diff -pruN 2.4.63-1/.github/workflows/linux.yml 2.4.64-1/.github/workflows/linux.yml --- 2.4.63-1/.github/workflows/linux.yml 2024-12-12 17:54:24.000000000 +0000 +++ 2.4.64-1/.github/workflows/linux.yml 2025-04-09 16:02:25.000000000 +0000 @@ -53,6 +53,10 @@ jobs: - name: Event MPM, all-modules, mod_cgid fdpassing config: --enable-mods-shared=reallyall --with-mpm=event --disable-cgi --enable-cgid-fdpassing # ------------------------------------------------------------------------- + - name: Shared MPMs, all-modules, 64-bit ARM + config: --enable-mods-shared=reallyall --enable-mpms-shared=all + os: ubuntu-24.04-arm + # ------------------------------------------------------------------------- - name: Event MPM, all-modules, mod_cgid w/o fdpassing config: --enable-mods-shared=reallyall --with-mpm=event --disable-cgi # ------------------------------------------------------------------------- @@ -240,7 +244,7 @@ jobs: # APR_VERSION=1.7.3 # APU_VERSION=1.6.3 # APU_CONFIG="--with-crypto --with-ldap" - runs-on: ubuntu-latest + runs-on: ${{ matrix.os == '' && 'ubuntu-latest' || matrix.os }} timeout-minutes: 30 env: NOTEST_CFLAGS: ${{ matrix.notest-cflags }} diff -pruN 2.4.63-1/CHANGES 2.4.64-1/CHANGES --- 2.4.63-1/CHANGES 2025-01-20 19:01:18.000000000 +0000 +++ 2.4.64-1/CHANGES 2025-07-07 11:33:53.000000000 +0000 @@ -1,4 +1,92 @@ -*- coding: utf-8 -*- +Changes with Apache 2.4.64 + + *) mod_proxy_ajp: Use iobuffersize set on worker level for the IO buffer + size. PR 69402 [Jari Ahonen ] + + *) mod_ssl: Drop $SSLKEYLOGFILE handling internally for OpenSSL 3.5 + builds which enable it in libssl natively. [Joe Orton] + + *) mod_asis: Fix the log level of the message AH01236. + Github #527 [Michael Kaufmann ] + + *) mod_session_dbd: ensure format used with SessionDBDCookieName and + SessionDBDCookieName2 are correct. + Github #503 [Thomas Meyer ] + + *) mod_headers: 'RequestHeader set|edit|edit_r Content-Type X' could + inadvertently modify the Content-Type _response_ header. Applies to + Content-Type only and likely to only affect static file responses. + [Eric Covener] + + *) mod_ssl: Remove warning over potential uninitialised value + for ssl protocol prior to protocol selection. + [Graham Leggett] + + *) mod_proxy: Reuse ProxyRemote connections when possible, like prior + to 2.4.59. [Jean-Frederic Clere, Yann Ylavic] + + *) mod_systemd: Add systemd socket activation support. [Paul Querna, + Jan Kaluza, Lubos Uhliarik , Joe Orton] + + *) mod_systemd: Log the SELinux context at startup if available and + enabled. [Joe Orton] + + *) mod_http2: update to version 2.0.32 + The code setting the connection window size was set wrong, + preventing `H2WindowSize` to work. + Fixed . + [Stefan Eissing, Michael Kaufmann] + + *) mod_http2: update to version 2.0.30 + - Fixed bug in handling over long response headers. When the 64 KB limit + of nghttp2 was exceeded, the request was not reset and the client was + left hanging, waiting for it. Now the stream is reset. + - Added new directive `H2MaxHeaderBlockLen` to set the limit on response + header sizes. + - Fixed handling of Timeout vs. KeepAliveTimeout when first request on a + connection was reset. + + *) mod_lua: Fix memory handling in LuaOutputFilter. PR 69590. + [Guillermo Grandes ] + + * mod_proxy_http2: revert r1912193 for detecting broken backend connections + as this interferes with backend selection who a node is unresponsive. + PR69624. + + *) mod_proxy_balancer: Fix a regression that caused stickysession keys no + longer be recognized if they are provided as query parameter in the URL. + PR 69443 [Ruediger Pluem] + + *) mod_md: update to version 2.5.2 + - Fixed TLS-ALPN-01 challenges when multiple `MDPrivateKeys` are specified + with EC keys before RSA ones. Fixes #377. [Stefan Eissing] + - Fixed missing newlines in the status page output. [Andreas Groth] + + *) mod_dav: Add API to expose DavBasePath setting. [Joe Orton] + + *) mod_md: update to version 2.5.1 + - Added support for ACME profiles with new directives MDProfile and + MDProfileMandatory. + - When installing a custom CA file via `MDCACertificateFile`, also set the + libcurl option CURLSSLOPT_NO_REVOKE that suppresses complains by Schannel + (when curl is linked with it) about missing CRL/OCSP in certificates. + - Fixed handling of corrupted httpd.json and added test 300_30 for it. + File is removed on error and written again. Fixes #369. + - Added explanation in log for how to proceed when md_store.json could not be + parsed and prevented the server start. + - restored fixed to #336 and #337 which got lost in a sync with Apache svn + - Add Issue Name/Uris to certificate information in md-status handler + - MDomains with static certificate files have MDRenewMode "manual", unless + "always" is configured. + + *) core: Report invalid Options= argument when parsing AllowOverride + directives. + Github #310 [Zhou Qingyang ] + + *) scoreboard/mod_http2: record durations of HTTP/2 requests. + PR 69579 [Pierre Brochard ] + Changes with Apache 2.4.63 *) mod_dav: Update redirect-carefully example BrowserMatch config diff -pruN 2.4.63-1/CMakeLists.txt 2.4.64-1/CMakeLists.txt --- 2.4.63-1/CMakeLists.txt 2024-08-04 11:03:16.000000000 +0000 +++ 2.4.64-1/CMakeLists.txt 2025-06-10 10:51:35.000000000 +0000 @@ -21,6 +21,7 @@ CMAKE_MINIMUM_REQUIRED(VERSION 2.8) INCLUDE(CheckSymbolExists) INCLUDE(CheckCSourceCompiles) +INCLUDE("build/build-modules-c.cmake") FIND_PACKAGE(LibXml2) FIND_PACKAGE(Lua51) @@ -607,26 +608,20 @@ SET(install_targets) SET(install_bin_pdb) SET(install_modules) # special handling vs. other installed targets SET(install_modules_pdb) -SET(builtin_module_shortnames "win32 mpm_winnt http so") # core added automatically +SET(builtin_module_shortnames) +LIST(APPEND builtin_module_shortnames "win32" "mpm_winnt" "http" "so") # core added automatically SET(extra_builtin_modules) # the ones specified with -DWITH_MODULES= -IF(WITH_MODULES) # modules statically linked with the server - STRING(REPLACE "," ";" WITH_MODULE_LIST ${WITH_MODULES}) - FOREACH(static_mod ${WITH_MODULE_LIST}) - STRING(REGEX MATCH "[^/]+\\.c" mod_basename ${static_mod}) - STRING(REGEX REPLACE "^mod_(.*)\\.c" "\\1" mod_module_name ${mod_basename}) - SET(builtin_module_shortnames "${builtin_module_shortnames} ${mod_module_name}") - CONFIGURE_FILE(${static_mod} ${PROJECT_BINARY_DIR}/ COPYONLY) - SET(extra_builtin_modules ${extra_builtin_modules} ${PROJECT_BINARY_DIR}/${mod_basename}) - ENDFOREACH() - EXECUTE_PROCESS(COMMAND cmd /c "echo ${builtin_module_shortnames}| awk -f ${CMAKE_CURRENT_SOURCE_DIR}/build/build-modules-c.awk > ${PROJECT_BINARY_DIR}/modules.c" RESULT_VARIABLE rv) - IF(rv) - MESSAGE(FATAL_ERROR "build-modules-c.awk failed (${rv})") - ENDIF() -ELSE() - # no extra built-in modules; use the default modules.c to avoid the awk prereq - CONFIGURE_FILE(${CMAKE_CURRENT_SOURCE_DIR}/os/win32/modules.c ${PROJECT_BINARY_DIR}/ COPYONLY) -ENDIF() +STRING(REPLACE "," ";" WITH_MODULE_LIST "${WITH_MODULES}") +FOREACH(static_mod ${WITH_MODULE_LIST}) + STRING(REGEX MATCH "[^/]+\\.c" mod_basename ${static_mod}) + STRING(REGEX REPLACE "^mod_(.*)\\.c" "\\1" mod_module_name ${mod_basename}) + LIST(APPEND builtin_module_shortnames "${mod_module_name}") + CONFIGURE_FILE(${static_mod} ${PROJECT_BINARY_DIR}/ COPYONLY) + SET(extra_builtin_modules ${extra_builtin_modules} ${PROJECT_BINARY_DIR}/${mod_basename}) +ENDFOREACH() + +generate_builtin_modules_c("${PROJECT_BINARY_DIR}/modules.c" "${builtin_module_shortnames}") # for easy reference from .dll/.so builds CONFIGURE_FILE(os/win32/BaseAddr.ref ${PROJECT_BINARY_DIR}/ COPYONLY) diff -pruN 2.4.63-1/Makefile.in 2.4.64-1/Makefile.in --- 2.4.63-1/Makefile.in 2022-11-29 13:19:07.000000000 +0000 +++ 2.4.64-1/Makefile.in 2025-07-07 10:18:22.000000000 +0000 @@ -156,19 +156,19 @@ docs: fi update-changes: - @for i in `find changes-entries -type f`; do \ + @find changes-entries -type f | while read -r i ; do \ cp CHANGES CHANGES.tmp ; \ - awk -v fname=$$i 'BEGIN{done = 0; active = 0} \ + awk -v fname="$$i" 'BEGIN{done = 0; active = 0} \ done == 0 && active == 0 && /^Changes with Apache /{ active = 1; print; next}; \ - /^( *\*|Changes with Apache )/ && active == 1 && done == 0{rec=$$0; while(getline 0){if (! ($$0 ~ /^ *$$/)){print}}printf "\n";print rec; active = 0; done = 1; next} //;' \ CHANGES.tmp > CHANGES ; \ rm CHANGES.tmp ; \ if [ -n "$(SVN)" ] ; then \ - if ! $(SVN) rm $$i 2>/dev/null ; then \ - $(RM) $$i ; \ + if ! $(SVN) rm "$$i" 2>/dev/null ; then \ + $(RM) "$$i" ; \ fi ; \ else \ - $(RM) $$i ; \ + $(RM) "$$i" ; \ fi ; \ done ; \ if [ -n "$(SVN)" ] ; then \ diff -pruN 2.4.63-1/README.cmake 2.4.64-1/README.cmake --- 2.4.63-1/README.cmake 2023-07-17 20:33:05.000000000 +0000 +++ 2.4.64-1/README.cmake 2025-06-10 10:51:35.000000000 +0000 @@ -34,7 +34,6 @@ The following tools must be in PATH: cmake version 3.1.3 or later is required to work with current OpenSSL releases. (OpenSSL is an optional prerequisite of httpd.) * Perl -* If the WITH_MODULES feature is used: awk * If using a command-line compiler: compiler and linker and related tools (Refer to the cmake documentation for more information.) @@ -100,8 +99,6 @@ How to build 2. Make sure cmake and Perl are in PATH. Additionally, some backends require compile tools in PATH. (Hint: "Visual Studio Command Prompt") - In the unlikely event that you use -DWITH_MODULES, described below, make - sure awk is in PATH. 3. cmake -G "some backend, like 'NMake Makefiles'" -DCMAKE_INSTALL_PREFIX=d:/path/to/httpdinst diff -pruN 2.4.63-1/build/build-modules-c.cmake 2.4.64-1/build/build-modules-c.cmake --- 2.4.63-1/build/build-modules-c.cmake 1970-01-01 00:00:00.000000000 +0000 +++ 2.4.64-1/build/build-modules-c.cmake 2025-06-10 10:51:35.000000000 +0000 @@ -0,0 +1,27 @@ +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +function(generate_builtin_modules_c output_filename module_list) + list(PREPEND module_list "core") + + foreach(module ${module_list}) + string(APPEND MODULES_EXTERN "extern module ${module}_module;\n") + string(APPEND MODULES_PRELINK " &${module}_module,\n") + string(APPEND MODULES_SYMBOLS " {\"${module}_module\", &${module}_module},\n") + string(APPEND MODULES_PRELOAD " &${module}_module,\n") + endforeach() + + configure_file("build/modules.c.in" ${output_filename}) +endfunction() diff -pruN 2.4.63-1/build/config.guess 2.4.64-1/build/config.guess --- 2.4.63-1/build/config.guess 2025-01-20 19:35:39.000000000 +0000 +++ 2.4.64-1/build/config.guess 2025-07-07 15:53:56.000000000 +0000 @@ -4,7 +4,7 @@ # shellcheck disable=SC2006,SC2268 # see below for rationale -timestamp='2024-01-01' +timestamp='2024-07-27' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by @@ -123,7 +123,7 @@ set_cc_for_build() { dummy=$tmp/dummy case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in ,,) echo "int x;" > "$dummy.c" - for driver in cc gcc c89 c99 ; do + for driver in cc gcc c17 c99 c89 ; do if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then CC_FOR_BUILD=$driver break @@ -634,7 +634,8 @@ EOF sed 's/^ //' << EOF > "$dummy.c" #include - main() + int + main () { if (!__power_pc()) exit(1); @@ -718,7 +719,8 @@ EOF #include #include - int main () + int + main () { #if defined(_SC_KERNEL_BITS) long bits = sysconf(_SC_KERNEL_BITS); @@ -1621,6 +1623,7 @@ cat > "$dummy.c" <&2 exit 1 ;; - kfreebsd*-gnu*- | kopensolaris*-gnu*-) + kfreebsd*-gnu*- | knetbsd*-gnu*- | netbsd*-gnu*- | kopensolaris*-gnu*-) ;; vxworks-simlinux- | vxworks-simwindows- | vxworks-spe-) ;; @@ -1864,6 +2245,8 @@ case $kernel-$os-$obj in ;; os2-emx-) ;; + rtmk-nova-) + ;; *-eabi*- | *-gnueabi*-) ;; none--*) @@ -1890,7 +2273,7 @@ case $vendor in *-riscix*) vendor=acorn ;; - *-sunos*) + *-sunos* | *-solaris*) vendor=sun ;; *-cnk* | *-aix*) diff -pruN 2.4.63-1/build/ltmain.sh 2.4.64-1/build/ltmain.sh --- 2.4.63-1/build/ltmain.sh 2025-01-20 19:35:39.000000000 +0000 +++ 2.4.64-1/build/ltmain.sh 2025-07-07 15:53:56.000000000 +0000 @@ -2,11 +2,11 @@ ## DO NOT EDIT - This file generated from ./build-aux/ltmain.in ## by inline-source v2019-02-19.15 -# libtool (GNU libtool) 2.5.3 +# libtool (GNU libtool) 2.4.7 # Provide generalized library-building support services. # Written by Gordon Matzigkeit , 1996 -# Copyright (C) 1996-2019, 2021-2024 Free Software Foundation, Inc. +# Copyright (C) 1996-2019, 2021-2022 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. @@ -31,8 +31,8 @@ PROGRAM=libtool PACKAGE=libtool -VERSION=2.5.3 -package_revision=2.5.3 +VERSION="2.4.7 Debian-2.4.7-7build1" +package_revision=2.4.7 ## ------ ## @@ -72,11 +72,11 @@ scriptversion=2019-02-19.15; # UTC # This is free software. There is NO warranty; not even for # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # -# Copyright (C) 2004-2019, 2021, 2023-2024 Bootstrap Authors +# Copyright (C) 2004-2019, 2021 Bootstrap Authors # # This file is dual licensed under the terms of the MIT license -# , and GPL version 2 or later -# . You must apply one of +# , and GPL version 2 or later +# . You must apply one of # these licenses when using or redistributing this software or any of # the files within it. See the URLs above, or the file `LICENSE` # included in the Bootstrap distribution for the full license texts. @@ -143,7 +143,7 @@ nl=' ' IFS="$sp $nl" -# There are apparently some systems that use ';' as a PATH separator! +# There are apparently some retarded systems that use ';' as a PATH separator! if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { @@ -430,7 +430,7 @@ EXIT_SKIP=77 # $? = 77 is used to indi # putting '$debug_cmd' at the start of all your functions, you can get # bash to show function call trace with: # -# debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name +# debug_cmd='echo "${FUNCNAME[0]} $*" >&2' bash your-script-name debug_cmd=${debug_cmd-":"} exit_cmd=: @@ -572,27 +572,15 @@ func_require_term_colors () # --------------------- # Append VALUE onto the existing contents of VAR. - # We should try to minimise forks, especially on Windows where they are - # unreasonably slow, so skip the feature probes when bash or zsh are - # being used: - if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then - : ${_G_HAVE_ARITH_OP="yes"} - : ${_G_HAVE_XSI_OPS="yes"} - # The += operator was introduced in bash 3.1 - case $BASH_VERSION in - [12].* | 3.0 | 3.0*) ;; - *) - : ${_G_HAVE_PLUSEQ_OP="yes"} - ;; - esac - fi - # _G_HAVE_PLUSEQ_OP # Can be empty, in which case the shell is probed, "yes" if += is # useable or anything else if it does not work. - test -z "$_G_HAVE_PLUSEQ_OP" \ - && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \ - && _G_HAVE_PLUSEQ_OP=yes + if test -z "$_G_HAVE_PLUSEQ_OP" && \ + __PLUSEQ_TEST="a" && \ + __PLUSEQ_TEST+=" b" 2>/dev/null && \ + test "a b" = "$__PLUSEQ_TEST"; then + _G_HAVE_PLUSEQ_OP=yes + fi if test yes = "$_G_HAVE_PLUSEQ_OP" then @@ -1536,11 +1524,11 @@ func_lt_ver () # This is free software. There is NO warranty; not even for # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # -# Copyright (C) 2010-2019, 2021, 2023-2024 Bootstrap Authors +# Copyright (C) 2010-2019, 2021 Bootstrap Authors # # This file is dual licensed under the terms of the MIT license -# , and GPL version 2 or later -# . You must apply one of +# , and GPL version 2 or later +# . You must apply one of # these licenses when using or redistributing this software or any of # the files within it. See the URLs above, or the file `LICENSE` # included in the Bootstrap distribution for the full license texts. @@ -1706,6 +1694,8 @@ func_run_hooks () { $debug_cmd + _G_rc_run_hooks=false + case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not support hook functions." ;; @@ -2215,7 +2205,7 @@ func_version () # End: # Set a version string. -scriptversion='(GNU libtool) 2.5.3' +scriptversion='(GNU libtool) 2.4.7' # func_echo ARG... @@ -2306,13 +2296,13 @@ include the following information: compiler: $LTCC compiler flags: $LTCFLAGS linker: $LD (gnu? $with_gnu_ld) - version: $progname (GNU libtool) 2.5.3 + version: $progname $scriptversion Debian-2.4.7-7build1 automake: `($AUTOMAKE --version) 2>/dev/null |$SED 1q` autoconf: `($AUTOCONF --version) 2>/dev/null |$SED 1q` Report bugs to . -GNU libtool home page: . -General help using GNU software: ." +GNU libtool home page: . +General help using GNU software: ." exit 0 } @@ -2510,6 +2500,8 @@ libtool_options_prep () _G_rc_lt_options_prep=: + _G_rc_lt_options_prep=: + # Shorthand for --mode=foo, only valid as the first argument case $1 in clean|clea|cle|cl) @@ -2668,10 +2660,10 @@ libtool_validate_options () # preserve --debug test : = "$debug_cmd" || func_append preserve_args " --debug" - case $host_os in + case $host in # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452 # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788 - cygwin* | mingw* | windows* | pw32* | cegcc* | solaris2* | os2*) + *cygwin* | *mingw* | *pw32* | *cegcc* | *solaris2* | *os2*) # don't eliminate duplications in $postdeps and $predeps opt_duplicate_compiler_generated_deps=: ;; @@ -3003,7 +2995,7 @@ EOF # func_convert_core_file_wine_to_w32 ARG # Helper function used by file name conversion functions when $build is *nix, -# and $host is mingw, windows, cygwin, or some other w32 environment. Relies on a +# and $host is mingw, cygwin, or some other w32 environment. Relies on a # correctly configured wine environment available, with the winepath program # in $build's $PATH. # @@ -3035,10 +3027,9 @@ func_convert_core_file_wine_to_w32 () # func_convert_core_path_wine_to_w32 ARG # Helper function used by path conversion functions when $build is *nix, and -# $host is mingw, windows, cygwin, or some other w32 environment. Relies on a -# correctly configured wine environment available, with the winepath program -# in $build's $PATH. Assumes ARG has no leading or trailing path separator -# characters. +# $host is mingw, cygwin, or some other w32 environment. Relies on a correctly +# configured wine environment available, with the winepath program in $build's +# $PATH. Assumes ARG has no leading or trailing path separator characters. # # ARG is path to be converted from $build format to win32. # Result is available in $func_convert_core_path_wine_to_w32_result. @@ -3693,7 +3684,7 @@ func_mode_compile () # On Cygwin there's no "real" PIC flag so we must build both object types case $host_os in - cygwin* | mingw* | windows* | pw32* | os2* | cegcc*) + cygwin* | mingw* | pw32* | os2* | cegcc*) pic_mode=default ;; esac @@ -4570,7 +4561,7 @@ func_mode_install () 'exit $?' tstripme=$stripme case $host_os in - cygwin* | mingw* | windows* | pw32* | cegcc*) + cygwin* | mingw* | pw32* | cegcc*) case $realname in *.dll.a) tstripme= @@ -4683,7 +4674,7 @@ func_mode_install () # Do a test to see if this is really a libtool program. case $host in - *cygwin* | *mingw* | *windows*) + *cygwin* | *mingw*) if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" wrapper=$func_ltwrapper_scriptname_result @@ -4911,7 +4902,7 @@ extern \"C\" { $RM $export_symbols eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"' case $host in - *cygwin* | *mingw* | *windows* | *cegcc* ) + *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"' ;; @@ -4923,7 +4914,7 @@ extern \"C\" { eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' case $host in - *cygwin* | *mingw* | *windows* | *cegcc* ) + *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$nlist" >> "$output_objdir/$outputname.def"' ;; @@ -4937,7 +4928,7 @@ extern \"C\" { func_basename "$dlprefile" name=$func_basename_result case $host in - *cygwin* | *mingw* | *windows* | *cegcc* ) + *cygwin* | *mingw* | *cegcc* ) # if an import library, we need to obtain dlname if func_win32_import_lib_p "$dlprefile"; then func_tr_sh "$dlprefile" @@ -4963,16 +4954,8 @@ extern \"C\" { eval '$ECHO ": $name " >> "$nlist"' fi func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 - case $host in - i[3456]86-*-mingw32*) - eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | - $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'" - ;; - *) - eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | - $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/__nm_//' >> '$nlist'" - ;; - esac + eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | + $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'" } else # not an import lib $opt_dry_run || { @@ -5120,7 +5103,7 @@ static const void *lt_preloaded_setup() # Transform the symbol file into the correct name. symfileobj=$output_objdir/${my_outputname}S.