Lighttpd

2013-06-21

17:21 Bug #2464: patch for intermittent ldap failures

I did not check all the code openldap code for LDAP_OPT_RESTART and given how much of a pile the openldap code is, I ... codehero

17:01 Bug #2464: patch for intermittent ldap failures

The patches might touch only EINTR stuff with LDAP_OPT_RESTART, but given the docs for the option it was not designed... stbuehler

16:50 Bug #2464: patch for intermittent ldap failures

LDAP_OPT_RESTART is only checked when syscalls fail due to system interference (ie from a signal. If you looked at th... codehero

12:58 Bug #2464: patch for intermittent ldap failures

I'm not sure LDAP_OPT_RESTART has no negative side effects. Would it keep restarting in a loop until it gets a respon... stbuehler

11:51 Feature #2469: OCSP Stapling

Notes:
* No API documentation found: @SSL_set_tlsext_status_ocsp_resp@ == @SSL_ctrl(SSL_CTRL_SET_TLSEXT_STATUS_REQ... stbuehler

2013-06-20

18:28 Bug #2463 (Invalid): SNI don't work

stbuehler

17:52 Bug #2478: invalid memory read in qop=auth-int "handling"

The invalid read should be fixed ofc, but parsing the request body is not gonna happen. (async, ...)
Just use http... stbuehler

16:38 Feature #2481: [mod_auth] [patch] allow SSL clientcert authenticated users to bypass AUTH

I'd rather use something that checks whether @con->authed_user@ (@REMOTE_USER@ env) is already set; I think that shou... stbuehler

16:36 Feature #2480: [patch] mod_accesslog: allow custom loglevel

Small bug in the @buffer_is_equal_string@ call: compares with @"accesslog.use-syslog"@, should compare with @"accessl... stbuehler

16:26 Bug #2188: Lighttpd returns 400 Bad request

I sent it to oss-security (http://thread.gmane.org/gmane.comp.security.oss.general/9864) and got:
> In general the... stbuehler

16:19 Bug #2482 (Invalid): server.tag is not added to http headers on error pages (500, 503)

lighttpd never "touches" the Server: header, it only sets if it nobody else did.
Also missing all the details: how... stbuehler

13:48 Feature #2488: Redirect http to https at the same port

We need one port for correct redirection from http to https. vaganov.nikolai

13:47 Feature #2488: Redirect http to https at the same port

just use different ports? darix

13:31 Feature #2488: Redirect http to https at the same port

It is possible develop this feature for additional cost ? vaganov.nikolai