[scons] link -static-libgcc instead of gcc_s

[scons] don't link pthread twice in --whole-archive workaround

[scons] fix some lib dependencies

- mod_cml: doesn't need pcre
- mod_trigger_b4_dl: needs gdbm
- lighttpd: needs crypto and pcre

[scons] sort modules

[mod_wstunnel] websocket tunnel to other protocol

*experimental*

decodes websockets and passes body back and forth from backend
(body could be known protocol such as JSON, or any custom protocol)

[mod_wstunnel] websocket tunnel to other protocol

*experimental*

decodes websockets and passes body back and forth from backend
(body could be known protocol such as JSON, or any custom protocol)

originally based off https://github.com/nori0428/mod_websocket

show more ...

[core] add public domain SHA1() if no crypto

add public domain SHA1() if not linking with crypto lib

obtained from https://github.com/nori0428/mod_websocket
* Originally written by Steve Reid <ste

[core] add public domain SHA1() if no crypto

add public domain SHA1() if not linking with crypto lib

obtained from https://github.com/nori0428/mod_websocket
* Originally written by Steve Reid <[email protected]>
*
* Modified by Aaron D. Gifford <[email protected]>
*
* NO COPYRIGHT - THIS IS 100% IN THE PUBLIC DOMAIN
*
* The original unmodified version is available at:
* ftp://ftp.funet.fi/pub/crypt/hash/sha/sha1.c

show more ...

[core] shared code for socket backends

common codebase for socket backends, based off mod_fastcgi with
some features added for mod_proxy

(mostly intended to reduce code duplication and enhance code

[core] shared code for socket backends

common codebase for socket backends, based off mod_fastcgi with
some features added for mod_proxy

(mostly intended to reduce code duplication and enhance code isolation)

mod_fastcgi and mod_scgi can now use fastcgi.balance and scgi.balance
for similar behavior as proxy.balance, but the balancing is per-host
and not per-proc. proxy.balance is also per-host and not per-proc.

mod_proxy and mod_scgi can now use proxy.map-extensions and
scgi.map-extensions, similar to fastcgi.map-extensions.

mod_fastcgi behavior change (affects only mod_status):
- statistics tags have been renamed from "fastcgi.*" to "gw.*"
"fastcgi.backend.*" -> "gw.backend.*"
"fastcgi.active-requests" -> "gw.active-requests"
("fastcgi.requests" remains "fastcgi.requests")
("proxy.requests" is new)
("scgi.requests" is new)

mod_scgi behavior change (likely minor):
- removed scgi_proclist_sort_down() and scgi_proclist_sort_up().
procs now chosen based on load as measured by num socket connnections

Note:
modules using gw_backend.[ch] are currently still independent modules.
If it had been written as a single module with fastcgi, scgi, proxy
implementations, then there would have been a chance of breaking some
existing user configurations where module ordering made a difference
for which module handled a given request, though for most people, this
would have made no difference.

Details about mod_fastcgi code transformations:
unsigned int debug -> int debug
fastcgi_env member removed from plugin_config
renamed "fcgi" and "fastcgi" to "gw", and "FCGI" to "GW"
reorganize routines for high-level and lower-level interfaces
some lower-level internal interfaces changed to use host,proc,debug
args rather than knowing about higher-level (app) hctx and plugin_data
tabs->spaces and reformatting

show more ...

[mod_proxy] move data_fastcgi into mod_proxy.c

(data_fastcgi is used only by mod_proxy at this point)

mod_vhostdb* (dbi,mysql,pgsql,ldap) (fixes #485, fixes #1936, fixes #2297)

mod_vhostdb - vhost docroot lookups

backends:

mod_vhostdb_dbi
mod_vhostdb_ldap
mod_vhostdb_mysql (now preferred over mod

mod_vhostdb* (dbi,mysql,pgsql,ldap) (fixes #485, fixes #1936, fixes #2297)

mod_vhostdb - vhost docroot lookups

backends:

mod_vhostdb_dbi
mod_vhostdb_ldap
mod_vhostdb_mysql (now preferred over mod_mysql_vhost.c)
mod_vhostdb_pgsql

STATUS: experimental (testing and feedback appreciated)

x-ref:
"PostgreSQL virtual host support"
https://redmine.lighttpd.net/issues/485
"LDAP Virtual Host Definition Storage Integration"
https://redmine.lighttpd.net/issues/1936
"mod_dbi_vhost (patch included)"
https://redmine.lighttpd.net/issues/2297

show more ...

[build] only mod_openssl depends on -lssl

some other modules depend only on -lcrypto, when available,
for SHA1, HMAC, MD5, etc

[mod_openssl] move openssl code into mod_openssl

large code move, but minimal changes made to code (besides whitespace),
so that code builds

next: need to isolate openssl data structures and config

[mod_openssl] move openssl code into mod_openssl

large code move, but minimal changes made to code (besides whitespace),
so that code builds

next: need to isolate openssl data structures and config parsing

show more ...