$objext case $host in - *cygwin* | *mingw* | *windows* | *cegcc* ) + *cygwin* | *mingw* | *cegcc* ) if test -f "$output_objdir/$my_outputname.def"; then compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` @@ -5196,7 +5179,7 @@ func_win32_libid () *ar\ archive*) # could be an import, or static # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD. if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null | - $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)' >/dev/null; then + $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' >/dev/null; then case $nm_interface in "MS dumpbin") if func_cygming_ms_implib_p "$1" || @@ -5463,7 +5446,7 @@ func_extract_archives () # # Emit a libtool wrapper script on stdout. # Don't directly open a file because we may want to -# incorporate the script contents within a cygwin/mingw/windows +# incorporate the script contents within a cygwin/mingw # wrapper executable. Must ONLY be called from within # func_mode_link because it depends on a number of variables # set therein. @@ -5471,7 +5454,7 @@ func_extract_archives () # ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR # variable will take. If 'yes', then the emitted script # will assume that the directory where it is stored is -# the $objdir directory. This is a cygwin/mingw/windows-specific +# the $objdir directory. This is a cygwin/mingw-specific # behavior. func_emit_wrapper () { @@ -5596,7 +5579,7 @@ func_exec_program_core () " case $host in # Backslashes separate directories on plain windows - *-*-mingw* | *-*-windows* | *-*-os2* | *-cegcc*) + *-*-mingw | *-*-os2* | *-cegcc*) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2 @@ -5664,7 +5647,7 @@ func_exec_program () file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\` done - # Usually 'no', except on cygwin/mingw/windows when embedded into + # Usually 'no', except on cygwin/mingw when embedded into # the cwrapper. WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1 if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then @@ -5796,7 +5779,7 @@ EOF #endif #include #include -#if defined _WIN32 && !defined __GNUC__ +#ifdef _MSC_VER # include # include # include @@ -5821,7 +5804,7 @@ EOF /* declarations of non-ANSI functions */ #if defined __MINGW32__ # ifdef __STRICT_ANSI__ -_CRTIMP int __cdecl _putenv (const char *); +int _putenv (const char *); # endif #elif defined __CYGWIN__ # ifdef __STRICT_ANSI__ @@ -6019,7 +6002,7 @@ main (int argc, char *argv[]) { EOF case $host in - *mingw* | *windows* | *cygwin* ) + *mingw* | *cygwin* ) # make stdout use "unix" line endings echo " setmode(1,_O_BINARY);" ;; @@ -6038,7 +6021,7 @@ EOF { /* however, if there is an option in the LTWRAPPER_OPTION_PREFIX namespace, but it is not one of the ones we know about and - have already dealt with, above (including dump-script), then + have already dealt with, above (inluding dump-script), then report an error. Otherwise, targets might begin to believe they are allowed to use options in the LTWRAPPER_OPTION_PREFIX namespace. The first time any user complains about this, we'll @@ -6122,7 +6105,7 @@ EOF EOF case $host_os in - mingw* | windows*) + mingw*) cat <<"EOF" { char* p; @@ -6164,7 +6147,7 @@ EOF EOF case $host_os in - mingw* | windows*) + mingw*) cat <<"EOF" /* execv doesn't actually work on mingw as expected on unix */ newargz = prepare_spawn (newargz); @@ -6583,7 +6566,7 @@ lt_update_lib_path (const char *name, co EOF case $host_os in - mingw* | windows*) + mingw*) cat <<"EOF" /* Prepares an argument vector before calling spawn(). @@ -6758,7 +6741,7 @@ func_mode_link () $debug_cmd case $host in - *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*) + *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) # It is impossible to link a dll without this setting, and # we shouldn't force the makefile maintainer to figure out # what system we are compiling for in order to pass an extra @@ -6822,12 +6805,10 @@ func_mode_link () xrpath= perm_rpath= temp_rpath= - temp_rpath_tail= thread_safe=no vinfo= vinfo_number=no weak_libs= - rpath_arg= single_module=$wl-single_module func_infer_tag $base_compile @@ -7090,7 +7071,7 @@ func_mode_link () case $arg in [\\/]* | [A-Za-z]:[\\/]*) ;; *) - func_fatal_error "argument to -rpath is not absolute: $arg" + func_fatal_error "only absolute run-paths are allowed" ;; esac if test rpath = "$prev"; then @@ -7266,7 +7247,7 @@ func_mode_link () ;; esac case $host in - *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*) + *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'` case :$dllsearchpath: in *":$dir:"*) ;; @@ -7286,7 +7267,7 @@ func_mode_link () -l*) if test X-lc = "X$arg" || test X-lm = "X$arg"; then case $host in - *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*) + *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*) # These systems don't actually have a C or math library (as such) continue ;; @@ -7294,7 +7275,7 @@ func_mode_link () # These systems don't actually have a C library (as such) test X-lc = "X$arg" && continue ;; - *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*) + *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*) # Do not include libc due to us having libc/libc_r. test X-lc = "X$arg" && continue ;; @@ -7314,7 +7295,7 @@ func_mode_link () esac elif test X-lc_r = "X$arg"; then case $host in - *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*) + *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*) # Do not include libc_r directly, use -pthread flag. continue ;; @@ -7358,7 +7339,7 @@ func_mode_link () continue ;; -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \ - |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*) + |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" @@ -7381,7 +7362,7 @@ func_mode_link () -no-install) case $host in - *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*) + *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*) # The PATH hackery in wrapper scripts is required on Windows # and Darwin in order for the loader to find any dlls it needs. func_warning "'-no-install' is ignored for $host" @@ -7441,7 +7422,7 @@ func_mode_link () dir=$lt_sysroot$func_stripname_result ;; *) - func_fatal_error "argument ($arg) to '-R' is not an absolute path: $dir" + func_fatal_error "only absolute run-paths are allowed" ;; esac case "$xrpath " in @@ -7566,29 +7547,15 @@ func_mode_link () # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization # -specs=* GCC specs files # -stdlib=* select c++ std lib with clang - # -fdiagnostics-color* simply affects output - # -frecord-gcc-switches used to verify flags were respected # -fsanitize=* Clang/GCC memory and address sanitizer - # -fno-sanitize* Clang/GCC memory and address sanitizer - # -shared-libsan Link with shared sanitizer runtimes (Clang) - # -static-libsan Link with static sanitizer runtimes (Clang) - # -no-canonical-prefixes Do not expand any symbolic links # -fuse-ld=* Linker select flags for GCC # -static-* direct GCC to link specific libraries statically # -fcilkplus Cilk Plus language extension features for C/C++ - # -rtlib=* select c runtime lib with clang - # --unwindlib=* select unwinder library with clang - # -f{file|debug|macro|profile}-prefix-map=* needed for lto linking # -Wa,* Pass flags directly to the assembler - # -Werror, -Werror=* Report (specified) warnings as errors -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \ -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \ - -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-no-canonical-prefixes| \ - -stdlib=*|-rtlib=*|--unwindlib=*| \ - -specs=*|-fsanitize=*|-fno-sanitize*|-shared-libsan|-static-libsan| \ - -ffile-prefix-map=*|-fdebug-prefix-map=*|-fmacro-prefix-map=*|-fprofile-prefix-map=*| \ - -fdiagnostics-color*|-frecord-gcc-switches| \ - -fuse-ld=*|-static-*|-fcilkplus|-Wa,*|-Werror|-Werror=*) + -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \ + -specs=*|-fsanitize=*|-fuse-ld=*|-static-*|-fcilkplus|-Wa,*) func_quote_arg pretty "$arg" arg=$func_quote_arg_result func_append compile_command " $arg" @@ -7746,20 +7713,8 @@ func_mode_link () # Now actually substitute the argument into the commands. if test -n "$arg"; then - if test -n "$rpath_arg"; then - func_append finalize_rpath " ${arg##*,}" - unset rpath_arg - else - case $arg in - -Wl,-rpath,*) - func_append finalize_rpath " ${arg##*,}";; - -Wl,-rpath) - rpath_arg=1;; - *) - func_append compile_command " $arg" - func_append finalize_command " $arg" - esac - fi + func_append compile_command " $arg" + func_append finalize_command " $arg" fi done # argument parsing loop @@ -7893,7 +7848,10 @@ func_mode_link () case $pass in dlopen) libs=$dlfiles ;; dlpreopen) libs=$dlprefiles ;; - link) libs="$deplibs %DEPLIBS% $dependency_libs" ;; + link) + libs="$deplibs %DEPLIBS%" + test "X$link_all_deplibs" != Xno && libs="$libs $dependency_libs" + ;; esac fi if test lib,dlpreopen = "$linkmode,$pass"; then @@ -7930,7 +7888,7 @@ func_mode_link () found=false case $deplib in -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ - |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*) + |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" @@ -8107,15 +8065,18 @@ func_mode_link () ;; esac if $valid_a_lib; then - func_warning "Linking the shared library $output against the static library $deplib is not portable!" + echo + $ECHO "*** Warning: Linking the shared library $output against the" + $ECHO "*** static library $deplib is not portable!" deplibs="$deplib $deplibs" else - func_warning "Trying to link with static lib archive $deplib." - func_warning "I have the capability to make that library automatically link in when" - func_warning "you link to this library. But I can only do this if you have a" - func_warning "shared version of the library, which you do not appear to have" - func_warning "because the file extensions .$libext of this argument makes me believe" - func_warning "that it is just a static archive that I should not use here." + echo + $ECHO "*** Warning: Trying to link with static lib archive $deplib." + echo "*** I have the capability to make that library automatically link in when" + echo "*** you link to this library. But I can only do this if you have a" + echo "*** shared version of the library, which you do not appear to have" + echo "*** because the file extensions .$libext of this argument makes me believe" + echo "*** that it is just a static archive that I should not use here." fi ;; esac @@ -8209,19 +8170,19 @@ func_mode_link () # It is a libtool convenience library, so add in its objects. func_append convenience " $ladir/$objdir/$old_library" func_append old_convenience " $ladir/$objdir/$old_library" + tmp_libs= + for deplib in $dependency_libs; do + deplibs="$deplib $deplibs" + if $opt_preserve_dup_deps; then + case "$tmp_libs " in + *" $deplib "*) func_append specialdeplibs " $deplib" ;; + esac + fi + func_append tmp_libs " $deplib" + done elif test prog != "$linkmode" && test lib != "$linkmode"; then func_fatal_error "'$lib' is not a convenience library" fi - tmp_libs= - for deplib in $dependency_libs; do - deplibs="$deplib $deplibs" - if $opt_preserve_dup_deps; then - case "$tmp_libs " in - *" $deplib "*) func_append specialdeplibs " $deplib" ;; - esac - fi - func_append tmp_libs " $deplib" - done continue fi # $pass = conv @@ -8310,7 +8271,7 @@ func_mode_link () fi case $host in # special handling for platforms with PE-DLLs. - *cygwin* | *mingw* | *windows* | *cegcc* ) + *cygwin* | *mingw* | *cegcc* ) # Linker will automatically link against shared library if both # static and shared are present. Therefore, ensure we extract # symbols from the import library if a shared library is present @@ -8410,10 +8371,7 @@ func_mode_link () # Make sure the rpath contains only unique directories. case $temp_rpath: in *"$absdir:"*) ;; - *) case $absdir in - "$progdir/"*) func_append temp_rpath "$absdir:" ;; - *) func_append temp_rpath_tail "$absdir:" ;; - esac + *) func_append temp_rpath "$absdir:" ;; esac fi @@ -8425,9 +8383,7 @@ func_mode_link () *) case "$compile_rpath " in *" $absdir "*) ;; - *) case $absdir in - "$progdir/"*) func_append compile_rpath " $absdir" ;; - esac + *) func_append compile_rpath " $absdir" ;; esac ;; esac @@ -8458,8 +8414,8 @@ func_mode_link () fi if test -n "$library_names" && { test no = "$use_static_libs" || test -z "$old_library"; }; then - case $host_os in - cygwin* | mingw* | windows* | cegcc* | os2*) + case $host in + *cygwin* | *mingw* | *cegcc* | *os2*) # No point in relinking DLLs because paths are not encoded func_append notinst_deplibs " $lib" need_relink=no @@ -8485,11 +8441,11 @@ func_mode_link () if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then echo if test prog = "$linkmode"; then - func_warning "Linking the executable $output against the loadable module" + $ECHO "*** Warning: Linking the executable $output against the loadable module" else - func_warning "Linking the shared library $output against the loadable module" + $ECHO "*** Warning: Linking the shared library $output against the loadable module" fi - func_warning "$linklib is not portable!" + $ECHO "*** $linklib is not portable!" fi if test lib = "$linkmode" && test yes = "$hardcode_into_libs"; then @@ -8501,9 +8457,7 @@ func_mode_link () *) case "$compile_rpath " in *" $absdir "*) ;; - *) case $absdir in - "$progdir/"*) func_append compile_rpath " $absdir" ;; - esac + *) func_append compile_rpath " $absdir" ;; esac ;; esac @@ -8530,8 +8484,8 @@ func_mode_link () soname=$dlname elif test -n "$soname_spec"; then # bleh windows - case $host_os in - cygwin* | mingw* | windows* | cegcc* | os2*) + case $host in + *cygwin* | mingw* | *cegcc* | *os2*) func_arith $current - $age major=$func_arith_result versuffix=-$major @@ -8586,10 +8540,11 @@ func_mode_link () if /usr/bin/file -L $add 2> /dev/null | $GREP ": [^:]* bundle" >/dev/null; then if test "X$dlopenmodule" != "X$lib"; then - func_warning "lib $linklib is a module, not a shared library" + $ECHO "*** Warning: lib $linklib is a module, not a shared library" if test -z "$old_library"; then - func_warning "And there doesn't seem to be a static archive available" - func_warning "The link will probably fail, sorry" + echo + echo "*** And there doesn't seem to be a static archive available" + echo "*** The link will probably fail, sorry" else add=$dir/$old_library fi @@ -8672,7 +8627,7 @@ func_mode_link () test no = "$hardcode_direct_absolute"; then add=$libdir/$linklib elif test yes = "$hardcode_minus_L"; then - add_dir=-L$lt_sysroot$libdir + add_dir=-L$libdir add=-l$name elif test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in @@ -8689,7 +8644,7 @@ func_mode_link () fi else # We cannot seem to hardcode it, guess we'll fake it. - add_dir=-L$lt_sysroot$libdir + add_dir=-L$libdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in @@ -8729,19 +8684,21 @@ func_mode_link () # Just print a warning and add the library to dependency_libs so # that the program can be linked against the static library. - func_warning "This system cannot link to static lib archive $lib." - func_warning "I have the capability to make that library automatically link in when" - func_warning "you link to this library. But I can only do this if you have a" - func_warning "shared version of the library, which you do not appear to have." + echo + $ECHO "*** Warning: This system cannot link to static lib archive $lib." + echo "*** I have the capability to make that library automatically link in when" + echo "*** you link to this library. But I can only do this if you have a" + echo "*** shared version of the library, which you do not appear to have." if test yes = "$module"; then - func_warning "But as you try to build a module library, libtool will still create " - func_warning "a static module, that should work as long as the dlopening application" - func_warning "is linked with the -dlopen flag to resolve symbols at runtime." + echo "*** But as you try to build a module library, libtool will still create " + echo "*** a static module, that should work as long as the dlopening application" + echo "*** is linked with the -dlopen flag to resolve symbols at runtime." if test -z "$global_symbol_pipe"; then - func_warning "However, this would only work if libtool was able to extract symbol" - func_warning "lists from a program, using 'nm' or equivalent, but libtool could" - func_warning "not find such a program. So, this module is probably useless." - func_warning "'nm' from GNU binutils and a full rebuild may help." + echo + echo "*** However, this would only work if libtool was able to extract symbol" + echo "*** lists from a program, using 'nm' or equivalent, but libtool could" + echo "*** not find such a program. So, this module is probably useless." + echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then build_libtool_libs=module @@ -8864,8 +8821,6 @@ func_mode_link () fi # link_all_deplibs != no fi # linkmode = lib done # for deplib in $libs - - func_append temp_rpath "$temp_rpath_tail" if test link = "$pass"; then if test prog = "$linkmode"; then compile_deplibs="$new_inherited_linker_flags $compile_deplibs" @@ -8903,46 +8858,42 @@ func_mode_link () # Add libraries to $var in reverse order eval tmp_libs=\"\$$var\" new_libs= - # FIXME: Pedantically, this is the right thing to do, so - # that some nasty dependency loop isn't accidentally - # broken: new_libs="$deplib $new_libs" for deplib in $tmp_libs; do - if $opt_preserve_dup_deps; then - new_libs="$deplib $new_libs" - else - # Pragmatically, this seems to cause very few problems in - # practice: - case $deplib in - -L*) new_libs="$deplib $new_libs" ;; - -R*) ;; + # FIXME: Pedantically, this is the right thing to do, so + # that some nasty dependency loop isn't accidentally + # broken: + #new_libs="$deplib $new_libs" + # Pragmatically, this seems to cause very few problems in + # practice: + case $deplib in + -L*) new_libs="$deplib $new_libs" ;; + -R*) ;; + *) + # And here is the reason: when a library appears more + # than once as an explicit dependence of a library, or + # is implicitly linked in more than once by the + # compiler, it is considered special, and multiple + # occurrences thereof are not removed. Compare this + # with having the same library being listed as a + # dependency of multiple other libraries: in this case, + # we know (pedantically, we assume) the library does not + # need to be listed more than once, so we keep only the + # last copy. This is not always right, but it is rare + # enough that we require users that really mean to play + # such unportable linking tricks to link the library + # using -Wl,-lname, so that libtool does not consider it + # for duplicate removal. + case " $specialdeplibs " in + *" $deplib "*) new_libs="$deplib $new_libs" ;; *) - # And here is the reason: when a library appears more - # than once as an explicit dependence of a library, or - # is implicitly linked in more than once by the - # compiler, it is considered special, and multiple - # occurrences thereof are not removed. Compare this - # with having the same library being listed as a - # dependency of multiple other libraries: in this case, - # we know (pedantically, we assume) the library does not - # need to be listed more than once, so we keep only the - # last copy. This is not always right, but it is rare - # enough that we require users that really mean to play - # such unportable linking tricks to link the library - # using -Wl,-lname, so that libtool does not consider it - # for duplicate removal. And if not possible for portability - # reasons, then --preserve-dup-deps should be used. - case " $specialdeplibs " in - *" $deplib "*) new_libs="$deplib $new_libs" ;; - *) - case " $new_libs " in - *" $deplib "*) ;; - *) new_libs="$deplib $new_libs" ;; - esac - ;; - esac - ;; + case " $new_libs " in + *" $deplib "*) ;; + *) new_libs="$deplib $new_libs" ;; + esac + ;; esac - fi + ;; + esac done tmp_libs= for deplib in $new_libs; do @@ -9074,7 +9025,9 @@ func_mode_link () if test pass_all != "$deplibs_check_method"; then func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs" else - func_warning "Linking the shared library $output against the non-libtool objects $objs is not portable!" + echo + $ECHO "*** Warning: Linking the shared library $output against the non-libtool" + $ECHO "*** objects $objs is not portable!" func_append libobjs " $objs" fi fi @@ -9135,13 +9088,13 @@ func_mode_link () # case $version_type in # correct linux to gnu/linux during the next big refactor - darwin|freebsd-elf|linux|midnightbsd-elf|osf|qnx|windows|none) + darwin|freebsd-elf|linux|midnightbsd-elf|osf|windows|none) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_revision ;; - freebsd-aout|sco|sunos) + freebsd-aout|qnx|sunos) current=$number_major revision=$number_minor age=0 @@ -9153,6 +9106,9 @@ func_mode_link () revision=$number_minor lt_irix_increment=no ;; + *) + func_fatal_configuration "$modename: unknown library version type '$version_type'" + ;; esac ;; no) @@ -9288,9 +9244,8 @@ func_mode_link () ;; qnx) - func_arith $current - $age - major=.