names\" for debugging + [mod_debug] debug events + [lua] handle filter->vr == NULL in lua filters, handle filter->in == NULL in xsendfile + mimetypes.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf + [mod_debug] show more details for events + [common] fix out-of-bounds read in li_sockaddr_to_string + [automake] add missing files to dist tar + [common] format IPv6 addresses with port as [addr]:port (added the square brackets) + [request parser] adapt whitespace removal from response parser, fixes bug removing last character if CR was missing + [streams] improve stream handling, hopefully fixes bug with lingering backend connections + [debug] provide more unique event names for waitqueues + ignore CMakeLists.txt.user (qtcreator) + [ssl] don\'t exit early when there is no data to write; otherwise EOS stream handling is not triggered + use g_assert instead of g_assert_true for older glib2 versions
* Mon Aug 10 2015 stbuehlerAATTweb.de- spec file improvements- ignore lintian errors about missing doc/
*.js source files (only minified)
* Mon Apr 27 2015 mrueckertAATTsuse.de- add systemd service file
* Fri Nov 21 2014 jenkinsAATTlighttpd.net- update to g93d04a + [doc] clarify \"physical.exists\" semantic + [mod_gnutls] when an alert is received print its actual value + [mod_gnutls] allow pemfile to accept a key-value list of a certificate and key + [doc] improve section about DH/DSA parameters in mod_gnutls + [doc] mod_gnutls: add comment that reusing keys in DH is not recommended anyway + [mod_gnutls] improve alert handling + [mod_openssl] allow all authentication methods in default cipher string + [tests] use gnutls certtool to create test ca
* Sun Aug 24 2014 buildbotAATTlighttpd.net- update to g912b46 + [mod_gnutls] remove broken include + [docs] some small fixes + [docs] fix links, add index page, add small introduction, add lua config / api + [docs] fix xml error + [docs] fix typos, add some details, add rewrite_raw action + [core] expose request.raw_path as condition variable + [mod_rewrite] rewrite_raw result gets decoded + [tests] small cleanups: use req_header.overwrite, no_docroot option + [mod_proxy] use raw_path instead of re-encoded path + [docs] fix typo + [docs] generate link back to index in sub pages + [mox_rewrite,mod_proxy,docs] fix request.raw_path handling (includes query-string) + [autobuild] fix configure to search for openssl in the specified paths
* Thu May 22 2014 buildbotAATTlighttpd.net- update to g47c1cf + [doc] add script to generate mimetypes.conf + [autobuild] fix duplicate config.h install and remove config.h from dist tarball + [mod_openssl] wrap all options in #ifdef + [mod_openssl] fix default cipher string + [angel] check setgid/setuid/... return values and abort on failure + [angel] don\'t load angel core plugin for shut down, so the core plugin doesn\'t respawn a worker with default settings + [tests] add a 0.2 second sleep before testing memcache lookup after store + [value] move value functions that depend on angel / main implementations into separate file, included in the other implementations + [tests] increase timeout for https requests
* Tue Apr 15 2014 buildbotAATTlighttpd.net- update to gb6ee92 + [backends: scgi,proxy,fastcgi] update
*context immediately after
*backend_get + [angel] rewrite parser, changing syntax (similar to main config) + [common] remove hash value type (use key/value lists instead) + [angel] rewrite config handling, rename items, document it + [angel] merge allow_listen_
