lighty labs

2025-12-24

15:17 Lighttpd2 Revision 42018b01: [tests] drop old macos workarounds

* python3 executable seems to be available now
* /sbin/sha1 provides sha1, drop md5sha1sum
Change-Id: I10156dbf72b19... stbuehler

15:16 Lighttpd2 Revision 6a4e02c1: [tests] fix finding sha1[sum] binary

Change-Id: I4511ef921b5d0a24314330b31bca7fe012a5bde5 stbuehler

15:16 Lighttpd2 Revision 0d9a8d51: [tests] don't flush closed log files

Change-Id: Ia5fe1ab6f386a9e754a9262809927fbbe22b30c7 stbuehler

15:16 Lighttpd2 Revision f6e48530: [connection] fix format strings (integer width) in PROXYv2 debug

Change-Id: Iea8fe2e27f33803cb26211626ef6304e8de32490 stbuehler

15:16 Lighttpd2 Revision 96179240: [connection] fix signed compare in PROXYv2 handling

max_tlv_length is >= 0 in this branch, so the cast is safe.
Change-Id: Ia125c162d72d141285c494261c07945cb940761a stbuehler

15:16 Lighttpd2 Revision 2215459f: [mod_openssl] use uint64_t (instead of long) for options

Change-Id: I7a3c5e476adceb000366a7054096e5e73c6785a5 stbuehler

14:15 Lighttpd2 Revision db422fe1: [build] use more recent lua versions with ubuntu (5.4) and alpine (5.5)

Change-Id: Ie93490d5e07cc71c56478b2434cd07de80920a33 stbuehler

14:14 Lighttpd2 Revision 6df7f107: [build] support lua 5.5 (no code changes needed)

Change-Id: I245ab1ca3999f5f463b36d2b52054ead945b8348 Achill Gilgenast

2025-12-21

23:28 Lighttpd Bug #3296: Multiple htdigest www-authentication algorithms fails for HTTP/2

gstrauss wrote in #note-2:
> I reviewed the rest of the lighttpd code looking for similar oversights and did not not... mb5

21:02 Lighttpd Bug #3296: Multiple htdigest www-authentication algorithms fails for HTTP/2

I reviewed the rest of the lighttpd code looking for similar oversights and did not notice any.
I'll modify your p... gstrauss

20:37 Lighttpd Bug #3296: Multiple htdigest www-authentication algorithms fails for HTTP/2

Thank you. Yes, the patch looks about right. I'll review further and will commit a fix in the next couple days. gstrauss

20:25 Lighttpd Bug #3296 (Patch Pending): Multiple htdigest www-authentication algorithms fails for HTTP/2

With multiple algorithms enabled for www-authentication (md5 and sha-2586), two WWW-authenticate headers should be se... mb5