$func_arith_result - versuffix=$major.$age.$revision + major=.$current + versuffix=.$current ;; sco) @@ -9443,7 +9398,7 @@ func_mode_link () if test yes = "$build_libtool_libs"; then if test -n "$rpath"; then case $host in - *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*) + *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*) # these systems don't actually have a c library (as such)! ;; *-*-rhapsody* | *-*-darwin1.[012]) @@ -9494,6 +9449,108 @@ func_mode_link () # implementing what was already the behavior. newdeplibs=$deplibs ;; + test_compile) + # This code stresses the "libraries are programs" paradigm to its + # limits. Maybe even breaks it. We compile a program, linking it + # against the deplibs as a proxy for the library. Then we can check + # whether they linked in statically or dynamically with ldd. + $opt_dry_run || $RM conftest.c + cat > conftest.c < containers + */ +ap_module_symbol_t ap_prelinked_module_symbols[] = { +@MODULES_SYMBOLS@ + {NULL, NULL} +}; + +/* + * Modules which initially form the + * list of available modules on startup, + * i.e. these are the modules which are + * initially loaded into the Apache process + * [extendable under run-time via LoadModule] + */ +module *ap_preloaded_modules[] = { +@MODULES_PRELOAD@ + NULL +}; diff -pruN 2.4.63-1/configure 2.4.64-1/configure --- 2.4.63-1/configure 2025-01-20 19:35:40.000000000 +0000 +++ 2.4.64-1/configure 2025-07-07 15:53:58.000000000 +0000 @@ -1,9 +1,9 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.72. +# Generated by GNU Autoconf 2.71. # # -# Copyright (C) 1992-1996, 1998-2017, 2020-2023 Free Software Foundation, +# Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, # Inc. # # @@ -15,6 +15,7 @@ # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh +as_nop=: if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh @@ -23,13 +24,12 @@ then : # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST -else case e in #( - e) case `(set -o) 2>/dev/null` in #( +else $as_nop + case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; -esac ;; esac fi @@ -101,7 +101,7 @@ IFS=$as_save_IFS ;; esac -# We did not find ourselves, most probably we were run as 'sh COMMAND' +# We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 @@ -131,14 +131,15 @@ case $- in # (((( esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail -# out after a failed 'exec'. +# out after a failed `exec'. printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi # We don't want this to propagate to other subprocesses. { _as_can_reexec=; unset _as_can_reexec;} if test "x$CONFIG_SHELL" = x; then - as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 + as_bourne_compatible="as_nop=: +if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh NULLCMD=: @@ -146,13 +147,12 @@ then : # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST -else case e in #( - e) case \`(set -o) 2>/dev/null\` in #( +else \$as_nop + case \`(set -o) 2>/dev/null\` in #( *posix*) : set -o posix ;; #( *) : ;; -esac ;; esac fi " @@ -170,9 +170,8 @@ as_fn_ret_failure && { exitcode=1; echo if ( set x; as_fn_ret_success y && test x = \"\$1\" ) then : -else case e in #( - e) exitcode=1; echo positional parameters were not saved. ;; -esac +else \$as_nop + exitcode=1; echo positional parameters were not saved. fi test x\$exitcode = x0 || exit 1 blah=\$(echo \$(echo blah)) @@ -186,15 +185,14 @@ test \$(( 1 + 1 )) = 2 || exit 1" if (eval "$as_required") 2>/dev/null then : as_have_required=yes -else case e in #( - e) as_have_required=no ;; -esac +else $as_nop + as_have_required=no fi if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null then : -else case e in #( - e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +else $as_nop + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR as_found=false for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH do @@ -227,13 +225,12 @@ IFS=$as_save_IFS if $as_found then : -else case e in #( - e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } && +else $as_nop + if { test -f "$SHELL" || test -f "$SHELL.exe"; } && as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null then : CONFIG_SHELL=$SHELL as_have_required=yes -fi ;; -esac +fi fi @@ -255,7 +252,7 @@ case $- in # (((( esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail -# out after a failed 'exec'. +# out after a failed `exec'. printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi @@ -274,8 +271,7 @@ $0: message. Then install a modern shell $0: the script under such a shell if you do have one." fi exit 1 -fi ;; -esac +fi fi fi SHELL=${CONFIG_SHELL-/bin/sh} @@ -314,6 +310,14 @@ as_fn_exit () as_fn_set_status $1 exit $1 } # as_fn_exit +# as_fn_nop +# --------- +# Do nothing but, unlike ":", preserve the value of $?. +as_fn_nop () +{ + return $? +} +as_nop=as_fn_nop # as_fn_mkdir_p # ------------- @@ -382,12 +386,11 @@ then : { eval $1+=\$2 }' -else case e in #( - e) as_fn_append () +else $as_nop + as_fn_append () { eval $1=\$$1\$2 - } ;; -esac + } fi # as_fn_append # as_fn_arith ARG... @@ -401,14 +404,21 @@ then : { as_val=$(( $* )) }' -else case e in #( - e) as_fn_arith () +else $as_nop + as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` - } ;; -esac + } fi # as_fn_arith +# as_fn_nop +# --------- +# Do nothing but, unlike ":", preserve the value of $?. +as_fn_nop () +{ + return $? +} +as_nop=as_fn_nop # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- @@ -482,8 +492,6 @@ as_cr_alnum=$as_cr_Letters$as_cr_digits /[$]LINENO/= ' <$as_myself | sed ' - t clear - :clear s/[$]LINENO.*/&-/ t lineno b @@ -532,6 +540,7 @@ esac as_echo='printf %s\n' as_echo_n='printf %s' + rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file @@ -543,9 +552,9 @@ if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: - # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail. - # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable. - # In both cases, we have to default to 'cp -pR'. + # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. + # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. + # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then @@ -570,12 +579,10 @@ as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. -as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" -as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated +as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. -as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g" -as_tr_sh="eval sed '$as_sed_sh'" # deprecated +as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" test -n "$DJDIR" || exec 7<&0 /dev/null && - as_fn_error $? "invalid feature name: '$ac_useropt'" + as_fn_error $? "invalid feature name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in @@ -1327,7 +1334,7 @@ do ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && - as_fn_error $? "invalid feature name: '$ac_useropt'" + as_fn_error $? "invalid feature name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in @@ -1540,7 +1547,7 @@ do ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && - as_fn_error $? "invalid package name: '$ac_useropt'" + as_fn_error $? "invalid package name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in @@ -1556,7 +1563,7 @@ do ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && - as_fn_error $? "invalid package name: '$ac_useropt'" + as_fn_error $? "invalid package name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in @@ -1586,8 +1593,8 @@ do | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) x_libraries=$ac_optarg ;; - -*) as_fn_error $? "unrecognized option: '$ac_option' -Try '$0 --help' for more information" + -*) as_fn_error $? "unrecognized option: \`$ac_option' +Try \`$0 --help' for more information" ;; *=*) @@ -1595,7 +1602,7 @@ Try '$0 --help' for more information" # Reject names that are not valid shell variable names. case $ac_envvar in #( '' | [0-9]* | *[!_$as_cr_alnum]* ) - as_fn_error $? "invalid variable name: '$ac_envvar'" ;; + as_fn_error $? "invalid variable name: \`$ac_envvar'" ;; esac eval $ac_envvar=\$ac_optarg export $ac_envvar ;; @@ -1645,7 +1652,7 @@ do as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val" done -# There might be people who depend on the old broken behavior: '$host' +# There might be people who depend on the old broken behavior: `$host' # used to hold the argument of --host etc. # FIXME: To remove some day. build=$build_alias @@ -1713,7 +1720,7 @@ if test ! -r "$srcdir/$ac_unique_file"; test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .." as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir" fi -ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work" +ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work" ac_abs_confdir=`( cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg" pwd)` @@ -1741,7 +1748,7 @@ if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -'configure' configures this package to adapt to many kinds of systems. +\`configure' configures this package to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1755,11 +1762,11 @@ Configuration: --help=short display options specific to this package --help=recursive display the short help of all the included packages -V, --version display version information and exit - -q, --quiet, --silent do not print 'checking ...' messages + -q, --quiet, --silent do not print \`checking ...' messages --cache-file=FILE cache test results in FILE [disabled] - -C, --config-cache alias for '--cache-file=config.cache' + -C, --config-cache alias for \`--cache-file=config.cache' -n, --no-create do not create output files - --srcdir=DIR find the sources in DIR [configure dir or '..'] + --srcdir=DIR find the sources in DIR [configure dir or \`..'] Installation directories: --prefix=PREFIX install architecture-independent files in PREFIX @@ -1767,10 +1774,10 @@ Installation directories: --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX [PREFIX] -By default, 'make install' will install all the files in -'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc. You can specify -an installation prefix other than '$ac_default_prefix' using '--prefix', -for instance '--prefix=\$HOME'. +By default, \`make install' will install all the files in +\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify +an installation prefix other than \`$ac_default_prefix' using \`--prefix', +for instance \`--prefix=\$HOME'. For better control, use the options below. @@ -2107,7 +2114,7 @@ Some influential environment variables: you have headers in a nonstandard directory CPP C preprocessor -Use these variables to override the choices made by 'configure' or to help +Use these variables to override the choices made by `configure' or to help it to find libraries and programs with nonstandard names/locations. Report bugs to the package provider. @@ -2175,9 +2182,9 @@ test -n "$ac_init_help" && exit $ac_stat if $ac_init_version; then cat <<\_ACEOF configure -generated by GNU Autoconf 2.72 +generated by GNU Autoconf 2.71 -Copyright (C) 2023 Free Software Foundation, Inc. +Copyright (C) 2021 Free Software Foundation, Inc. This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it. _ACEOF @@ -2216,12 +2223,11 @@ printf "%s\n" "$ac_try_echo"; } >&5 } && test -s conftest.$ac_objext then : ac_retval=0 -else case e in #( - e) printf "%s\n" "$as_me: failed program was:" >&5 +else $as_nop + printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 - ac_retval=1 ;; -esac + ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval @@ -2255,12 +2261,11 @@ printf "%s\n" "$ac_try_echo"; } >&5 } then : ac_retval=0 -else case e in #( - e) printf "%s\n" "$as_me: failed program was:" >&5 +else $as_nop + printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 - ac_retval=1 ;; -esac + ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval @@ -2279,8 +2284,8 @@ printf %s "checking for $2... " >&6; } if eval test \${$3+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 #include <$2> @@ -2288,12 +2293,10 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : eval "$3=yes" -else case e in #( - e) eval "$3=no" ;; -esac +else $as_nop + eval "$3=no" fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi eval ac_res=\$$3 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 @@ -2333,12 +2336,11 @@ printf "%s\n" "$ac_try_echo"; } >&5 } then : ac_retval=0 -else case e in #( - e) printf "%s\n" "$as_me: failed program was:" >&5 +else $as_nop + printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 - ac_retval=1 ;; -esac + ac_retval=1 fi # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would @@ -2380,13 +2382,12 @@ printf "%s\n" "$ac_try_echo"; } >&5 test $ac_status = 0; }; } then : ac_retval=0 -else case e in #( - e) printf "%s\n" "$as_me: program exited with status $ac_status" >&5 +else $as_nop + printf "%s\n" "$as_me: program exited with status $ac_status" >&5 printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 - ac_retval=$ac_status ;; -esac + ac_retval=$ac_status fi rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno @@ -2405,15 +2406,15 @@ printf %s "checking for $2... " >&6; } if eval test \${$3+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Define $2 to an innocuous variant, in case declares $2. For example, HP-UX 11i declares gettimeofday. */ #define $2 innocuous_$2 /* System header to define __stub macros and hopefully few prototypes, - which can conflict with char $2 (void); below. */ + which can conflict with char $2 (); below. */ #include #undef $2 @@ -2424,7 +2425,7 @@ else case e in #( #ifdef __cplusplus extern "C" #endif -char $2 (void); +char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ @@ -2443,13 +2444,11 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : eval "$3=yes" -else case e in #( - e) eval "$3=no" ;; -esac +else $as_nop + eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ - conftest$ac_exeext conftest.$ac_ext ;; -esac + conftest$ac_exeext conftest.$ac_ext fi eval ac_res=\$$3 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 @@ -2471,8 +2470,8 @@ printf %s "checking whether $as_decl_nam if eval test \${$3+y} then : printf %s "(cached) " >&6 -else case e in #( - e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'` +else $as_nop + as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'` eval ac_save_FLAGS=\$$6 as_fn_append $6 " $5" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -2496,14 +2495,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : eval "$3=yes" -else case e in #( - e) eval "$3=no" ;; -esac +else $as_nop + eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext eval $6=\$ac_save_FLAGS - ;; -esac + fi eval ac_res=\$$3 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 @@ -2536,7 +2533,7 @@ This file contains any messages produced running configure, to aid debugging if configure makes a mistake. It was created by $as_me, which was -generated by GNU Autoconf 2.72. Invocation command line was +generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw @@ -2782,10 +2779,10 @@ esac printf "%s\n" "$as_me: loading site script $ac_site_file" >&6;} sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" \ - || { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} + || { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "failed to load site script $ac_site_file -See 'config.log' for more details" "$LINENO" 5; } +See \`config.log' for more details" "$LINENO" 5; } fi done @@ -2821,7 +2818,9 @@ struct stat; /* Most of the following tests are stolen from RCS 5.7 src/conf.sh. */ struct buf { int x; }; struct buf * (*rcsopen) (struct buf *, struct stat *, int); -static char *e (char **p, int i) +static char *e (p, i) + char **p; + int i; { return p[i]; } @@ -2835,21 +2834,6 @@ static char *f (char * (*g) (char **, in return s; } -/* C89 style stringification. */ -#define noexpand_stringify(a) #a -const char *stringified = noexpand_stringify(arbitrary+token=sequence); - -/* C89 style token pasting. Exercises some of the corner cases that - e.g. old MSVC gets wrong, but not very hard. */ -#define noexpand_concat(a,b) a##b -#define expand_concat(a,b) noexpand_concat(a,b) -extern int vA; -extern int vbee; -#define aye A -#define bee B -int *pvA = &expand_concat(v,aye); -int *pvbee = &noexpand_concat(v,bee); - /* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has function prototypes and stuff, but not \xHH hex character constants. These do not provoke an error unfortunately, instead are silently treated @@ -2877,19 +2861,16 @@ ok |= (argc == 0 || f (e, argv, 0) != ar # Test code for whether the C compiler supports C99 (global declarations) ac_c_conftest_c99_globals=' -/* Does the compiler advertise C99 conformance? */ +// Does the compiler advertise C99 conformance? #if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L # error "Compiler does not advertise C99 conformance" #endif -// See if C++-style comments work. - #include extern int puts (const char *); extern int printf (const char *, ...); extern int dprintf (int, const char *, ...); extern void *malloc (size_t); -extern void free (void *); // Check varargs macros. These examples are taken from C99 6.10.3.5. // dprintf is used instead of fprintf to avoid needing to declare @@ -2939,6 +2920,7 @@ typedef const char *ccp; static inline int test_restrict (ccp restrict text) { + // See if C++-style comments work. // Iterate through items via the restricted pointer. // Also check for declarations in for loops. for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i) @@ -3004,8 +2986,6 @@ ac_c_conftest_c99_main=' ia->datasize = 10; for (int i = 0; i < ia->datasize; ++i) ia->data[i] = i * 1.234; - // Work around memory leak warnings. - free (ia); // Check named initializers. struct named_init ni = { @@ -3027,7 +3007,7 @@ ac_c_conftest_c99_main=' # Test code for whether the C compiler supports C11 (global declarations) ac_c_conftest_c11_globals=' -/* Does the compiler advertise C11 conformance? */ +// Does the compiler advertise C11 conformance? #if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L # error "Compiler does not advertise C11 conformance" #endif @@ -3221,9 +3201,8 @@ IFS=$as_save_IFS if $as_found then : -else case e in #( - e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;; -esac +else $as_nop + as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 