* items + [ip-parser] allow [ipv6]/net:port and [ipv6/net]:port for IPv6 address + network + port + [core] convert all assert() to LI_FORCE_ASSERT(), and support writing backtraces on fatal errors with libunwind + [doc] always show angel doc in toc + [profile] add missing utils.h include + [autotools] support libunwind without pkg-config + [liValue] fix dereference after NULL check + [idlist] fix bad shift operations + [liValue] fix missing break in switch statement + [angel] fix memory leak on error in angel config parser + [fastcgi] assert pointer is not NULL before dereference before NULL check in a loop + assert many previously unchecked return values, handle some explicitly, remove FD_CLOEXEC in worker - mustn\'t fork + [actions] fix dereference before null check + [angel] fix missing break in switch statement in config parser for casting string to int + fix wrong operator to check for set bit in events + [simple-stream] fix double assignment + fix some socket address handlings - limit unix socket path names to struct size + [config parser] copy fixes from angel config parser + [angel_fake] use li_sockaddr_from_string in li_angel_fake_listen
* Tue Mar 18 2014 buildbotAATTlighttpd.net- update to gb5edda + [core] support chunked uploads + [stream-http-response] support chunk encoded responses + [core] handle Connection: Upgrade + [core] fix connection timeout handling + [angel,tests] implement and use \"one-shot\" option to not restart crashed workers + [core] add option to disable buffering large request bodies on disk - forward them to backend directly instead + [mod_gnutls] fix beast workaround (force RC4 on TLS1.0 and SSL3.0) + [mod_gnutls] session ticket support + [mod_gnutls] support DH parameters, use pregenerated 3247 bit parameter by default + [mod_gnutls] add memory session database + [mod_gnutls] actually use dh params loaded from file + [mod_gnutls] use 4096-bit DH params by default + [core] implement generic \"fetch\" api + [core] add global named fetch pool; all backends have to return strings. implement a simple backend. + [mod_gnutls] add SNI + fix bugs and warnings reported by clang + [mod_gnutls] fix compile error when compiling without SNI + Fix autoconf libidn detection + [mod_gnutls] add sni-fallback-pemfile option + automake: force serial-tests runs, fix USE_SNI handling + [automake] workaround automake serial-tests option + add ssl_sni_parser.h to make dist + [mod_gnutls] send alerts instead of aborting, allow safe renegotiations + [mod_gnutls,fetch api] associate sni certs with dh params, fix fetch bug + [ssl_sni_parser] debugging, fix parser bug (wrong shift) + [gnutls filter] fix cork handling + define _XOPEN_SOURCE 600 for _POSIX_C_SOURCE 200112L, which should fix IPv6/sockaddr_in6 on BSD + include lighttpd/settings.h instead of base.h in common source + [mod_gnutls] fix segfault when no sni backend was configured + [throttle] fix connection throttling refill calculation + [tests] Fix uploadcheck for BSD (providing sha1 instead of sha1sum) + [tests] add /sbin and others to PATH for sha1 on FreeBSD + [tests] cgi: check stderr and exit error with delayed upload + [core] cleanup settings.h - openssl not needed in global headers + [core] only use feature test macros on linux + [fetch] use signed integers for liFetchDatabase refcount + [fastcgi] add debug prints before all fastcgi_reset calls, don\'t reset connection on stderr data if connection was already closed + [tests] fix path issues + [doc] fix wiki link to the redirect target + [plugin_core] docroot: show stat() errors for all entries when debug log is enabled + [events] use smaller repeat value to trigger timer \"again\" (100ms was clearly too large, 0.1ms should do) + [gnutls] fix cleanup order (use-after-free) + [core] add req_header.