[mod_openssl] new module (preliminary layout)

fix SCons fullstatic build with glibc pthreads

[with some modifications by gstrauss]

[build] build network_*.c into lighttpd executable

(not into liblightcomp used by modules, on platforms that require that)

[scons] only apply FreeBSD11 workaround on FreeBSD

[scons] workaround FreeBSD11 fullstatic link error

The error for reference:

/usr/lib/libc.a(arc4random.o): In function `arc4random':
/usr/src/lib/libc/gen/arc4random.c:(.text+0x410): multiple defin

[scons] workaround FreeBSD11 fullstatic link error

The error for reference:

/usr/lib/libc.a(arc4random.o): In function `arc4random':
/usr/src/lib/libc/gen/arc4random.c:(.text+0x410): multiple definition of `arc4random'
/usr/local/lib/libcrypto.a(arc4random.o):(.text+0x0): first defined here
/usr/lib/libc.a(arc4random.o): In function `arc4random_buf':
/usr/src/lib/libc/gen/arc4random.c:(.text+0x580): multiple definition of `arc4random_buf'
/usr/local/lib/libcrypto.a(arc4random.o):(.text+0x80): first defined here

show more ...

[autobuild] omit module stubs when missing deps

do not build any module (containing module stubs) when the dependencies
for a given module are not present.

[autobuild] remove mod_authn_gssapi dep on resolv

remove mod_authn_gssapi explicit dependency on -lresolv
This fixes build on FreeBSD when ./configure --with-krb5
(On systems that need libresolv, li

[autobuild] remove mod_authn_gssapi dep on resolv

remove mod_authn_gssapi explicit dependency on -lresolv
This fixes build on FreeBSD when ./configure --with-krb5
(On systems that need libresolv, libkrb5 depends on libresolv)

Also remove obsolete hstrerror() references from build

show more ...

[core] rand.[ch] to use better RNGs when available

prefer RAND_pseudo_bytes() (openssl), arc4random() or jrand48(),
if available, over rand()

These are not necessarily cryptographically secure, but

[core] rand.[ch] to use better RNGs when available

prefer RAND_pseudo_bytes() (openssl), arc4random() or jrand48(),
if available, over rand()

These are not necessarily cryptographically secure, but should be better
than rand()

show more ...

[mod_auth] mod_authn_gssapi Kerberos auth backend (fixes #1899)

module status: experimental; more testing and review needed

Kerberos library calls have been preserved from original patch set
and sh

[mod_auth] mod_authn_gssapi Kerberos auth backend (fixes #1899)

module status: experimental; more testing and review needed

Kerberos library calls have been preserved from original patch set
and should be reviewed.

module has been quickly tested with Basic auth (Use over TLS!)

SPNEGO -has not- been tested. Again, kerberos library calls have
been preserved from original patch set. YMMV. (Use over TLS!)

x-ref:
"Kerberos/GSSAPI Delegation Support"
https://redmine.lighttpd.net/issues/1899

show more ...

remove unused array type TYPE_COUNT data_count

(unused type, and very similar to TYPE_INTEGER data_integer,
differing only in initial value and how dup inserts are merged)

backport mod_deflate to lighttpd 1.4 (fixes #1824, fixes #2753)

lots of fixes and improvements

limitations: see comments at top of mod_deflate.c

missing functionality: encode streaming response

backport mod_deflate to lighttpd 1.4 (fixes #1824, fixes #2753)

lots of fixes and improvements

limitations: see comments at top of mod_deflate.c

missing functionality: encode streaming response
(module currently requires response be collected before being sent)

potential functionality: addition of compressed file cache would
allow mod_deflate to fully supplant mod_compress in lighttpd 1.4.x

x-ref:
"Adding mod_deflate to 1.4.xx"
https://redmine.lighttpd.net/issues/1824
"mod_deflate backport compile error if ENABLE_MMAP not defined"
https://redmine.lighttpd.net/issues/2753

github: closes #67

show more ...

[mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092, fixes #2025, fixes #1962, fixes #1938)

(add to default build to reduce distributor package maintenance)

x-ref:
"broken mod

[mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092, fixes #2025, fixes #1962, fixes #1938)

(add to default build to reduce distributor package maintenance)

x-ref:
"broken module API since 1.4.38"
https://redmine.lighttpd.net/issues/2705
"lighttpd-1.4.24 fails to compile with mod_geoip.c"
https://redmine.lighttpd.net/issues/2101
"unsafe sprintfs mod_geoip"
https://redmine.lighttpd.net/issues/2092
"mod_geoip crashes lighttpd 1.5.x on FreeBSD 7.2 AMD64"
https://redmine.lighttpd.net/issues/2025
"mod_geoip"
https://redmine.lighttpd.net/issues/1962
"lighttpd 1.4 crashes on FreeBSD 7.0 AMD64 when mod_geoip compiled in"
https://redmine.lighttpd.net/issues/1938

show more ...

[mod_uploadprogress] add to default build

(module is distributed in Gentoo)
(add to default build to reduce distributor package maintenance)

[mod_auth] mod_authn_mysql.c MySQL auth backend (fixes #752, fixes #1845)

(automatically load mod_authn_mysql with mod_auth for compatibility with
existing config usage via patches in various distr

[mod_auth] mod_authn_mysql.c MySQL auth backend (fixes #752, fixes #1845)

(automatically load mod_authn_mysql with mod_auth for compatibility with
existing config usage via patches in various distros, e.g. FreeBSD)

x-ref:
"mySQL auth"
https://redmine.lighttpd.net/issues/752
"MySQL Digest Authentication"
https://redmine.lighttpd.net/issues/1845

show more ...