fi @@ -3251,12 +3230,12 @@ for ac_var in $ac_precious_vars; do eval ac_new_val=\$ac_env_${ac_var}_value case $ac_old_set,$ac_new_set in set,) - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5 -printf "%s\n" "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 +printf "%s\n" "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} ac_cache_corrupted=: ;; ,set) - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5 -printf "%s\n" "$as_me: error: '$ac_var' was not set in the previous run" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5 +printf "%s\n" "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} ac_cache_corrupted=: ;; ,);; *) @@ -3265,18 +3244,18 @@ printf "%s\n" "$as_me: error: '$ac_var' ac_old_val_w=`echo x $ac_old_val` ac_new_val_w=`echo x $ac_new_val` if test "$ac_old_val_w" != "$ac_new_val_w"; then - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5 -printf "%s\n" "$as_me: error: '$ac_var' has changed since the previous run:" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5 +printf "%s\n" "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} ac_cache_corrupted=: else - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5 -printf "%s\n" "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5 +printf "%s\n" "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;} eval $ac_var=\$ac_old_val fi - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: former value: '$ac_old_val'" >&5 -printf "%s\n" "$as_me: former value: '$ac_old_val'" >&2;} - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: current value: '$ac_new_val'" >&5 -printf "%s\n" "$as_me: current value: '$ac_new_val'" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5 +printf "%s\n" "$as_me: former value: \`$ac_old_val'" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5 +printf "%s\n" "$as_me: current value: \`$ac_new_val'" >&2;} fi;; esac # Pass precious variables to config.status. @@ -3292,11 +3271,11 @@ printf "%s\n" "$as_me: current value: fi done if $ac_cache_corrupted; then - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5 printf "%s\n" "$as_me: error: changes in the environment can compromise the build" >&2;} - as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file' + as_fn_error $? "run \`${MAKE-make} distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5 fi ## -------------------- ## @@ -4330,8 +4309,8 @@ printf %s "checking for working mkdir -p if test ${ac_cv_mkdir_p+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + test -d conftestdir && rm -rf conftestdir mkdir -p conftestdir/somedir >/dev/null 2>&1 if test -d conftestdir/somedir; then @@ -4340,8 +4319,7 @@ else case e in #( ac_cv_mkdir_p=no fi rm -rf conftestdir - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_mkdir_p" >&5 printf "%s\n" "$ac_cv_mkdir_p" >&6; } @@ -4357,8 +4335,8 @@ printf %s "checking for grep that handle if test ${ac_cv_path_GREP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -z "$GREP"; then +else $as_nop + if test -z "$GREP"; then ac_path_GREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -4377,10 +4355,9 @@ do as_fn_executable_p "$ac_path_GREP" || continue # Check for GNU ac_path_GREP and select it if it is found. # Check for GNU $ac_path_GREP -case `"$ac_path_GREP" --version 2>&1` in #( +case `"$ac_path_GREP" --version 2>&1` in *GNU*) ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;; -#( *) ac_count=0 printf %s 0123456789 >"conftest.in" @@ -4415,8 +4392,7 @@ IFS=$as_save_IFS else ac_cv_path_GREP=$GREP fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5 printf "%s\n" "$ac_cv_path_GREP" >&6; } @@ -4428,8 +4404,8 @@ printf %s "checking for egrep... " >&6; if test ${ac_cv_path_EGREP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 +else $as_nop + if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 then ac_cv_path_EGREP="$GREP -E" else if test -z "$EGREP"; then @@ -4451,10 +4427,9 @@ do as_fn_executable_p "$ac_path_EGREP" || continue # Check for GNU ac_path_EGREP and select it if it is found. # Check for GNU $ac_path_EGREP -case `"$ac_path_EGREP" --version 2>&1` in #( +case `"$ac_path_EGREP" --version 2>&1` in *GNU*) ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;; -#( *) ac_count=0 printf %s 0123456789 >"conftest.in" @@ -4490,15 +4465,12 @@ else ac_cv_path_EGREP=$EGREP fi - fi ;; -esac + fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5 printf "%s\n" "$ac_cv_path_EGREP" >&6; } EGREP="$ac_cv_path_EGREP" - EGREP_TRADITIONAL=$EGREP - ac_cv_path_EGREP_TRADITIONAL=$EGREP APACHE_VAR_SUBST="$APACHE_VAR_SUBST EGREP" @@ -4519,16 +4491,15 @@ printf %s "checking build system type... if test ${ac_cv_build+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_build_alias=$build_alias +else $as_nop + ac_build_alias=$build_alias test "x$ac_build_alias" = x && ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"` test "x$ac_build_alias" = x && as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5 ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` || as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5 - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5 printf "%s\n" "$ac_cv_build" >&6; } @@ -4555,15 +4526,14 @@ printf %s "checking host system type... if test ${ac_cv_host+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test "x$host_alias" = x; then +else $as_nop + if test "x$host_alias" = x; then ac_cv_host=$ac_cv_build else ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` || as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5 fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5 printf "%s\n" "$ac_cv_host" >&6; } @@ -4590,15 +4560,14 @@ printf %s "checking target system type.. if test ${ac_cv_target+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test "x$target_alias" = x; then +else $as_nop + if test "x$target_alias" = x; then ac_cv_target=$ac_cv_host else ac_cv_target=`$SHELL "${ac_aux_dir}config.sub" $target_alias` || as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $target_alias failed" "$LINENO" 5 fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_target" >&5 printf "%s\n" "$ac_cv_target" >&6; } @@ -4741,8 +4710,8 @@ printf "%s\n" "$as_me: WARNING: APR vers as_fn_error $? "the --with-apr parameter is incorrect. It must specify an install prefix, a build directory, or an apr-config file." "$LINENO" 5 fi -else case e in #( - e) +else $as_nop + if test -n "1" && test "1" = "1"; then for apr_temp_apr_config_file in $apr_temp_acceptable_apr_config do @@ -4818,8 +4787,7 @@ printf "%s\n" "$as_me: WARNING: skipped apr_config=""$srcdir/srclib/apr"/$apr_temp_apr_config_file" fi fi - ;; -esac + fi @@ -4845,8 +4813,8 @@ if test "$apr_found" = "reconfig"; then # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # -# 'ac_cv_env_foo' variables (set or unset) will be overridden when -# loading this file, other *unset* 'ac_cv_foo' will be assigned the +# `ac_cv_env_foo' variables (set or unset) will be overridden when +# loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF @@ -4876,14 +4844,14 @@ printf "%s\n" "$as_me: WARNING: cache va (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) - # 'set' does not quote correctly, so add quotes: double-quote + # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) - # 'set' quotes correctly as required by POSIX, so do not add quotes. + # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | @@ -5157,8 +5125,8 @@ then : as_fn_error $? "the --with-apr-util parameter is incorrect. It must specify an install prefix, a build directory, or an apu-config file." "$LINENO" 5 fi -else case e in #( - e) +else $as_nop + if test -n "1" && test "1" = "1"; then for apu_temp_apu_config_file in $apu_temp_acceptable_apu_config do @@ -5200,8 +5168,7 @@ else case e in #( apu_config=""$srcdir/srclib/apr-util"/$apu_temp_apu_config_file" fi fi - ;; -esac + fi @@ -5238,8 +5205,8 @@ if test "$apu_found" = "reconfig"; then # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # -# 'ac_cv_env_foo' variables (set or unset) will be overridden when -# loading this file, other *unset* 'ac_cv_foo' will be assigned the +# `ac_cv_env_foo' variables (set or unset) will be overridden when +# loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF @@ -5269,14 +5236,14 @@ printf "%s\n" "$as_me: WARNING: cache va (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) - # 'set' does not quote correctly, so add quotes: double-quote + # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) - # 'set' quotes correctly as required by POSIX, so do not add quotes. + # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | @@ -5440,8 +5407,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$CC"; then +else $as_nop + if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5463,8 +5430,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then @@ -5486,8 +5452,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$ac_ct_CC"; then +else $as_nop + if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5509,8 +5475,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then @@ -5545,8 +5510,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$CC"; then +else $as_nop + if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5568,8 +5533,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then @@ -5591,8 +5555,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$CC"; then +else $as_nop + if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else ac_prog_rejected=no @@ -5631,8 +5595,7 @@ if test $ac_prog_rejected = yes; then ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@" fi fi -fi ;; -esac +fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then @@ -5656,8 +5619,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$CC"; then +else $as_nop + if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5679,8 +5642,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then @@ -5706,8 +5668,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$ac_ct_CC"; then +else $as_nop + if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5729,8 +5691,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then @@ -5768,8 +5729,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$CC"; then +else $as_nop + if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5791,8 +5752,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then @@ -5814,8 +5774,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$ac_ct_CC"; then +else $as_nop + if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -5837,8 +5797,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then @@ -5867,10 +5826,10 @@ fi fi -test -z "$CC" && { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} +test -z "$CC" && { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "no acceptable C compiler found in \$PATH -See 'config.log' for more details" "$LINENO" 5; } +See \`config.log' for more details" "$LINENO" 5; } # Provide some information about the compiler. printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5 @@ -5942,8 +5901,8 @@ printf "%s\n" "$ac_try_echo"; } >&5 printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then : - # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'. -# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no' + # Autoconf-2.13 could set the ac_cv_exeext variable to `no'. +# So ignore a value of `no', otherwise this would lead to `EXEEXT = no' # in a Makefile. We should not override ac_cv_exeext if it was cached, # so that the user can short-circuit this test for compilers unknown to # Autoconf. @@ -5963,7 +5922,7 @@ do ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` fi # We set ac_cv_exeext here because the later test for it is not - # safe: cross compilers may not add the suffix if given an '-o' + # safe: cross compilers may not add the suffix if given an `-o' # argument, so we may need to know it at that point already. # Even if this section looks crufty: it has the advantage of # actually working. @@ -5974,9 +5933,8 @@ do done test "$ac_cv_exeext" = no && ac_cv_exeext= -else case e in #( - e) ac_file='' ;; -esac +else $as_nop + ac_file='' fi if test -z "$ac_file" then : @@ -5985,14 +5943,13 @@ printf "%s\n" "no" >&6; } printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 -{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} +{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "C compiler cannot create executables -See 'config.log' for more details" "$LINENO" 5; } -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 -printf "%s\n" "yes" >&6; } ;; -esac +See \`config.log' for more details" "$LINENO" 5; } +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 +printf "%s\n" "yes" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5 printf %s "checking for C compiler default output file name... " >&6; } @@ -6016,10 +5973,10 @@ printf "%s\n" "$ac_try_echo"; } >&5 printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then : - # If both 'conftest.exe' and 'conftest' are 'present' (well, observable) -# catch 'conftest.exe'. For instance with Cygwin, 'ls conftest' will -# work properly (i.e., refer to 'conftest.exe'), while it won't with -# 'rm'. + # If both `conftest.exe' and `conftest' are `present' (well, observable) +# catch `conftest.exe'. For instance with Cygwin, `ls conftest' will +# work properly (i.e., refer to `conftest.exe'), while it won't with +# `rm'. for ac_file in conftest.exe conftest conftest.*; do test -f "$ac_file" || continue case $ac_file in @@ -6029,12 +5986,11 @@ for ac_file in conftest.exe conftest con * ) break;; esac done -else case e in #( - e) { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} +else $as_nop + { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of executables: cannot compile and link -See 'config.log' for more details" "$LINENO" 5; } ;; -esac +See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest conftest$ac_cv_exeext { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5 @@ -6050,8 +6006,6 @@ int main (void) { FILE *f = fopen ("conftest.out", "w"); - if (!f) - return 1; return ferror (f) || fclose (f) != 0; ; @@ -6091,27 +6045,26 @@ printf "%s\n" "$ac_try_echo"; } >&5 if test "$cross_compiling" = maybe; then cross_compiling=yes else - { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} + { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "cannot run C compiled programs. -If you meant to cross compile, use '--host'. -See 'config.log' for more details" "$LINENO" 5; } +If you meant to cross compile, use \`--host'. +See \`config.log' for more details" "$LINENO" 5; } fi fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5 printf "%s\n" "$cross_compiling" >&6; } -rm -f conftest.$ac_ext conftest$ac_cv_exeext \ - conftest.o conftest.obj conftest.out +rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out ac_clean_files=$ac_clean_files_save { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5 printf %s "checking for suffix of object files... " >&6; } if test ${ac_cv_objext+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int @@ -6143,18 +6096,16 @@ then : break;; esac done -else case e in #( - e) printf "%s\n" "$as_me: failed program was:" >&5 +else $as_nop + printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 -{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} +{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of object files: cannot compile -See 'config.log' for more details" "$LINENO" 5; } ;; -esac +See \`config.log' for more details" "$LINENO" 5; } fi -rm -f conftest.$ac_cv_objext conftest.$ac_ext ;; -esac +rm -f conftest.$ac_cv_objext conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5 printf "%s\n" "$ac_cv_objext" >&6; } @@ -6165,8 +6116,8 @@ printf %s "checking whether the compiler if test ${ac_cv_c_compiler_gnu+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int @@ -6183,14 +6134,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_compiler_gnu=yes -else case e in #( - e) ac_compiler_gnu=no ;; -esac +else $as_nop + ac_compiler_gnu=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ac_cv_c_compiler_gnu=$ac_compiler_gnu - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5 printf "%s\n" "$ac_cv_c_compiler_gnu" >&6; } @@ -6208,8 +6157,8 @@ printf %s "checking whether $CC accepts if test ${ac_cv_prog_cc_g+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_save_c_werror_flag=$ac_c_werror_flag +else $as_nop + ac_save_c_werror_flag=$ac_c_werror_flag ac_c_werror_flag=yes ac_cv_prog_cc_g=no CFLAGS="-g" @@ -6227,8 +6176,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_g=yes -else case e in #( - e) CFLAGS="" +else $as_nop + CFLAGS="" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -6243,8 +6192,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : -else case e in #( - e) ac_c_werror_flag=$ac_save_c_werror_flag +else $as_nop + ac_c_werror_flag=$ac_save_c_werror_flag CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -6261,15 +6210,12 @@ if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_g=yes fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext - ac_c_werror_flag=$ac_save_c_werror_flag ;; -esac + ac_c_werror_flag=$ac_save_c_werror_flag fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5 printf "%s\n" "$ac_cv_prog_cc_g" >&6; } @@ -6296,8 +6242,8 @@ printf %s "checking for $CC option to en if test ${ac_cv_prog_cc_c11+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_cv_prog_cc_c11=no +else $as_nop + ac_cv_prog_cc_c11=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -6314,28 +6260,25 @@ rm -f core conftest.err conftest.$ac_obj test "x$ac_cv_prog_cc_c11" != "xno" && break done rm -f conftest.$ac_ext -CC=$ac_save_CC ;; -esac +CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c11" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } -else case e in #( - e) if test "x$ac_cv_prog_cc_c11" = x +else $as_nop + if test "x$ac_cv_prog_cc_c11" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5 printf "%s\n" "$ac_cv_prog_cc_c11" >&6; } - CC="$CC $ac_cv_prog_cc_c11" ;; -esac + CC="$CC $ac_cv_prog_cc_c11" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11 - ac_prog_cc_stdc=c11 ;; -esac + ac_prog_cc_stdc=c11 fi fi if test x$ac_prog_cc_stdc = xno @@ -6345,8 +6288,8 @@ printf %s "checking for $CC option to en if test ${ac_cv_prog_cc_c99+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_cv_prog_cc_c99=no +else $as_nop + ac_cv_prog_cc_c99=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -6363,28 +6306,25 @@ rm -f core conftest.err conftest.$ac_obj test "x$ac_cv_prog_cc_c99" != "xno" && break done rm -f conftest.$ac_ext -CC=$ac_save_CC ;; -esac +CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c99" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } -else case e in #( - e) if test "x$ac_cv_prog_cc_c99" = x +else $as_nop + if test "x$ac_cv_prog_cc_c99" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5 printf "%s\n" "$ac_cv_prog_cc_c99" >&6; } - CC="$CC $ac_cv_prog_cc_c99" ;; -esac + CC="$CC $ac_cv_prog_cc_c99" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99 - ac_prog_cc_stdc=c99 ;; -esac + ac_prog_cc_stdc=c99 fi fi if test x$ac_prog_cc_stdc = xno @@ -6394,8 +6334,8 @@ printf %s "checking for $CC option to en if test ${ac_cv_prog_cc_c89+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_cv_prog_cc_c89=no +else $as_nop + ac_cv_prog_cc_c89=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -6412,28 +6352,25 @@ rm -f core conftest.err conftest.$ac_obj test "x$ac_cv_prog_cc_c89" != "xno" && break done rm -f conftest.$ac_ext -CC=$ac_save_CC ;; -esac +CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c89" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } -else case e in #( - e) if test "x$ac_cv_prog_cc_c89" = x +else $as_nop + if test "x$ac_cv_prog_cc_c89" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5 printf "%s\n" "$ac_cv_prog_cc_c89" >&6; } - CC="$CC $ac_cv_prog_cc_c89" ;; -esac + CC="$CC $ac_cv_prog_cc_c89" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89 - ac_prog_cc_stdc=c89 ;; -esac + ac_prog_cc_stdc=c89 fi fi @@ -6458,8 +6395,8 @@ if test -z "$CPP"; then if test ${ac_cv_prog_CPP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) # Double quotes because $CC needs to be expanded +else $as_nop + # Double quotes because $CC needs to be expanded for CPP in "$CC -E" "$CC -E -traditional-cpp" cpp /lib/cpp do ac_preproc_ok=false @@ -6477,10 +6414,9 @@ _ACEOF if ac_fn_c_try_cpp "$LINENO" then : -else case e in #( - e) # Broken: fails on valid input. -continue ;; -esac +else $as_nop + # Broken: fails on valid input. +continue fi rm -f conftest.err conftest.i conftest.