* actions + [tests/mod_deflate] test removing Accept-Encoding header + [mod_openssl] enable DH and ECDH + [mod_openssl] disable SSL3 by default + [doc] update example mime-types + [mod_gnutls] parse client hello for sni and protocol version + [core] check for disabled keep-alive early to send matching headers + [autobuild] fix renamed header ssl_client_hello_parser.h + [mod_gnutls] fix build with SNI disabled + [mod_gnutls] fix endless loop in client hello parser + [core] add li_value_to_key_value_list: convert value hash to key-value list + [mod_gnutls] use key-value list for parameters, allows duplicate listen/pemfile parameters + [mod_gnutls] remove ca-file option; only needed for not yet supported client cert authentication. add docs in the source + [mod_openssl] support key-value list for multiple listen parameters + [mod_openssl] error out on unknown parameters + [plugin_core] index action should do less stat() calls now, especially for multiple names + [waf] remove waf for now, doesn\'t work anymore + [autobuild] autogen.sh remove generated files before creating new ones + [mod_throttle] fix refcount and double free + [core] add li_value_new_hashtable to create a GString -> liValue hashtable + [mod_vhost] convert to handling key-value list; make vhost.map_regex predictable + [plugin_core] log/setup log: convert to handling key-value list + [mod_auth] convert to handling key-value list + [core] handle NULL values in li_value_extract
* functions + [tests] run config test with valgrind too if enabled + [mod_lua] convert to handling key-value list + [core] li_value_to_string: use => for separating hash keys and values like the config + [mod_deflate] convert to handling key-value list + [mod_memcached] convert to handling key-value list + [tests] add a stub python memcached server, add mod_memcached tests + [tests] put scgi application into separate file + [doc] update config examples in doc/
*.lua to match current syntax + [tests] test auth.require_user from doc/core.lua + [lua] add lighty.error -> lighty.print alias + [tests] only use cache.disk.etag if request was handled + [lua] fix usage of lua_typename + [lua] push list values with __index metamethod to lookup string/nil keys in key-value lists + [mod_vhost] fix config mem leak + [log] fix small mem leak + [tests] add --valgrind-leak option + [core] handle differences between options/actions/setups in plugin.c + [misc] use less C99 features + [core/modules] refactor config handling + [core] rewrite config parser + [lua] fix key-value list handling and export of lists + [tests] test secdownload.lua and the lua key-value list lookup + [tests] cleanup to use new config style + replace g_hash_table_contains with g_hash_table_lookup + [config] fix bugs in new config handling + [config] fix mem leaks in config parser + [config] fix bug in config parser (failed parsing names followed by a comma) + [plugin_core] fix alias action + [mod_redirect] fix segfault in config parsing + [config] fix more bugs in new config handling + [mod_gnutls] announce http/1.1 in ALPN + [mod_gnutls] disable protect-against-beast by default now - considered mitigated on client side + [plugin_core] fix some setup parameter handling + [config] setup only allowed in master config context + [doc] update to new config syntax + [ŧests] more tests, improve handling + [config] fix cast(string) + [tests] add own test CA and test gnutls and openssl basic functionality + [config] fix missing reference (segfault on shutdown) + [autobuild] use autoreconf instead of calling tools manually; update .gitignore + [config] allow setting vars in setup block + [mod_proxy] send Content-Length for all non GET/HEAD requests + restructure docs + [doc] document core config and modules in tree + [tests] include test ca in dist + remove old test file + [autotools] include cmake files in dist + [autotools] remove generated ragel parsers from dist + [dist] add script to show differences between git and dist + [mod_status] use PACKAGE_BUILD_DATE instead of __DATE__/__TIME__ + [core] make PACKAGE_BUILD_DATE an embeddable string constant + [core] add PACKAGE_NO_BUILD_DATE define to disable PACKAGE_BUILD_DATE + [mod_gnutls] don\'t abort if \'NORMAL:-CIPHER-ALL:+ARCFOUR-128\' is not recognized, use \'NORMAL\' instead + [autotools] search math lib m for fmod + [common] refactor liValue to share most of the code + [config] fix conditional parsing + [plugin_core] fix index \"/filename\" handling