$ac_ext @@ -6494,16 +6430,15 @@ if ac_fn_c_try_cpp "$LINENO" then : # Broken: success on invalid input. continue -else case e in #( - e) # Passes both tests. +else $as_nop + # Passes both tests. ac_preproc_ok=: -break ;; -esac +break fi rm -f conftest.err conftest.i conftest.$ac_ext done -# Because of 'break', _AC_PREPROC_IFELSE's cleaning code was skipped. +# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok then : @@ -6512,8 +6447,7 @@ fi done ac_cv_prog_CPP=$CPP - ;; -esac + fi CPP=$ac_cv_prog_CPP else @@ -6536,10 +6470,9 @@ _ACEOF if ac_fn_c_try_cpp "$LINENO" then : -else case e in #( - e) # Broken: fails on valid input. -continue ;; -esac +else $as_nop + # Broken: fails on valid input. +continue fi rm -f conftest.err conftest.i conftest.$ac_ext @@ -6553,26 +6486,24 @@ if ac_fn_c_try_cpp "$LINENO" then : # Broken: success on invalid input. continue -else case e in #( - e) # Passes both tests. +else $as_nop + # Passes both tests. ac_preproc_ok=: -break ;; -esac +break fi rm -f conftest.err conftest.i conftest.$ac_ext done -# Because of 'break', _AC_PREPROC_IFELSE's cleaning code was skipped. +# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok then : -else case e in #( - e) { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} +else $as_nop + { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "C preprocessor \"$CPP\" fails sanity check -See 'config.log' for more details" "$LINENO" 5; } ;; -esac +See \`config.log' for more details" "$LINENO" 5; } fi ac_ext=c @@ -6613,8 +6544,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_PCRE_CONFIG+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$PCRE_CONFIG"; then +else $as_nop + if test -n "$PCRE_CONFIG"; then ac_cv_prog_PCRE_CONFIG="$PCRE_CONFIG" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -6636,8 +6567,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi PCRE_CONFIG=$ac_cv_prog_PCRE_CONFIG if test -n "$PCRE_CONFIG"; then @@ -6663,8 +6593,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_ac_ct_PCRE_CONFIG+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$ac_ct_PCRE_CONFIG"; then +else $as_nop + if test -n "$ac_ct_PCRE_CONFIG"; then ac_cv_prog_ac_ct_PCRE_CONFIG="$ac_ct_PCRE_CONFIG" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -6686,8 +6616,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi ac_ct_PCRE_CONFIG=$ac_cv_prog_ac_ct_PCRE_CONFIG if test -n "$ac_ct_PCRE_CONFIG"; then @@ -6924,140 +6853,6 @@ save_CPPFLAGS="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $PCRE_INCLUDES" -{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for egrep -e" >&5 -printf %s "checking for egrep -e... " >&6; } -if test ${ac_cv_path_EGREP_TRADITIONAL+y} -then : - printf %s "(cached) " >&6 -else case e in #( - e) if test -z "$EGREP_TRADITIONAL"; then - ac_path_EGREP_TRADITIONAL_found=false - # Loop through the user's path and test for each of PROGNAME-LIST - as_save_IFS=$IFS; IFS=$PATH_SEPARATOR -for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin -do - IFS=$as_save_IFS - case $as_dir in #((( - '') as_dir=./ ;; - */) ;; - *) as_dir=$as_dir/ ;; - esac - for ac_prog in grep ggrep - do - for ac_exec_ext in '' $ac_executable_extensions; do - ac_path_EGREP_TRADITIONAL="$as_dir$ac_prog$ac_exec_ext" - as_fn_executable_p "$ac_path_EGREP_TRADITIONAL" || continue -# Check for GNU ac_path_EGREP_TRADITIONAL and select it if it is found. - # Check for GNU $ac_path_EGREP_TRADITIONAL -case `"$ac_path_EGREP_TRADITIONAL" --version 2>&1` in #( -*GNU*) - ac_cv_path_EGREP_TRADITIONAL="$ac_path_EGREP_TRADITIONAL" ac_path_EGREP_TRADITIONAL_found=:;; -#( -*) - ac_count=0 - printf %s 0123456789 >"conftest.in" - while : - do - cat "conftest.in" "conftest.in" >"conftest.tmp" - mv "conftest.tmp" "conftest.in" - cp "conftest.in" "conftest.nl" - printf "%s\n" 'EGREP_TRADITIONAL' >> "conftest.nl" - "$ac_path_EGREP_TRADITIONAL" -E 'EGR(EP|AC)_TRADITIONAL$' < "conftest.nl" >"conftest.out" 2>/dev/null || break - diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break - as_fn_arith $ac_count + 1 && ac_count=$as_val - if test $ac_count -gt ${ac_path_EGREP_TRADITIONAL_max-0}; then - # Best one so far, save it but keep looking for a better one - ac_cv_path_EGREP_TRADITIONAL="$ac_path_EGREP_TRADITIONAL" - ac_path_EGREP_TRADITIONAL_max=$ac_count - fi - # 10*(2^10) chars as input seems more than enough - test $ac_count -gt 10 && break - done - rm -f conftest.in conftest.tmp conftest.nl conftest.out;; -esac - - $ac_path_EGREP_TRADITIONAL_found && break 3 - done - done - done -IFS=$as_save_IFS - if test -z "$ac_cv_path_EGREP_TRADITIONAL"; then - : - fi -else - ac_cv_path_EGREP_TRADITIONAL=$EGREP_TRADITIONAL -fi - - if test "$ac_cv_path_EGREP_TRADITIONAL" -then : - ac_cv_path_EGREP_TRADITIONAL="$ac_cv_path_EGREP_TRADITIONAL -E" -else case e in #( - e) if test -z "$EGREP_TRADITIONAL"; then - ac_path_EGREP_TRADITIONAL_found=false - # Loop through the user's path and test for each of PROGNAME-LIST - as_save_IFS=$IFS; IFS=$PATH_SEPARATOR -for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin -do - IFS=$as_save_IFS - case $as_dir in #((( - '') as_dir=./ ;; - */) ;; - *) as_dir=$as_dir/ ;; - esac - for ac_prog in egrep - do - for ac_exec_ext in '' $ac_executable_extensions; do - ac_path_EGREP_TRADITIONAL="$as_dir$ac_prog$ac_exec_ext" - as_fn_executable_p "$ac_path_EGREP_TRADITIONAL" || continue -# Check for GNU ac_path_EGREP_TRADITIONAL and select it if it is found. - # Check for GNU $ac_path_EGREP_TRADITIONAL -case `"$ac_path_EGREP_TRADITIONAL" --version 2>&1` in #( -*GNU*) - ac_cv_path_EGREP_TRADITIONAL="$ac_path_EGREP_TRADITIONAL" ac_path_EGREP_TRADITIONAL_found=:;; -#( -*) - ac_count=0 - printf %s 0123456789 >"conftest.in" - while : - do - cat "conftest.in" "conftest.in" >"conftest.tmp" - mv "conftest.tmp" "conftest.in" - cp "conftest.in" "conftest.nl" - printf "%s\n" 'EGREP_TRADITIONAL' >> "conftest.nl" - "$ac_path_EGREP_TRADITIONAL" 'EGR(EP|AC)_TRADITIONAL$' < "conftest.nl" >"conftest.out" 2>/dev/null || break - diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break - as_fn_arith $ac_count + 1 && ac_count=$as_val - if test $ac_count -gt ${ac_path_EGREP_TRADITIONAL_max-0}; then - # Best one so far, save it but keep looking for a better one - ac_cv_path_EGREP_TRADITIONAL="$ac_path_EGREP_TRADITIONAL" - ac_path_EGREP_TRADITIONAL_max=$ac_count - fi - # 10*(2^10) chars as input seems more than enough - test $ac_count -gt 10 && break - done - rm -f conftest.in conftest.tmp conftest.nl conftest.out;; -esac - - $ac_path_EGREP_TRADITIONAL_found && break 3 - done - done - done -IFS=$as_save_IFS - if test -z "$ac_cv_path_EGREP_TRADITIONAL"; then - as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 - fi -else - ac_cv_path_EGREP_TRADITIONAL=$EGREP_TRADITIONAL -fi - ;; -esac -fi ;; -esac -fi -{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP_TRADITIONAL" >&5 -printf "%s\n" "$ac_cv_path_EGREP_TRADITIONAL" >&6; } - EGREP_TRADITIONAL=$ac_cv_path_EGREP_TRADITIONAL - cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -7072,12 +6867,11 @@ yes _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "yes" >/dev/null 2>&1 + $EGREP "yes" >/dev/null 2>&1 then : pcre_have_dupnames=yes -else case e in #( - e) pcre_have_dupnames=no ;; -esac +else $as_nop + pcre_have_dupnames=no fi rm -rf conftest* @@ -7261,8 +7055,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_path_RM+y} then : printf %s "(cached) " >&6 -else case e in #( - e) case $RM in +else $as_nop + case $RM in [\\/]* | ?:[\\/]*) ac_cv_path_RM="$RM" # Let the user override the test with a path. ;; @@ -7287,7 +7081,6 @@ done IFS=$as_save_IFS ;; -esac ;; esac fi RM=$ac_cv_path_RM @@ -7307,8 +7100,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_path_PKGCONFIG+y} then : printf %s "(cached) " >&6 -else case e in #( - e) case $PKGCONFIG in +else $as_nop + case $PKGCONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_PKGCONFIG="$PKGCONFIG" # Let the user override the test with a path. ;; @@ -7333,7 +7126,6 @@ done IFS=$as_save_IFS ;; -esac ;; esac fi PKGCONFIG=$ac_cv_path_PKGCONFIG @@ -7353,8 +7145,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_path_RSYNC+y} then : printf %s "(cached) " >&6 -else case e in #( - e) case $RSYNC in +else $as_nop + case $RSYNC in [\\/]* | ?:[\\/]*) ac_cv_path_RSYNC="$RSYNC" # Let the user override the test with a path. ;; @@ -7379,7 +7171,6 @@ done IFS=$as_save_IFS ;; -esac ;; esac fi RSYNC=$ac_cv_path_RSYNC @@ -7399,8 +7190,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_path_SVN+y} then : printf %s "(cached) " >&6 -else case e in #( - e) case $SVN in +else $as_nop + case $SVN in [\\/]* | ?:[\\/]*) ac_cv_path_SVN="$SVN" # Let the user override the test with a path. ;; @@ -7425,7 +7216,6 @@ done IFS=$as_save_IFS ;; -esac ;; esac fi SVN=$ac_cv_path_SVN @@ -7447,8 +7237,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_AWK+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$AWK"; then +else $as_nop + if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -7470,8 +7260,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then @@ -7505,8 +7294,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_RANLIB+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$RANLIB"; then +else $as_nop + if test -n "$RANLIB"; then ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -7528,8 +7317,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi RANLIB=$ac_cv_prog_RANLIB if test -n "$RANLIB"; then @@ -7551,8 +7339,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_ac_ct_RANLIB+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$ac_ct_RANLIB"; then +else $as_nop + if test -n "$ac_ct_RANLIB"; then ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -7574,8 +7362,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB if test -n "$ac_ct_RANLIB"; then @@ -7610,8 +7397,8 @@ printf %s "checking for $ac_word... " >& if test ${ac_cv_prog_LYNX_PATH+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test -n "$LYNX_PATH"; then +else $as_nop + if test -n "$LYNX_PATH"; then ac_cv_prog_LYNX_PATH="$LYNX_PATH" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR @@ -7633,8 +7420,7 @@ done done IFS=$as_save_IFS -fi ;; -esac +fi fi LYNX_PATH=$ac_cv_prog_LYNX_PATH if test -n "$LYNX_PATH"; then @@ -7704,8 +7490,8 @@ printf %s "checking whether it is safe t if test ${ac_cv_safe_to_define___extensions__+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ # define __EXTENSIONS__ 1 @@ -7721,12 +7507,10 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_safe_to_define___extensions__=yes -else case e in #( - e) ac_cv_safe_to_define___extensions__=no ;; -esac +else $as_nop + ac_cv_safe_to_define___extensions__=no fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5 printf "%s\n" "$ac_cv_safe_to_define___extensions__" >&6; } @@ -7736,8 +7520,8 @@ printf %s "checking whether _XOPEN_SOURC if test ${ac_cv_should_define__xopen_source+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_cv_should_define__xopen_source=no +else $as_nop + ac_cv_should_define__xopen_source=no if test $ac_cv_header_wchar_h = yes then : cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -7756,8 +7540,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #define _XOPEN_SOURCE 500 @@ -7775,12 +7559,10 @@ if ac_fn_c_try_compile "$LINENO" then : ac_cv_should_define__xopen_source=yes fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext -fi ;; -esac +fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5 printf "%s\n" "$ac_cv_should_define__xopen_source" >&6; } @@ -7805,8 +7587,6 @@ printf "%s\n" "$ac_cv_should_define__xop printf "%s\n" "#define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h - printf "%s\n" "#define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h - printf "%s\n" "#define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h printf "%s\n" "#define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h @@ -7826,9 +7606,8 @@ then : printf "%s\n" "#define _POSIX_1_SOURCE 2" >>confdefs.h -else case e in #( - e) MINIX= ;; -esac +else $as_nop + MINIX= fi if test $ac_cv_safe_to_define___extensions__ = yes then : @@ -7848,21 +7627,15 @@ printf %s "checking for library containi if test ${ac_cv_search_strerror+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_func_search_save_LIBS=$LIBS +else $as_nop + ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char strerror (void); + builtin and then its argument prototype would still apply. */ +char strerror (); int main (void) { @@ -7893,13 +7666,11 @@ done if test ${ac_cv_search_strerror+y} then : -else case e in #( - e) ac_cv_search_strerror=no ;; -esac +else $as_nop + ac_cv_search_strerror=no fi rm conftest.$ac_ext -LIBS=$ac_func_search_save_LIBS ;; -esac +LIBS=$ac_func_search_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_strerror" >&5 printf "%s\n" "$ac_cv_search_strerror" >&6; } @@ -7929,8 +7700,8 @@ printf %s "checking for APR version 1.3. if test ${ap_cv_aprver13+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -7941,16 +7712,14 @@ good _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "good" >/dev/null 2>&1 + $EGREP "good" >/dev/null 2>&1 then : ap_cv_aprver13=yes -else case e in #( - e) ap_cv_aprver13=no ;; -esac +else $as_nop + ap_cv_aprver13=no fi rm -rf conftest* - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_aprver13" >&5 printf "%s\n" "$ap_cv_aprver13" >&6; } @@ -7990,8 +7759,8 @@ printf %s "checking for APR-util version if test ${ap_cv_apuver13+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -8002,16 +7771,14 @@ good _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "good" >/dev/null 2>&1 + $EGREP "good" >/dev/null 2>&1 then : ap_cv_apuver13=yes -else case e in #( - e) ap_cv_apuver13=no ;; -esac +else $as_nop + ap_cv_apuver13=no fi rm -rf conftest* - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_apuver13" >&5 printf "%s\n" "$ap_cv_apuver13" >&6; } @@ -8045,8 +7812,8 @@ printf %s "checking for APR-util version if test ${ap_cv_apuver13+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -8057,16 +7824,14 @@ good _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "good" >/dev/null 2>&1 + $EGREP "good" >/dev/null 2>&1 then : ap_cv_apuver13=yes -else case e in #( - e) ap_cv_apuver13=no ;; -esac +else $as_nop + ap_cv_apuver13=no fi rm -rf conftest* - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_apuver13" >&5 printf "%s\n" "$ap_cv_apuver13" >&6; } @@ -8127,8 +7892,8 @@ printf %s "checking for egrep... " >&6; if test ${ac_cv_path_EGREP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 +else $as_nop + if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 then ac_cv_path_EGREP="$GREP -E" else if test -z "$EGREP"; then @@ -8150,10 +7915,9 @@ do as_fn_executable_p "$ac_path_EGREP" || continue # Check for GNU ac_path_EGREP and select it if it is found. # Check for GNU $ac_path_EGREP -case `"$ac_path_EGREP" --version 2>&1` in #( +case `"$ac_path_EGREP" --version 2>&1` in *GNU*) ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;; -#( *) ac_count=0 printf %s 0123456789 >"conftest.in" @@ -8189,15 +7953,12 @@ else ac_cv_path_EGREP=$EGREP fi - fi ;; -esac + fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5 printf "%s\n" "$ac_cv_path_EGREP" >&6; } EGREP="$ac_cv_path_EGREP" - EGREP_TRADITIONAL=$EGREP - ac_cv_path_EGREP_TRADITIONAL=$EGREP ac_fn_c_check_header_compile "$LINENO" "string.h" "ac_cv_header_string_h" "$ac_includes_default" @@ -8278,8 +8039,8 @@ printf %s "checking for sys/wait.h that if test ${ac_cv_header_sys_wait_h+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include @@ -8303,12 +8064,10 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_header_sys_wait_h=yes -else case e in #( - e) ac_cv_header_sys_wait_h=no ;; -esac +else $as_nop + ac_cv_header_sys_wait_h=no fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_sys_wait_h" >&5 printf "%s\n" "$ac_cv_header_sys_wait_h" >&6; } @@ -8325,8 +8084,8 @@ printf %s "checking for an ANSI C-confor if test ${ac_cv_c_const+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int @@ -8390,12 +8149,10 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_c_const=yes -else case e in #( - e) ac_cv_c_const=no ;; -esac +else $as_nop + ac_cv_c_const=no fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5 printf "%s\n" "$ac_cv_c_const" >&6; } @@ -8413,21 +8170,15 @@ printf %s "checking for library containi if test ${ac_cv_search_sqrt+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_func_search_save_LIBS=$LIBS +else $as_nop + ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char sqrt (void); + builtin and then its argument prototype would still apply. */ +char sqrt (); int main (void) { @@ -8458,13 +8209,11 @@ done if test ${ac_cv_search_sqrt+y} then : -else case e in #( - e) ac_cv_search_sqrt=no ;; -esac +else $as_nop + ac_cv_search_sqrt=no fi rm conftest.$ac_ext -LIBS=$ac_func_search_save_LIBS ;; -esac +LIBS=$ac_func_search_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_sqrt" >&5 printf "%s\n" "$ac_cv_search_sqrt" >&6; } @@ -8489,21 +8238,15 @@ printf %s "checking for library containi if test ${ac_cv_search_crypt+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_func_search_save_LIBS=$LIBS +else $as_nop + ac_func_search_save_LIBS=$LIBS cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char crypt (void); + builtin and then its argument prototype would still apply. */ +char crypt (); int main (void) { @@ -8534,13 +8277,11 @@ done if test ${ac_cv_search_crypt+y} then : -else case e in #( - e) ac_cv_search_crypt=no ;; -esac +else $as_nop + ac_cv_search_crypt=no fi rm conftest.$ac_ext -LIBS=$ac_func_search_save_LIBS ;; -esac +LIBS=$ac_func_search_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_crypt" >&5 printf "%s\n" "$ac_cv_search_crypt" >&6; } @@ -8564,13 +8305,13 @@ printf %s "checking whether crypt() supp if test ${ap_cv_crypt_sha2+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + if test "$cross_compiling" = yes then : ap_cv_crypt_sha2=no -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include @@ -8596,16 +8337,13 @@ _ACEOF if ac_fn_c_try_run "$LINENO" then : ap_cv_crypt_sha2=yes -else case e in #( - e) ap_cv_crypt_sha2=no ;; -esac +else $as_nop + ap_cv_crypt_sha2=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ - conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac + conftest.$ac_objext conftest.beam conftest.$ac_ext fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_crypt_sha2" >&5 printf "%s\n" "$ap_cv_crypt_sha2" >&6; } @@ -8688,12 +8426,12 @@ printf %s "checking for void pointer len if test ${ap_cv_void_ptr_lt_long+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test "$cross_compiling" = yes +else $as_nop + if test "$cross_compiling" = yes then : ap_cv_void_ptr_lt_long=yes -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void) @@ -8704,16 +8442,13 @@ _ACEOF if ac_fn_c_try_run "$LINENO" then : ap_cv_void_ptr_lt_long=no -else case e in #( - e) ap_cv_void_ptr_lt_long=yes ;; -esac +else $as_nop + ap_cv_void_ptr_lt_long=yes fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ - conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac + conftest.$ac_objext conftest.beam conftest.