* Sat Jun 01 2013 buildbotAATTlighttpd.net- update to g4706cc + [tests] add --valgrind option + Fix comment style (//) and add gnutls to automake distcheck + [core] implement streams on chunkqueues + generic backends + [core] Use streams + [mod_fastcgi]: use backends + [mod_scgi] use backends + [common] implement libev wrapper + [mod_proxy] use backends + [openssl] use BIO wrappers for streams + [mod_gnutls] stream + [core] register server prepare callbacks + [throttle] rewrite + fix missing li prefixes + fix glib deprecation warnings + [subrequests lua] fix compile warnings. still not working, needs to be ported to stream api. + wait for request body in dynamic backends, cache them on disk + [test] mod_fastcgi: upload 2MiB and check sha1sum + [tests] use 127.0.0.2 as base address + [tests] add deflate support and tests + [lua] check values for NULL before pushing to stack + [glib] disable deprecation warnings + fix filters (deflate, memcached, cache_disk_etag) + [mod_fastcgi] add some asserts + [mod_fastcgi] fix broken asserts + [backends] fix connection insertion + more asserts and checks in stream_simple_socket + [mod_fastcgi] disable keep-alive for now + fix connection handling with chunked responses + fix connection is_closed handling (never close raw_out, never close con->out.source->out) + [mod_fastcgi] abort request only if headers aren\'t sent; otherwise stream disconnect will handle it + [mod_fastcgi] show stderr messages + fix bugs and warnings from compiler warnings (memset parameter order, shadow, ...) + [mod_gnutls] use vec_push only if version >= 2.12.0 + [mod_gnutls] fix issues with giovec_t present before 2.12.0 + replace unneeded ev_/EV_ references + flush sockets after request end by setting TCP_NODELY temporarily + [core] use TCP_FASTOPEN on listening sockets if available + [mod_throttle] build with automake/wscript too + [mod_cache_disk_etag] fix segfault + [core] fix half cleaned connection objects + [mod_cache_disk_etag] fix use after free + fix handling of new connection state + [throttle] fix memory leak + [filters] fix memleak + disable some debug messages + [tests] add mod_cache_disk_etag to the mix + [filter] don\'t run filter on stream-dest connect + [tests] etag with deflate and cache_disk_etag + [mod_fastcgi] fix use after free + [mod_fastcgi] next try to fix use after free + [mod_openssl,mod_gnutls] fix missing disconnect (mem leak), free buffers (mem leak) + [tests] show more output on console with --debug + Fix filedescriptor/socket leaking
* Wed May 22 2013 buildbotAATTlighttpd.net- update to g6a33c9 + [mod_gnutls] fix ca-file handling + [autobuild] fix automake-1.12 problems + [tests] extend autowrapper.sh script + fix bugs found with clang-3.3 -fsanitize=address,undefined + [chunks] extract to plain memory + cleanup base.h + [core] implement streams on chunkqueues + Revert \"[core] implement streams on chunkqueues\"
* Sun May 05 2013 buildbotAATTlighttpd.net- update to g186309 + [mod_gnutls] remove \
from log messages + [ipv6 parser] Fix type-punned memory access + [log] remove different timestamp format handling (one is enough), separate log context (liLogMap) from virtualrequest + [chunk/network] use glib error system to report errors (instead of using virtualrequest context) + [configparser] allow normal actions and setups with the same name + Fix small memleak with server sockets + [log] Add changable log contexts (i.e. references to the real one), so a pointer to such context can be used over a longer period of time + [plugin_core] Fix closing data stream for invalid ranges in static handling + [mod_acceslog] fix escaping of \" + [log] Remove (broken) locking for g_printerr in li_log_write_stderr - fputs, the default backend, is thread safe + Fix use of deprecated g_strcasecmp + [mod_deflate] Parse x-gzip/x-bzip2 explicitly and send it back as it was requested (instead of gzip/bzip2) + [profiler] use g_static_mutex to trigger mutext memory allocation before registering profiler alloc handlers + [lua] Use recursive lock for global lua lock + [core_lua] Forward worker pointer to log functions in some lua functions + [mod_lua] fix ttl handling for lua.handler + [mod_lua] fix docs + gitignore update + [tests] timeout pycurl requests after 10 seconds + [mod_lua] fix order of setting ts_loaded and checking it + [collect] Allow to start collect without worker context + [tests] add scgi tests + [tests] new features for running tests: log to console, kill services again after timeout + Release mainaction before stopping workers + [lua] force garbage collection + [lua] add per lua_State lock + [lua] add missing file
* Thu Dec 20 2012 mrueckertAATTsuse.de- also enforce lua 5.1 on 12.2 and newer
* Sun Jan 22 2012 buildbotAATTlighttpd.net- update to g397245 + [openssl] fix error message for wrong listen option + [cmake] fix linker errors with --as-needed (fixes #2360) + [mod_flv] don\'t retry close(fd) on EINTR + [plugin_core] fix docroot pattern error handling (fixes #2362) + [chunkqueue] skip setting limit if it is the current one + [utils] handle NULL loop in li_ev_io_
* event changing + [jobqueue] add li_job_stop + [http response/request parser] parse method with extra function, fix quoted text, restrict quoted pair + [response handling] fix missing connection header + fix compile bugs in previous commits + [response] fix totally broken response headers if connection header is sent + new module: mod_gnutls + [gnutls] fix automake + [ip-parser] fix ipv4 netmask for /0, added some unit tests
* Sat Dec 03 2011 buildbotAATTlighttpd.net- update to gdd4ed2 + [plugin_core] rename \'blank\' action to \'respond\' and allow optional integer, string or list of integer+string parameters which support patterns + [mod_status] add status_info_auto + [core] change memory profiler output, add minsize parameter to debug.profiler_dump action + [core] change connection garbage collector algorithm to free all unused connections up to the maximum of active connections during the last 5 minutes + [core] fix for previous commit. gc requency was set to 10s not 5min + move profiler code to common lib + [mempool]: use g_free instead of free in ALLOC mode + connection.c: optimize buffer usage - don\'t keep too many unused buffers around + [core] fix invalid html in auto-generated responses + [core] Ignore connection headers from backends + [config parser] add \'none\' and \'default\' keywords + [config parser] rename \'o\' liValue variables to \'v\'. the name was a relict from option variables + [profiler] export li_profiler_enabled and li_profiler_hashtable_insert/remove. add heap base/break/size to dump output + [mempool] support profiler for mmap allocations. use g_malloc/free instead malloc/free + [mod_progress] free data on module unload properly + [plugin_core] add \'map\' action, which maps the result of a pattern to a user defined action + [value] add some functions to handle liValue + [mod_openssl] add verify{,-any,-depth,-require}, client-ca-file + [mod_openssl] add openssl.setenv action (client, client-cert, server, server-cert) + [mod_openssl] add options and defaults + [mod_openssl] close connection on client initiated renegotiation + [mod_openssl] fix build error if SSL_OP_NO_COMPRESSION isn\'t defined
* Tue Oct 11 2011 buildbotAATTlighttpd.net- update to g2647a9 + [autobuild]: enable large file support for 32-bit builds
* Tue Aug 30 2011 buildbotAATTlighttpd.net- update to gb6e20b + Config syntax changes and parser fixes: + [core]: accept LF instead of CR LF in http requests + [config parser]: fix crash with nested conditional blocks, fix some warnings + [config parser] change syntax again: user defined variables are now defined as \'x = ...;\'. user defined actions are not special anymore + [tests]: convert test cases to new config syntax + [config parser] fix detection of conflicts between options and uservars + [doc]: fix config examples + [config parser] don\'t allow setup blocks or includes in setup blocks + [doc] update config examples re latest config syntax changes
* Fri Aug 19 2011 buildbotAATTlighttpd.net- update to gbafba4 + On OS X the GNU libtool is prefixed with a g. + [doc] Fix: use \'charset\' instead \'encoding\' in mimetypes.conf + [tests] add simple mod-proxy check + [core] truncate temp string before evaluating pattern. add comment to pattern.h that li_eval_pattern() does not truncate the string for you + [jobqueue] as jobs in the queue could be removed in a callback we can\\\'t copy the queue to a private one, g_queue_unlink needs the real one + [core.cached_html] fix path handling
* Mon May 09 2011 buildbotAATTlighttpd.net- update to g259cdb + [core.lua] fix wsgi pathinfo + [utils] fix calculation for sockaddr_un struct size + [core] optimize syscalls per connection + [mod_accesslog] Fix %r (first request line) formatter
* Tue Apr 12 2011 buildbotAATTlighttpd.net- update to g9c80be + [autobuild]: Fix error message if ragel is not found + [
*cgi env]: Fix REQUEST_URI + Increase timeout for angel-listen + [angel] Remove unsupported pid-file option
* Tue Mar 22 2011 buildbotAATTlighttpd.net- update to gf461b8 + [mod_redirect] Fix patterns using %n references + [tests] Add test for %n references in mod_redirect + [core] Attempt to fix issue with stalling connections in throttle pools + Fix bug in delayed connection handling + Fix bug in delayed connection handling, 2nd try + [mime-types] Fix mimetype insert, add new test cases to catch this + [throttle] Fix segfaults + [core]: fix connection/vrequest callbacks to return FALSE after they got reset, so handling stops + [mod_balance]: renamed from mod_balancer + [plugins] Fix some default options (the raw default-value is only used when there is no parser method) + [utils] Fix url decoding for non ascii values (signed char negatives) + [tests]: use printf instead of echo in shell cgi script
* Fri Dec 10 2010 buildbotAATTlighttpd.net- update to gd78939 + [autotools] Use AC_PROG_LIBTOOL instead of LT_INIT for backward compatibility
* Wed Dec 08 2010 buildbotAATTlighttpd.net- update to g7a67ba + [mod_openssl] make sure we get notified for EV_WRITE again + [autotools]: make sure pkg-config m4 is available in autoconf, check for ragel in ./configure
* Sun Nov 14 2010 buildbotAATTlighttpd.net- update to g7a4143 + [autotools] add memcached.c + [tests]: Bind to relative socket filenames + [tests] use /tmp for temporary test directory, fixes problem with too long socket paths + [throttle] Fix loop counter (leaded to segfaults) + [autoconf] Quote all arguments + [autoconf] autoupdate + [mod_auth] Fix segfault in auth_handle_deny() + [core] Immediately rearm throttle pool and update con when inserting into pool + [build] Fix detection of libev + [plugin_core] Fix cascading in docroot action + [tests] Add test for cascading in docroot action + [mod_auth] return 403 instead of 401 in auth.deny + [tests] Add test for auth.deny
* Wed Oct 13 2010 stbuehlerAATTweb.de- update to g26d915
* Tue Oct 12 2010 stbuehlerAATTweb.de- update to gf635eb
* Sun Oct 03 2010 stbuehlerAATTweb.de- update to g49e0a4
* Sun Oct 03 2010 stbuehlerAATTweb.de- update to g21d9d5
* Thu Sep 23 2010 stbuehlerAATTweb.de- update to g97088f
* Sun Sep 12 2010 stbuehlerAATTweb.de- update to ga3b7ce- install lua files in debian package
* Wed Sep 08 2010 mrueckertAATTsuse.de- readded git, i use it for running packdist in chroot. :)
* Wed Sep 08 2010 stbuehlerAATTweb.de- remove git from spec buildrequires- update debian package
* Tue Sep 07 2010 mrueckertAATTsuse.de- update to g2d57e5
* Thu Aug 26 2010 mrueckertAATTsuse.de- update to g2ad699
* Mon Aug 23 2010 stbuehlerAATTweb.de- enable openssl- add default.html- new snapshot
* Mon Aug 23 2010 mrueckertAATTsuse.de- add glib2-devel to the requires of the devel package- set -fno-strict-aliasing- enable lua and krb5
* Mon Aug 23 2010 mrueckertAATTsuse.de- initial package