$ac_ext fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_void_ptr_lt_long" >&5 printf "%s\n" "$ap_cv_void_ptr_lt_long" >&6; } @@ -8730,12 +8465,12 @@ printf %s "checking for gettid() via sys if test ${ap_cv_gettid+y} then : printf %s "(cached) " >&6 -else case e in #( - e) if test "$cross_compiling" = yes +else $as_nop + if test "$cross_compiling" = yes then : ap_cv_gettid=no -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #define _GNU_SOURCE #include @@ -8747,16 +8482,13 @@ _ACEOF if ac_fn_c_try_run "$LINENO" then : ap_cv_gettid=yes -else case e in #( - e) ap_cv_gettid=no ;; -esac +else $as_nop + ap_cv_gettid=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ - conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac + conftest.$ac_objext conftest.beam conftest.$ac_ext fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_gettid" >&5 printf "%s\n" "$ap_cv_gettid" >&6; } @@ -8780,8 +8512,8 @@ printf %s "checking for tm_gmtoff in str if test ${ac_cv_struct_tm_gmtoff+y} then : printf %s "(cached) " >&6 -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include @@ -8796,12 +8528,10 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_struct_tm_gmtoff=yes -else case e in #( - e) ac_cv_struct_tm_gmtoff=no ;; -esac +else $as_nop + ac_cv_struct_tm_gmtoff=no fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_struct_tm_gmtoff" >&5 printf "%s\n" "$ac_cv_struct_tm_gmtoff" >&6; } @@ -8824,22 +8554,16 @@ printf %s "checking for sd_notify in -ls if test ${ac_cv_lib_systemd_daemon_sd_notify+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-lsystemd-daemon $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char sd_notify (void); + builtin and then its argument prototype would still apply. */ +char sd_notify (); int main (void) { @@ -8851,14 +8575,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_systemd_daemon_sd_notify=yes -else case e in #( - e) ac_cv_lib_systemd_daemon_sd_notify=no ;; -esac +else $as_nop + ac_cv_lib_systemd_daemon_sd_notify=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_systemd_daemon_sd_notify" >&5 printf "%s\n" "$ac_cv_lib_systemd_daemon_sd_notify" >&6; } @@ -8916,9 +8638,8 @@ esac if test ${with_port+y} then : withval=$with_port; if test "$withval" = "yes"; then as_fn_error $? "'option --with-port requires a value (the TCP port number)'" "$LINENO" 5; else PORT="$withval"; fi -else case e in #( - e) PORT=80 ;; -esac +else $as_nop + PORT=80 fi @@ -8927,9 +8648,8 @@ fi if test ${with_sslport+y} then : withval=$with_sslport; if test "$withval" = "yes"; then as_fn_error $? "'option --with-sslport requires a value (the SSL TCP port number)'" "$LINENO" 5; else SSLPORT="$withval"; fi -else case e in #( - e) SSLPORT=443 ;; -esac +else $as_nop + SSLPORT=443 fi @@ -8964,11 +8684,10 @@ then : as_fn_error $? "'DTrace Support in the build system is not complete. Patches Welcome!'" "$LINENO" 5 fi -else case e in #( - e) +else $as_nop + enable_dtrace=no - ;; -esac + fi @@ -9044,11 +8763,10 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: Setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&5 printf "%s\n" "$as_me: Setting \"LOAD_ALL_MODULES\" to $LOAD_ALL_MODULES" >&6;} -else case e in #( - e) +else $as_nop + LOAD_ALL_MODULES="no" - ;; -esac + fi @@ -9087,8 +8805,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__std_c89+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -std=c89 -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9105,14 +8823,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__std_c89=yes -else case e in #( - e) ac_cv_gcc__std_c89=no ;; -esac +else $as_nop + ac_cv_gcc__std_c89=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__std_c89" >&5 printf "%s\n" "$ac_cv_gcc__std_c89" >&6; } @@ -9150,8 +8866,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Werror+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9168,14 +8884,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Werror=yes -else case e in #( - e) ac_cv_gcc__Werror=no ;; -esac +else $as_nop + ac_cv_gcc__Werror=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror" >&5 printf "%s\n" "$ac_cv_gcc__Werror" >&6; } @@ -9213,8 +8927,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wall+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wall -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9231,14 +8945,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wall=yes -else case e in #( - e) ac_cv_gcc__Wall=no ;; -esac +else $as_nop + ac_cv_gcc__Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wall" >&5 printf "%s\n" "$ac_cv_gcc__Wall" >&6; } @@ -9276,8 +8988,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wstrict_prototypes+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wstrict-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9294,14 +9006,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wstrict_prototypes=yes -else case e in #( - e) ac_cv_gcc__Wstrict_prototypes=no ;; -esac +else $as_nop + ac_cv_gcc__Wstrict_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wstrict_prototypes" >&5 printf "%s\n" "$ac_cv_gcc__Wstrict_prototypes" >&6; } @@ -9339,8 +9049,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wmissing_prototypes+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9357,14 +9067,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wmissing_prototypes=yes -else case e in #( - e) ac_cv_gcc__Wmissing_prototypes=no ;; -esac +else $as_nop + ac_cv_gcc__Wmissing_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_prototypes" >&5 printf "%s\n" "$ac_cv_gcc__Wmissing_prototypes" >&6; } @@ -9402,8 +9110,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wmissing_declarations+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-declarations -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9420,14 +9128,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wmissing_declarations=yes -else case e in #( - e) ac_cv_gcc__Wmissing_declarations=no ;; -esac +else $as_nop + ac_cv_gcc__Wmissing_declarations=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_declarations" >&5 printf "%s\n" "$ac_cv_gcc__Wmissing_declarations" >&6; } @@ -9465,8 +9171,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wdeclaration_after_statement+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wdeclaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9483,14 +9189,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wdeclaration_after_statement=yes -else case e in #( - e) ac_cv_gcc__Wdeclaration_after_statement=no ;; -esac +else $as_nop + ac_cv_gcc__Wdeclaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wdeclaration_after_statement" >&5 printf "%s\n" "$ac_cv_gcc__Wdeclaration_after_statement" >&6; } @@ -9528,8 +9232,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wpointer_arith+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wpointer-arith -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9546,14 +9250,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wpointer_arith=yes -else case e in #( - e) ac_cv_gcc__Wpointer_arith=no ;; -esac +else $as_nop + ac_cv_gcc__Wpointer_arith=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wpointer_arith" >&5 printf "%s\n" "$ac_cv_gcc__Wpointer_arith" >&6; } @@ -9591,8 +9293,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wformat+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9609,14 +9311,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wformat=yes -else case e in #( - e) ac_cv_gcc__Wformat=no ;; -esac +else $as_nop + ac_cv_gcc__Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat" >&5 printf "%s\n" "$ac_cv_gcc__Wformat" >&6; } @@ -9654,8 +9354,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wformat_security+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9672,14 +9372,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wformat_security=yes -else case e in #( - e) ac_cv_gcc__Wformat_security=no ;; -esac +else $as_nop + ac_cv_gcc__Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat_security" >&5 printf "%s\n" "$ac_cv_gcc__Wformat_security" >&6; } @@ -9717,8 +9415,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wunused+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wunused -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9735,14 +9433,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wunused=yes -else case e in #( - e) ac_cv_gcc__Wunused=no ;; -esac +else $as_nop + ac_cv_gcc__Wunused=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wunused" >&5 printf "%s\n" "$ac_cv_gcc__Wunused" >&6; } @@ -9844,8 +9540,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__O0+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -O0 -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9862,14 +9558,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__O0=yes -else case e in #( - e) ac_cv_gcc__O0=no ;; -esac +else $as_nop + ac_cv_gcc__O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__O0" >&5 printf "%s\n" "$ac_cv_gcc__O0" >&6; } @@ -9907,8 +9601,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wall+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wall -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9925,14 +9619,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wall=yes -else case e in #( - e) ac_cv_gcc__Wall=no ;; -esac +else $as_nop + ac_cv_gcc__Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wall" >&5 printf "%s\n" "$ac_cv_gcc__Wall" >&6; } @@ -9970,8 +9662,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wstrict_prototypes+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wstrict-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -9988,14 +9680,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wstrict_prototypes=yes -else case e in #( - e) ac_cv_gcc__Wstrict_prototypes=no ;; -esac +else $as_nop + ac_cv_gcc__Wstrict_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wstrict_prototypes" >&5 printf "%s\n" "$ac_cv_gcc__Wstrict_prototypes" >&6; } @@ -10033,8 +9723,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wmissing_prototypes+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-prototypes -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10051,14 +9741,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wmissing_prototypes=yes -else case e in #( - e) ac_cv_gcc__Wmissing_prototypes=no ;; -esac +else $as_nop + ac_cv_gcc__Wmissing_prototypes=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_prototypes" >&5 printf "%s\n" "$ac_cv_gcc__Wmissing_prototypes" >&6; } @@ -10096,8 +9784,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wmissing_declarations+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wmissing-declarations -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10114,14 +9802,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wmissing_declarations=yes -else case e in #( - e) ac_cv_gcc__Wmissing_declarations=no ;; -esac +else $as_nop + ac_cv_gcc__Wmissing_declarations=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wmissing_declarations" >&5 printf "%s\n" "$ac_cv_gcc__Wmissing_declarations" >&6; } @@ -10159,8 +9845,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wdeclaration_after_statement+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wdeclaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10177,14 +9863,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wdeclaration_after_statement=yes -else case e in #( - e) ac_cv_gcc__Wdeclaration_after_statement=no ;; -esac +else $as_nop + ac_cv_gcc__Wdeclaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wdeclaration_after_statement" >&5 printf "%s\n" "$ac_cv_gcc__Wdeclaration_after_statement" >&6; } @@ -10222,8 +9906,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Werror_declaration_after_statement+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror=declaration-after-statement -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10240,14 +9924,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Werror_declaration_after_statement=yes -else case e in #( - e) ac_cv_gcc__Werror_declaration_after_statement=no ;; -esac +else $as_nop + ac_cv_gcc__Werror_declaration_after_statement=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror_declaration_after_statement" >&5 printf "%s\n" "$ac_cv_gcc__Werror_declaration_after_statement" >&6; } @@ -10285,8 +9967,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wpointer_arith+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wpointer-arith -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10303,14 +9985,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wpointer_arith=yes -else case e in #( - e) ac_cv_gcc__Wpointer_arith=no ;; -esac +else $as_nop + ac_cv_gcc__Wpointer_arith=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wpointer_arith" >&5 printf "%s\n" "$ac_cv_gcc__Wpointer_arith" >&6; } @@ -10348,8 +10028,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wformat+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10366,14 +10046,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wformat=yes -else case e in #( - e) ac_cv_gcc__Wformat=no ;; -esac +else $as_nop + ac_cv_gcc__Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat" >&5 printf "%s\n" "$ac_cv_gcc__Wformat" >&6; } @@ -10411,8 +10089,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Wformat_security+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Wformat-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10429,14 +10107,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Wformat_security=yes -else case e in #( - e) ac_cv_gcc__Wformat_security=no ;; -esac +else $as_nop + ac_cv_gcc__Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Wformat_security" >&5 printf "%s\n" "$ac_cv_gcc__Wformat_security" >&6; } @@ -10474,8 +10150,8 @@ printf %s "checking whether gcc accepts if test ${ac_cv_gcc__Werror_format_security+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS -Werror=format-security -Wno-strict-prototypes" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -10492,14 +10168,12 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_gcc__Werror_format_security=yes -else case e in #( - e) ac_cv_gcc__Werror_format_security=no ;; -esac +else $as_nop + ac_cv_gcc__Werror_format_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS="$save_CFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_gcc__Werror_format_security" >&5 printf "%s\n" "$ac_cv_gcc__Werror_format_security" >&6; } @@ -10568,8 +10242,8 @@ printf %s "checking whether $CC accepts if test ${ap_cv_cc_pie+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + save_CFLAGS=$CFLAGS save_LDFLAGS=$LDFLAGS CFLAGS="$CFLAGS -fPIE" @@ -10577,27 +10251,24 @@ else case e in #( if test "$cross_compiling" = yes then : ap_cv_cc_pie=yes -else case e in #( - e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ static int foo[30000]; int main () { return 0; } _ACEOF if ac_fn_c_try_run "$LINENO" then : ap_cv_cc_pie=yes -else case e in #( - e) ap_cv_cc_pie=no ;; -esac +else $as_nop + ap_cv_cc_pie=no fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ - conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac + conftest.$ac_objext conftest.beam conftest.$ac_ext fi CFLAGS=$save_CFLAGS LDFLAGS=$save_LDFLAGS - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_cv_cc_pie" >&5 printf "%s\n" "$ap_cv_cc_pie" >&6; } @@ -10635,12 +10306,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAS_DSO=yes -else case e in #( - e) ac_cv_define_APR_HAS_DSO=no ;; -esac +else $as_nop + ac_cv_define_APR_HAS_DSO=no fi rm -rf conftest* @@ -10734,9 +10404,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_file+y} then : enableval=$enable_authn_file; force_authn_file=$enableval -else case e in #( - e) enable_authn_file=yes ;; -esac +else $as_nop + enable_authn_file=yes fi _apmod_extra_msg="" @@ -10877,9 +10546,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_dbm+y} then : enableval=$enable_authn_dbm; force_authn_dbm=$enableval -else case e in #( - e) enable_authn_dbm=most ;; -esac +else $as_nop + enable_authn_dbm=most fi _apmod_extra_msg="" @@ -11020,9 +10688,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_anon+y} then : enableval=$enable_authn_anon; force_authn_anon=$enableval -else case e in #( - e) enable_authn_anon=most ;; -esac +else $as_nop + enable_authn_anon=most fi _apmod_extra_msg="" @@ -11163,9 +10830,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_dbd+y} then : enableval=$enable_authn_dbd; force_authn_dbd=$enableval -else case e in #( - e) enable_authn_dbd=most ;; -esac +else $as_nop + enable_authn_dbd=most fi _apmod_extra_msg="" @@ -11306,9 +10972,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_socache+y} then : enableval=$enable_authn_socache; force_authn_socache=$enableval -else case e in #( - e) enable_authn_socache=most ;; -esac +else $as_nop + enable_authn_socache=most fi _apmod_extra_msg="" @@ -11450,9 +11115,8 @@ printf %s "checking whether to enable mo if test ${enable_authn_core+y} then : enableval=$enable_authn_core; force_authn_core=$enableval -else case e in #( - e) enable_authn_core=yes ;; -esac +else $as_nop + enable_authn_core=yes fi _apmod_extra_msg="" @@ -11594,9 +11258,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_host+y} then : enableval=$enable_authz_host; force_authz_host=$enableval -else case e in #( - e) enable_authz_host=yes ;; -esac +else $as_nop + enable_authz_host=yes fi _apmod_extra_msg="" @@ -11737,9 +11400,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_groupfile+y} then : enableval=$enable_authz_groupfile; force_authz_groupfile=$enableval -else case e in #( - e) enable_authz_groupfile=yes ;; -esac +else $as_nop + enable_authz_groupfile=yes fi _apmod_extra_msg="" @@ -11880,9 +11542,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_user+y} then : enableval=$enable_authz_user; force_authz_user=$enableval -else case e in #( - e) enable_authz_user=yes ;; -esac +else $as_nop + enable_authz_user=yes fi _apmod_extra_msg="" @@ -12023,9 +11684,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_dbm+y} then : enableval=$enable_authz_dbm; force_authz_dbm=$enableval -else case e in #( - e) enable_authz_dbm=most ;; -esac +else $as_nop + enable_authz_dbm=most fi _apmod_extra_msg="" @@ -12166,9 +11826,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_owner+y} then : enableval=$enable_authz_owner; force_authz_owner=$enableval -else case e in #( - e) enable_authz_owner=most ;; -esac +else $as_nop + enable_authz_owner=most fi _apmod_extra_msg="" @@ -12309,9 +11968,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_dbd+y} then : enableval=$enable_authz_dbd; force_authz_dbd=$enableval -else case e in #( - e) enable_authz_dbd=most ;; -esac +else $as_nop + enable_authz_dbd=most fi _apmod_extra_msg="" @@ -12453,9 +12111,8 @@ printf %s "checking whether to enable mo if test ${enable_authz_core+y} then : enableval=$enable_authz_core; force_authz_core=$enableval -else case e in #( - e) enable_authz_core=yes ;; -esac +else $as_nop + enable_authz_core=yes fi _apmod_extra_msg="" @@ -12597,9 +12254,8 @@ printf %s "checking whether to enable mo if test ${enable_authnz_ldap+y} then : enableval=$enable_authnz_ldap; force_authnz_ldap=$enableval -else case e in #( - e) enable_authnz_ldap=most ;; -esac +else $as_nop + enable_authnz_ldap=most fi _apmod_extra_msg="" @@ -12662,8 +12318,8 @@ printf %s "checking for ldap support in if test ${ac_cv_APR_HAS_LDAP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + apache_old_cppflags="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -12676,18 +12332,16 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_APR_HAS_LDAP=yes -else case e in #( - e) ac_cv_APR_HAS_LDAP=no ;; -esac +else $as_nop + ac_cv_APR_HAS_LDAP=no fi rm -rf conftest* CPPFLAGS="$apache_old_cppflags" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_APR_HAS_LDAP" >&5 printf "%s\n" "$ac_cv_APR_HAS_LDAP" >&6; } @@ -12824,9 +12478,8 @@ printf %s "checking whether to enable mo if test ${enable_authnz_fcgi+y} then : enableval=$enable_authnz_fcgi; force_authnz_fcgi=$enableval -else case e in #( - e) enable_authnz_fcgi=no ;; -esac +else $as_nop + enable_authnz_fcgi=no fi _apmod_extra_msg="" @@ -12968,9 +12621,8 @@ printf %s "checking whether to enable mo if test ${enable_access_compat+y} then : enableval=$enable_access_compat; force_access_compat=$enableval -else case e in #( - e) enable_access_compat=yes ;; -esac +else $as_nop + enable_access_compat=yes fi _apmod_extra_msg="" @@ -13113,9 +12765,8 @@ printf %s "checking whether to enable mo if test ${enable_auth_basic+y} then : enableval=$enable_auth_basic; force_auth_basic=$enableval -else case e in #( - e) enable_auth_basic=yes ;; -esac +else $as_nop + enable_auth_basic=yes fi _apmod_extra_msg="" @@ -13256,9 +12907,8 @@ printf %s "checking whether to enable mo if test ${enable_auth_form+y} then : enableval=$enable_auth_form; force_auth_form=$enableval -else case e in #( - e) enable_auth_form=most ;; -esac +else $as_nop + enable_auth_form=most fi _apmod_extra_msg="" @@ -13399,9 +13049,8 @@ printf %s "checking whether to enable mo if test ${enable_auth_digest+y} then : enableval=$enable_auth_digest; force_auth_digest=$enableval -else case e in #( - e) enable_auth_digest=most ;; -esac +else $as_nop + enable_auth_digest=most fi _apmod_extra_msg="" @@ -13471,12 +13120,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAS_RANDOM=yes -else case e in #( - e) ac_cv_define_APR_HAS_RANDOM=no ;; -esac +else $as_nop + ac_cv_define_APR_HAS_RANDOM=no fi rm -rf conftest* @@ -13586,9 +13234,8 @@ printf %s "checking whether to enable mo if test ${enable_allowmethods+y} then : enableval=$enable_allowmethods; force_allowmethods=$enableval -else case e in #( - e) enable_allowmethods=most ;; -esac +else $as_nop + enable_allowmethods=most fi _apmod_extra_msg="" @@ -13785,9 +13432,8 @@ printf %s "checking whether to enable mo if test ${enable_isapi+y} then : enableval=$enable_isapi; force_isapi=$enableval -else case e in #( - e) enable_isapi=no ;; -esac +else $as_nop + enable_isapi=no fi _apmod_extra_msg="" @@ -13962,9 +13608,8 @@ printf %s "checking whether to enable mo if test ${enable_file_cache+y} then : enableval=$enable_file_cache; force_file_cache=$enableval -else case e in #( - e) enable_file_cache=most ;; -esac +else $as_nop + enable_file_cache=most fi _apmod_extra_msg="" @@ -14119,9 +13764,8 @@ printf %s "checking whether to enable mo if test ${enable_cache+y} then : enableval=$enable_cache; force_cache=$enableval -else case e in #( - e) enable_cache=most ;; -esac +else $as_nop + enable_cache=most fi _apmod_extra_msg="" @@ -14262,9 +13906,8 @@ printf %s "checking whether to enable mo if test ${enable_cache_disk+y} then : enableval=$enable_cache_disk; force_cache_disk=$enableval -else case e in #( - e) enable_cache_disk=most ;; -esac +else $as_nop + enable_cache_disk=most fi _apmod_extra_msg="" @@ -14426,9 +14069,8 @@ printf %s "checking whether to enable mo if test ${enable_cache_socache+y} then : enableval=$enable_cache_socache; force_cache_socache=$enableval -else case e in #( - e) enable_cache_socache=most ;; -esac +else $as_nop + enable_cache_socache=most fi _apmod_extra_msg="" @@ -14572,9 +14214,8 @@ printf %s "checking whether to enable mo if test ${enable_socache_shmcb+y} then : enableval=$enable_socache_shmcb; force_socache_shmcb=$enableval -else case e in #( - e) enable_socache_shmcb=most ;; -esac +else $as_nop + enable_socache_shmcb=most fi _apmod_extra_msg="" @@ -14715,9 +14356,8 @@ printf %s "checking whether to enable mo if test ${enable_socache_dbm+y} then : enableval=$enable_socache_dbm; force_socache_dbm=$enableval -else case e in #( - e) enable_socache_dbm=most ;; -esac +else $as_nop + enable_socache_dbm=most fi _apmod_extra_msg="" @@ -14858,9 +14498,8 @@ printf %s "checking whether to enable mo if test ${enable_socache_memcache+y} then : enableval=$enable_socache_memcache; force_socache_memcache=$enableval -else case e in #( - e) enable_socache_memcache=most ;; -esac +else $as_nop + enable_socache_memcache=most fi _apmod_extra_msg="" @@ -15001,9 +14640,8 @@ printf %s "checking whether to enable mo if test ${enable_socache_redis+y} then : enableval=$enable_socache_redis; force_socache_redis=$enableval -else case e in #( - e) enable_socache_redis=most ;; -esac +else $as_nop + enable_socache_redis=most fi _apmod_extra_msg="" @@ -15144,9 +14782,8 @@ printf %s "checking whether to enable mo if test ${enable_socache_dc+y} then : enableval=$enable_socache_dc; force_socache_dc=$enableval -else case e in #( - e) enable_socache_dc=no ;; -esac +else $as_nop + enable_socache_dc=no fi _apmod_extra_msg="" @@ -15397,9 +15034,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : -else case e in #( - e) ap_distcache_found="no" ;; -esac +else $as_nop + ap_distcache_found="no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ap_distcache_found" >&5 @@ -15452,9 +15088,8 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : -else case e in #( - e) ap_distcache_found="no" ;; -esac +else $as_nop + ap_distcache_found="no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext @@ -15665,12 +15300,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAS_DSO=yes -else case e in #( - e) ac_cv_define_APR_HAS_DSO=no ;; -esac +else $as_nop + ac_cv_define_APR_HAS_DSO=no fi rm -rf conftest* @@ -15743,9 +15377,8 @@ printf %s "checking whether to enable mo if test ${enable_so+y} then : enableval=$enable_so; force_so=$enableval -else case e in #( - e) enable_so=$enable_so ;; -esac +else $as_nop + enable_so=$enable_so fi _apmod_extra_msg="" @@ -15887,9 +15520,8 @@ printf %s "checking whether to enable mo if test ${enable_watchdog+y} then : enableval=$enable_watchdog; force_watchdog=$enableval -else case e in #( - e) enable_watchdog=most ;; -esac +else $as_nop + enable_watchdog=most fi _apmod_extra_msg="" @@ -15959,12 +15591,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAS_THREADS=yes -else case e in #( - e) ac_cv_define_APR_HAS_THREADS=no ;; -esac +else $as_nop + ac_cv_define_APR_HAS_THREADS=no fi rm -rf conftest* @@ -16074,9 +15705,8 @@ printf %s "checking whether to enable mo if test ${enable_macro+y} then : enableval=$enable_macro; force_macro=$enableval -else case e in #( - e) enable_macro=most ;; -esac +else $as_nop + enable_macro=most fi _apmod_extra_msg="" @@ -16272,9 +15902,8 @@ printf %s "checking whether to enable mo if test ${enable_dbd+y} then : enableval=$enable_dbd; force_dbd=$enableval -else case e in #( - e) enable_dbd=most ;; -esac +else $as_nop + enable_dbd=most fi _apmod_extra_msg="" @@ -16470,9 +16099,8 @@ printf %s "checking whether to enable mo if test ${enable_bucketeer+y} then : enableval=$enable_bucketeer; force_bucketeer=$enableval -else case e in #( - e) enable_bucketeer=no ;; -esac +else $as_nop + enable_bucketeer=no fi _apmod_extra_msg="" @@ -16613,9 +16241,8 @@ printf %s "checking whether to enable mo if test ${enable_dumpio+y} then : enableval=$enable_dumpio; force_dumpio=$enableval -else case e in #( - e) enable_dumpio=most ;; -esac +else $as_nop + enable_dumpio=most fi _apmod_extra_msg="" @@ -16790,9 +16417,8 @@ printf %s "checking whether to enable mo if test ${enable_echo+y} then : enableval=$enable_echo; force_echo=$enableval -else case e in #( - e) enable_echo=maybe-all ;; -esac +else $as_nop + enable_echo=maybe-all fi _apmod_extra_msg="" @@ -16966,9 +16592,8 @@ printf %s "checking whether to enable mo if test ${enable_example_hooks+y} then : enableval=$enable_example_hooks; force_example_hooks=$enableval -else case e in #( - e) enable_example_hooks=no ;; -esac +else $as_nop + enable_example_hooks=no fi _apmod_extra_msg="" @@ -17109,9 +16734,8 @@ printf %s "checking whether to enable mo if test ${enable_case_filter+y} then : enableval=$enable_case_filter; force_case_filter=$enableval -else case e in #( - e) enable_case_filter=no ;; -esac +else $as_nop + enable_case_filter=no fi _apmod_extra_msg="" @@ -17252,9 +16876,8 @@ printf %s "checking whether to enable mo if test ${enable_case_filter_in+y} then : enableval=$enable_case_filter_in; force_case_filter_in=$enableval -else case e in #( - e) enable_case_filter_in=no ;; -esac +else $as_nop + enable_case_filter_in=no fi _apmod_extra_msg="" @@ -17395,9 +17018,8 @@ printf %s "checking whether to enable mo if test ${enable_example_ipc+y} then : enableval=$enable_example_ipc; force_example_ipc=$enableval -else case e in #( - e) enable_example_ipc=no ;; -esac +else $as_nop + enable_example_ipc=no fi _apmod_extra_msg="" @@ -17604,9 +17226,8 @@ printf %s "checking whether to enable mo if test ${enable_buffer+y} then : enableval=$enable_buffer; force_buffer=$enableval -else case e in #( - e) enable_buffer=most ;; -esac +else $as_nop + enable_buffer=most fi _apmod_extra_msg="" @@ -17747,9 +17368,8 @@ printf %s "checking whether to enable mo if test ${enable_data+y} then : enableval=$enable_data; force_data=$enableval -else case e in #( - e) enable_data=maybe-all ;; -esac +else $as_nop + enable_data=maybe-all fi _apmod_extra_msg="" @@ -17890,9 +17510,8 @@ printf %s "checking whether to enable mo if test ${enable_ratelimit+y} then : enableval=$enable_ratelimit; force_ratelimit=$enableval -else case e in #( - e) enable_ratelimit=most ;; -esac +else $as_nop + enable_ratelimit=most fi _apmod_extra_msg="" @@ -18033,9 +17652,8 @@ printf %s "checking whether to enable mo if test ${enable_reqtimeout+y} then : enableval=$enable_reqtimeout; force_reqtimeout=$enableval -else case e in #( - e) enable_reqtimeout=yes ;; -esac +else $as_nop + enable_reqtimeout=yes fi _apmod_extra_msg="" @@ -18176,9 +17794,8 @@ printf %s "checking whether to enable mo if test ${enable_ext_filter+y} then : enableval=$enable_ext_filter; force_ext_filter=$enableval -else case e in #( - e) enable_ext_filter=most ;; -esac +else $as_nop + enable_ext_filter=most fi _apmod_extra_msg="" @@ -18319,9 +17936,8 @@ printf %s "checking whether to enable mo if test ${enable_request+y} then : enableval=$enable_request; force_request=$enableval -else case e in #( - e) enable_request=most ;; -esac +else $as_nop + enable_request=most fi _apmod_extra_msg="" @@ -18462,9 +18078,8 @@ printf %s "checking whether to enable mo if test ${enable_include+y} then : enableval=$enable_include; force_include=$enableval -else case e in #( - e) enable_include=most ;; -esac +else $as_nop + enable_include=most fi _apmod_extra_msg="" @@ -18605,9 +18220,8 @@ printf %s "checking whether to enable mo if test ${enable_filter+y} then : enableval=$enable_filter; force_filter=$enableval -else case e in #( - e) enable_filter=yes ;; -esac +else $as_nop + enable_filter=yes fi _apmod_extra_msg="" @@ -18748,9 +18362,8 @@ printf %s "checking whether to enable mo if test ${enable_reflector+y} then : enableval=$enable_reflector; force_reflector=$enableval -else case e in #( - e) enable_reflector=maybe-all ;; -esac +else $as_nop + enable_reflector=maybe-all fi _apmod_extra_msg="" @@ -18891,9 +18504,8 @@ printf %s "checking whether to enable mo if test ${enable_substitute+y} then : enableval=$enable_substitute; force_substitute=$enableval -else case e in #( - e) enable_substitute=most ;; -esac +else $as_nop + enable_substitute=most fi _apmod_extra_msg="" @@ -19036,9 +18648,8 @@ printf %s "checking whether to enable mo if test ${enable_sed+y} then : enableval=$enable_sed; force_sed=$enableval -else case e in #( - e) enable_sed=most ;; -esac +else $as_nop + enable_sed=most fi _apmod_extra_msg="" @@ -19222,9 +18833,8 @@ printf %s "checking whether to enable mo if test ${enable_charset_lite+y} then : enableval=$enable_charset_lite; force_charset_lite=$enableval -else case e in #( - e) enable_charset_lite=yes ;; -esac +else $as_nop + enable_charset_lite=yes fi _apmod_extra_msg="" @@ -19366,9 +18976,8 @@ printf %s "checking whether to enable mo if test ${enable_charset_lite+y} then : enableval=$enable_charset_lite; force_charset_lite=$enableval -else case e in #( - e) enable_charset_lite=maybe-all ;; -esac +else $as_nop + enable_charset_lite=maybe-all fi _apmod_extra_msg="" @@ -19512,9 +19121,8 @@ printf %s "checking whether to enable mo if test ${enable_deflate+y} then : enableval=$enable_deflate; force_deflate=$enableval -else case e in #( - e) enable_deflate=most ;; -esac +else $as_nop + enable_deflate=most fi _apmod_extra_msg="" @@ -19589,16 +19197,15 @@ printf %s "checking for zlib location... if test ${ap_cv_zlib+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + for dir in /usr/local /usr ; do if test -d $dir && test -f $dir/include/zlib.h; then ap_cv_zlib=$dir break fi done - ;; -esac + fi ap_zlib_base=$ap_cv_zlib @@ -19806,8 +19413,8 @@ printf "%s\n" "found" >&6; } done fi -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: not found" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: not found" >&5 printf "%s\n" "not found" >&6; } enable_deflate=no if test "x$ap_zlib_with" = "x"; then @@ -19816,8 +19423,7 @@ printf "%s\n" "$as_me: WARNING: ... Erro else as_fn_error $? "... Error, zlib was missing or unusable" "$LINENO" 5 fi - ;; -esac + fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext @@ -19946,9 +19552,8 @@ printf %s "checking whether to enable mo if test ${enable_xml2enc+y} then : enableval=$enable_xml2enc; force_xml2enc=$enableval -else case e in #( - e) enable_xml2enc=maybe-all ;; -esac +else $as_nop + enable_xml2enc=maybe-all fi _apmod_extra_msg="" @@ -20011,17 +19616,16 @@ printf %s "checking for libxml2... " >&6 if test ${ac_cv_libxml2+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + # Check whether --with-libxml2 was given. if test ${with_libxml2+y} then : withval=$with_libxml2; test_paths="${with_libxml2}/include/libxml2 ${with_libxml2}/include ${with_libxml2}" -else case e in #( - e) test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" - ;; -esac +else $as_nop + test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 @@ -20039,8 +19643,7 @@ printf %s "checking for libxml2... " >&6 else ac_cv_libxml2=no fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libxml2" >&5 printf "%s\n" "$ac_cv_libxml2" >&6; } @@ -20189,9 +19792,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_html+y} then : enableval=$enable_proxy_html; force_proxy_html=$enableval -else case e in #( - e) enable_proxy_html=maybe-all ;; -esac +else $as_nop + enable_proxy_html=maybe-all fi _apmod_extra_msg="" @@ -20254,17 +19856,16 @@ printf %s "checking for libxml2... " >&6 if test ${ac_cv_libxml2+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + # Check whether --with-libxml2 was given. if test ${with_libxml2+y} then : withval=$with_libxml2; test_paths="${with_libxml2}/include/libxml2 ${with_libxml2}/include ${with_libxml2}" -else case e in #( - e) test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" - ;; -esac +else $as_nop + test_paths="/usr/include/libxml2 /usr/local/include/libxml2 /usr/include /usr/local/include" + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for libxml2" >&5 @@ -20282,8 +19883,7 @@ printf %s "checking for libxml2... " >&6 else ac_cv_libxml2=no fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_libxml2" >&5 printf "%s\n" "$ac_cv_libxml2" >&6; } @@ -20434,9 +20034,8 @@ printf %s "checking whether to enable mo if test ${enable_brotli+y} then : enableval=$enable_brotli; force_brotli=$enableval -else case e in #( - e) enable_brotli=most ;; -esac +else $as_nop + enable_brotli=most fi _apmod_extra_msg="" @@ -20551,11 +20150,10 @@ printf "%s\n" "yes" >&6; } ap_brotli_found=yes ap_brotli_cflags="-I${ap_brotli_base}/include" ap_brotli_libs="-L${ap_brotli_base}/lib -lbrotlienc -lbrotlicommon" -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } - ;; -esac + fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CPPFLAGS=$ap_save_cppflags @@ -20808,9 +20406,8 @@ printf %s "checking whether to enable mo if test ${enable_http+y} then : enableval=$enable_http; force_http=$enableval -else case e in #( - e) enable_http=static ;; -esac +else $as_nop + enable_http=static fi _apmod_extra_msg="" @@ -20951,9 +20548,8 @@ printf %s "checking whether to enable mo if test ${enable_mime+y} then : enableval=$enable_mime; force_mime=$enableval -else case e in #( - e) enable_mime=yes ;; -esac +else $as_nop + enable_mime=yes fi _apmod_extra_msg="" @@ -21129,9 +20725,8 @@ printf %s "checking whether to enable mo if test ${enable_ldap+y} then : enableval=$enable_ldap; force_ldap=$enableval -else case e in #( - e) enable_ldap=most ;; -esac +else $as_nop + enable_ldap=most fi _apmod_extra_msg="" @@ -21194,8 +20789,8 @@ printf %s "checking for ldap support in if test ${ac_cv_APR_HAS_LDAP+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + apache_old_cppflags="$CPPFLAGS" CPPFLAGS="$CPPFLAGS $INCLUDES" cat confdefs.h - <<_ACEOF >conftest.$ac_ext @@ -21208,18 +20803,16 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_APR_HAS_LDAP=yes -else case e in #( - e) ac_cv_APR_HAS_LDAP=no ;; -esac +else $as_nop + ac_cv_APR_HAS_LDAP=no fi rm -rf conftest* CPPFLAGS="$apache_old_cppflags" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_APR_HAS_LDAP" >&5 printf "%s\n" "$ac_cv_APR_HAS_LDAP" >&6; } @@ -21411,9 +21004,8 @@ printf %s "checking whether to enable mo if test ${enable_log_config+y} then : enableval=$enable_log_config; force_log_config=$enableval -else case e in #( - e) enable_log_config=yes ;; -esac +else $as_nop + enable_log_config=yes fi _apmod_extra_msg="" @@ -21554,9 +21146,8 @@ printf %s "checking whether to enable mo if test ${enable_log_debug+y} then : enableval=$enable_log_debug; force_log_debug=$enableval -else case e in #( - e) enable_log_debug=most ;; -esac +else $as_nop + enable_log_debug=most fi _apmod_extra_msg="" @@ -21697,9 +21288,8 @@ printf %s "checking whether to enable mo if test ${enable_log_forensic+y} then : enableval=$enable_log_forensic; force_log_forensic=$enableval -else case e in #( - e) enable_log_forensic=maybe-all ;; -esac +else $as_nop + enable_log_forensic=maybe-all fi _apmod_extra_msg="" @@ -21866,9 +21456,8 @@ printf %s "checking whether to enable mo if test ${enable_logio+y} then : enableval=$enable_logio; force_logio=$enableval -else case e in #( - e) enable_logio=most ;; -esac +else $as_nop + enable_logio=most fi _apmod_extra_msg="" @@ -22070,9 +21659,8 @@ printf %s "checking whether to enable mo if test ${enable_lua+y} then : enableval=$enable_lua; force_lua=$enableval -else case e in #( - e) enable_lua=maybe-all ;; -esac +else $as_nop + enable_lua=maybe-all fi _apmod_extra_msg="" @@ -22135,9 +21723,8 @@ printf "%s\n" "checking dependencies" >& if test ${with_lua+y} then : withval=$with_lua; lua_path="$withval" -else case e in #( - e) : ;; -esac +else $as_nop + : fi @@ -22165,22 +21752,16 @@ printf %s "checking for pow in -lm... " if test ${ac_cv_lib_m_pow+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-lm $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char pow (void); + builtin and then its argument prototype would still apply. */ +char pow (); int main (void) { @@ -22192,14 +21773,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_m_pow=yes -else case e in #( - e) ac_cv_lib_m_pow=no ;; -esac +else $as_nop + ac_cv_lib_m_pow=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_m_pow" >&5 printf "%s\n" "$ac_cv_lib_m_pow" >&6; } @@ -22213,22 +21792,16 @@ printf %s "checking for sqrt in -lm... " if test ${ac_cv_lib_m_sqrt+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-lm $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char sqrt (void); + builtin and then its argument prototype would still apply. */ +char sqrt (); int main (void) { @@ -22240,14 +21813,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_m_sqrt=yes -else case e in #( - e) ac_cv_lib_m_sqrt=no ;; -esac +else $as_nop + ac_cv_lib_m_sqrt=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_m_sqrt" >&5 printf "%s\n" "$ac_cv_lib_m_sqrt" >&6; } @@ -22271,22 +21842,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_5_4_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.4 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22298,14 +21863,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_5_4_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_5_4_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_5_4_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_4_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_5_4_luaL_newstate" >&6; } @@ -22365,22 +21928,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua5_4_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.4 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22392,14 +21949,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua5_4_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua5_4_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua5_4_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_4_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua5_4_luaL_newstate" >&6; } @@ -22459,22 +22014,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22486,14 +22035,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_luaL_newstate" >&6; } @@ -22554,22 +22101,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_5_3_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.3 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22581,14 +22122,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_5_3_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_5_3_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_5_3_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_3_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_5_3_luaL_newstate" >&6; } @@ -22648,22 +22187,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua5_3_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.3 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22675,14 +22208,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua5_3_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua5_3_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua5_3_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_3_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua5_3_luaL_newstate" >&6; } @@ -22742,22 +22273,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22769,14 +22294,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_luaL_newstate" >&6; } @@ -22837,22 +22360,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22864,14 +22381,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_luaL_newstate" >&6; } @@ -22932,22 +22447,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_5_2_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.2 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -22959,14 +22468,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_5_2_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_5_2_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_5_2_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_2_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_5_2_luaL_newstate" >&6; } @@ -23026,22 +22533,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua5_2_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.2 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -23053,14 +22554,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua5_2_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua5_2_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua5_2_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_2_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua5_2_luaL_newstate" >&6; } @@ -23120,22 +22619,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -23147,14 +22640,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_luaL_newstate" >&6; } @@ -23215,22 +22706,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_5_1_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua-5.1 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -23242,14 +22727,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_5_1_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_5_1_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_5_1_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_5_1_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_5_1_luaL_newstate" >&6; } @@ -23309,22 +22792,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua5_1_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua5.1 $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -23336,14 +22813,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua5_1_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua5_1_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua5_1_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua5_1_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua5_1_luaL_newstate" >&6; } @@ -23403,22 +22878,16 @@ printf %s "checking for luaL_newstate in if test ${ac_cv_lib_lua_luaL_newstate+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_check_lib_save_LIBS=$LIBS +else $as_nop + ac_check_lib_save_LIBS=$LIBS LIBS="-llua $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC - builtin and then its argument prototype would still apply. - The 'extern "C"' is for builds by C++ compilers; - although this is not generally supported in C code supporting it here - has little cost and some practical benefit (sr 110532). */ -#ifdef __cplusplus -extern "C" -#endif -char luaL_newstate (void); + builtin and then its argument prototype would still apply. */ +char luaL_newstate (); int main (void) { @@ -23430,14 +22899,12 @@ _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_lua_luaL_newstate=yes -else case e in #( - e) ac_cv_lib_lua_luaL_newstate=no ;; -esac +else $as_nop + ac_cv_lib_lua_luaL_newstate=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS ;; -esac +LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lua_luaL_newstate" >&5 printf "%s\n" "$ac_cv_lib_lua_luaL_newstate" >&6; } @@ -23733,9 +23200,8 @@ printf %s "checking whether to enable mo if test ${enable_env+y} then : enableval=$enable_env; force_env=$enableval -else case e in #( - e) enable_env=yes ;; -esac +else $as_nop + enable_env=yes fi _apmod_extra_msg="" @@ -23876,9 +23342,8 @@ printf %s "checking whether to enable mo if test ${enable_mime_magic+y} then : enableval=$enable_mime_magic; force_mime_magic=$enableval -else case e in #( - e) enable_mime_magic=maybe-all ;; -esac +else $as_nop + enable_mime_magic=maybe-all fi _apmod_extra_msg="" @@ -24019,9 +23484,8 @@ printf %s "checking whether to enable mo if test ${enable_cern_meta+y} then : enableval=$enable_cern_meta; force_cern_meta=$enableval -else case e in #( - e) enable_cern_meta=no ;; -esac +else $as_nop + enable_cern_meta=no fi _apmod_extra_msg="" @@ -24162,9 +23626,8 @@ printf %s "checking whether to enable mo if test ${enable_expires+y} then : enableval=$enable_expires; force_expires=$enableval -else case e in #( - e) enable_expires=most ;; -esac +else $as_nop + enable_expires=most fi _apmod_extra_msg="" @@ -24305,9 +23768,8 @@ printf %s "checking whether to enable mo if test ${enable_headers+y} then : enableval=$enable_headers; force_headers=$enableval -else case e in #( - e) enable_headers=yes ;; -esac +else $as_nop + enable_headers=yes fi _apmod_extra_msg="" @@ -24448,9 +23910,8 @@ printf %s "checking whether to enable mo if test ${enable_ident+y} then : enableval=$enable_ident; force_ident=$enableval -else case e in #( - e) enable_ident=no ;; -esac +else $as_nop + enable_ident=no fi _apmod_extra_msg="" @@ -24592,9 +24053,8 @@ printf %s "checking whether to enable mo if test ${enable_usertrack+y} then : enableval=$enable_usertrack; force_usertrack=$enableval -else case e in #( - e) enable_usertrack=maybe-all ;; -esac +else $as_nop + enable_usertrack=maybe-all fi _apmod_extra_msg="" @@ -24764,9 +24224,8 @@ printf %s "checking whether to enable mo if test ${enable_unique_id+y} then : enableval=$enable_unique_id; force_unique_id=$enableval -else case e in #( - e) enable_unique_id=most ;; -esac +else $as_nop + enable_unique_id=most fi _apmod_extra_msg="" @@ -24907,9 +24366,8 @@ printf %s "checking whether to enable mo if test ${enable_setenvif+y} then : enableval=$enable_setenvif; force_setenvif=$enableval -else case e in #( - e) enable_setenvif=yes ;; -esac +else $as_nop + enable_setenvif=yes fi _apmod_extra_msg="" @@ -25050,9 +24508,8 @@ printf %s "checking whether to enable mo if test ${enable_version+y} then : enableval=$enable_version; force_version=$enableval -else case e in #( - e) enable_version=yes ;; -esac +else $as_nop + enable_version=yes fi _apmod_extra_msg="" @@ -25193,9 +24650,8 @@ printf %s "checking whether to enable mo if test ${enable_remoteip+y} then : enableval=$enable_remoteip; force_remoteip=$enableval -else case e in #( - e) enable_remoteip=most ;; -esac +else $as_nop + enable_remoteip=most fi _apmod_extra_msg="" @@ -25370,9 +24826,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy+y} then : enableval=$enable_proxy; force_proxy=$enableval -else case e in #( - e) enable_proxy=most ;; -esac +else $as_nop + enable_proxy=most fi _apmod_extra_msg="" @@ -25551,9 +25006,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_connect+y} then : enableval=$enable_proxy_connect; force_proxy_connect=$enableval -else case e in #( - e) enable_proxy_connect=most ;; -esac +else $as_nop + enable_proxy_connect=most fi _apmod_extra_msg="" @@ -25715,9 +25169,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_ftp+y} then : enableval=$enable_proxy_ftp; force_proxy_ftp=$enableval -else case e in #( - e) enable_proxy_ftp=most ;; -esac +else $as_nop + enable_proxy_ftp=most fi _apmod_extra_msg="" @@ -25879,9 +25332,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_http+y} then : enableval=$enable_proxy_http; force_proxy_http=$enableval -else case e in #( - e) enable_proxy_http=most ;; -esac +else $as_nop + enable_proxy_http=most fi _apmod_extra_msg="" @@ -26043,9 +25495,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_fcgi+y} then : enableval=$enable_proxy_fcgi; force_proxy_fcgi=$enableval -else case e in #( - e) enable_proxy_fcgi=most ;; -esac +else $as_nop + enable_proxy_fcgi=most fi _apmod_extra_msg="" @@ -26207,9 +25658,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_scgi+y} then : enableval=$enable_proxy_scgi; force_proxy_scgi=$enableval -else case e in #( - e) enable_proxy_scgi=most ;; -esac +else $as_nop + enable_proxy_scgi=most fi _apmod_extra_msg="" @@ -26371,9 +25821,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_uwsgi+y} then : enableval=$enable_proxy_uwsgi; force_proxy_uwsgi=$enableval -else case e in #( - e) enable_proxy_uwsgi=most ;; -esac +else $as_nop + enable_proxy_uwsgi=most fi _apmod_extra_msg="" @@ -26533,8 +25982,8 @@ printf %s "checking for $CC options need if test ${ac_cv_c_undeclared_builtin_options+y} then : printf %s "(cached) " >&6 -else case e in #( - e) ac_save_CFLAGS=$CFLAGS +else $as_nop + ac_save_CFLAGS=$CFLAGS ac_cv_c_undeclared_builtin_options='cannot detect' for ac_arg in '' -fno-builtin; do CFLAGS="$ac_save_CFLAGS $ac_arg" @@ -26553,8 +26002,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : -else case e in #( - e) # This test program should compile successfully. +else $as_nop + # This test program should compile successfully. # No library function is consistently available on # freestanding implementations, so test against a dummy # declaration. Include always-available headers on the @@ -26582,29 +26031,26 @@ then : if test x"$ac_arg" = x then : ac_cv_c_undeclared_builtin_options='none needed' -else case e in #( - e) ac_cv_c_undeclared_builtin_options=$ac_arg ;; -esac +else $as_nop + ac_cv_c_undeclared_builtin_options=$ac_arg fi break fi -rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;; -esac +rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext done CFLAGS=$ac_save_CFLAGS - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5 printf "%s\n" "$ac_cv_c_undeclared_builtin_options" >&6; } case $ac_cv_c_undeclared_builtin_options in #( 'cannot detect') : - { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5 -printf "%s\n" "$as_me: error: in '$ac_pwd':" >&2;} + { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 +printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot make $CC report undeclared builtins -See 'config.log' for more details" "$LINENO" 5; } ;; #( +See \`config.log' for more details" "$LINENO" 5; } ;; #( 'none needed') : ac_c_undeclared_builtin_options='' ;; #( *) : @@ -26618,9 +26064,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_fdpass+y} then : enableval=$enable_proxy_fdpass; force_proxy_fdpass=$enableval -else case e in #( - e) enable_proxy_fdpass=most ;; -esac +else $as_nop + enable_proxy_fdpass=most fi _apmod_extra_msg="" @@ -26797,9 +26242,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_wstunnel+y} then : enableval=$enable_proxy_wstunnel; force_proxy_wstunnel=$enableval -else case e in #( - e) enable_proxy_wstunnel=most ;; -esac +else $as_nop + enable_proxy_wstunnel=most fi _apmod_extra_msg="" @@ -26961,9 +26405,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_ajp+y} then : enableval=$enable_proxy_ajp; force_proxy_ajp=$enableval -else case e in #( - e) enable_proxy_ajp=most ;; -esac +else $as_nop + enable_proxy_ajp=most fi _apmod_extra_msg="" @@ -27125,9 +26568,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_balancer+y} then : enableval=$enable_proxy_balancer; force_proxy_balancer=$enableval -else case e in #( - e) enable_proxy_balancer=most ;; -esac +else $as_nop + enable_proxy_balancer=most fi _apmod_extra_msg="" @@ -27290,9 +26732,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_express+y} then : enableval=$enable_proxy_express; force_proxy_express=$enableval -else case e in #( - e) enable_proxy_express=most ;; -esac +else $as_nop + enable_proxy_express=most fi _apmod_extra_msg="" @@ -27454,9 +26895,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_hcheck+y} then : enableval=$enable_proxy_hcheck; force_proxy_hcheck=$enableval -else case e in #( - e) enable_proxy_hcheck=most ;; -esac +else $as_nop + enable_proxy_hcheck=most fi _apmod_extra_msg="" @@ -27707,9 +27147,8 @@ printf %s "checking whether to enable mo if test ${enable_session+y} then : enableval=$enable_session; force_session=$enableval -else case e in #( - e) enable_session=most ;; -esac +else $as_nop + enable_session=most fi _apmod_extra_msg="" @@ -27850,9 +27289,8 @@ printf %s "checking whether to enable mo if test ${enable_session_cookie+y} then : enableval=$enable_session_cookie; force_session_cookie=$enableval -else case e in #( - e) enable_session_cookie=$session_mods_enable ;; -esac +else $as_nop + enable_session_cookie=$session_mods_enable fi _apmod_extra_msg="" @@ -28034,9 +27472,8 @@ _ACEOF if ac_fn_c_try_compile "$LINENO" then : ap_HAVE_APR_CRYPTO="yes" -else case e in #( - e) ap_HAVE_APR_CRYPTO="no" ;; -esac +else $as_nop + ap_HAVE_APR_CRYPTO="no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CPPFLAGS="$saved_CPPFLAGS" @@ -28056,9 +27493,8 @@ printf %s "checking whether to enable mo if test ${enable_session_crypto+y} then : enableval=$enable_session_crypto; force_session_crypto=$enableval -else case e in #( - e) enable_session_crypto=$session_mods_enable_crypto ;; -esac +else $as_nop + enable_session_crypto=$session_mods_enable_crypto fi _apmod_extra_msg="" @@ -28225,9 +27661,8 @@ printf %s "checking whether to enable mo if test ${enable_session_dbd+y} then : enableval=$enable_session_dbd; force_session_dbd=$enableval -else case e in #( - e) enable_session_dbd=$session_mods_enable ;; -esac +else $as_nop + enable_session_dbd=$session_mods_enable fi _apmod_extra_msg="" @@ -28446,9 +27881,8 @@ printf %s "checking whether to enable mo if test ${enable_slotmem_shm+y} then : enableval=$enable_slotmem_shm; force_slotmem_shm=$enableval -else case e in #( - e) enable_slotmem_shm=most ;; -esac +else $as_nop + enable_slotmem_shm=most fi _apmod_extra_msg="" @@ -28589,9 +28023,8 @@ printf %s "checking whether to enable mo if test ${enable_slotmem_plain+y} then : enableval=$enable_slotmem_plain; force_slotmem_plain=$enableval -else case e in #( - e) enable_slotmem_plain=maybe-all ;; -esac +else $as_nop + enable_slotmem_plain=maybe-all fi _apmod_extra_msg="" @@ -28766,9 +28199,8 @@ printf %s "checking whether to enable mo if test ${enable_ssl+y} then : enableval=$enable_ssl; force_ssl=$enableval -else case e in #( - e) enable_ssl=most ;; -esac +else $as_nop + enable_ssl=most fi _apmod_extra_msg="" @@ -28831,8 +28263,8 @@ printf %s "checking for OpenSSL... " >&6 if test ${ac_cv_openssl+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" @@ -29219,10 +28651,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_openssl=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -29299,9 +28730,8 @@ if test "x$ac_cv_func_SSL_CTX_new" = xye then : printf "%s\n" "#define HAVE_SSL_CTX_NEW 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -29346,8 +28776,7 @@ printf "%s\n" "$as_me: WARNING: OpenSSL ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 printf "%s\n" "$ac_cv_openssl" >&6; } @@ -29583,9 +29012,8 @@ printf %s "checking whether to enable mo if test ${enable_optional_hook_export+y} then : enableval=$enable_optional_hook_export; force_optional_hook_export=$enableval -else case e in #( - e) enable_optional_hook_export=no ;; -esac +else $as_nop + enable_optional_hook_export=no fi _apmod_extra_msg="" @@ -29726,9 +29154,8 @@ printf %s "checking whether to enable mo if test ${enable_optional_hook_import+y} then : enableval=$enable_optional_hook_import; force_optional_hook_import=$enableval -else case e in #( - e) enable_optional_hook_import=no ;; -esac +else $as_nop + enable_optional_hook_import=no fi _apmod_extra_msg="" @@ -29869,9 +29296,8 @@ printf %s "checking whether to enable mo if test ${enable_optional_fn_import+y} then : enableval=$enable_optional_fn_import; force_optional_fn_import=$enableval -else case e in #( - e) enable_optional_fn_import=no ;; -esac +else $as_nop + enable_optional_fn_import=no fi _apmod_extra_msg="" @@ -30012,9 +29438,8 @@ printf %s "checking whether to enable mo if test ${enable_optional_fn_export+y} then : enableval=$enable_optional_fn_export; force_optional_fn_export=$enableval -else case e in #( - e) enable_optional_fn_export=no ;; -esac +else $as_nop + enable_optional_fn_export=no fi _apmod_extra_msg="" @@ -30156,9 +29581,8 @@ printf %s "checking whether to enable mo if test ${enable_dialup+y} then : enableval=$enable_dialup; force_dialup=$enableval -else case e in #( - e) enable_dialup=maybe-all ;; -esac +else $as_nop + enable_dialup=maybe-all fi _apmod_extra_msg="" @@ -30396,8 +29820,8 @@ printf %s "checking for rlim_t... " >&6; if test ${ac_cv_type_rlim_t+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ @@ -30418,14 +29842,12 @@ then : ac_cv_type_rlim_t=yes -else case e in #( - e) ac_cv_type_rlim_t=no - ;; -esac +else $as_nop + ac_cv_type_rlim_t=no + fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_rlim_t" >&5 printf "%s\n" "$ac_cv_type_rlim_t" >&6; } @@ -30555,12 +29977,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAS_THREADS=yes -else case e in #( - e) ac_cv_define_APR_HAS_THREADS=no ;; -esac +else $as_nop + ac_cv_define_APR_HAS_THREADS=no fi rm -rf conftest* @@ -30584,8 +30005,8 @@ printf %s "checking whether APR supports if test ${ac_cv_have_threadsafe_pollset+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + case $host in *-apple-darwin[1-9].*) @@ -30620,8 +30041,7 @@ fi else ac_cv_have_threadsafe_pollset=no fi - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_have_threadsafe_pollset" >&5 printf "%s\n" "$ac_cv_have_threadsafe_pollset" >&6; } @@ -31677,9 +31097,8 @@ printf %s "checking whether to enable mo if test ${enable_http2+y} then : enableval=$enable_http2; force_http2=$enableval -else case e in #( - e) enable_http2=most ;; -esac +else $as_nop + enable_http2=most fi _apmod_extra_msg="" @@ -31742,8 +31161,8 @@ printf %s "checking for OpenSSL... " >&6 if test ${ac_cv_openssl+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" @@ -32130,10 +31549,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_openssl=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -32210,9 +31628,8 @@ if test "x$ac_cv_func_SSL_CTX_new" = xye then : printf "%s\n" "#define HAVE_SSL_CTX_NEW 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -32257,8 +31674,7 @@ printf "%s\n" "$as_me: WARNING: OpenSSL ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 printf "%s\n" "$ac_cv_openssl" >&6; } @@ -32340,8 +31756,8 @@ printf %s "checking for nghttp2... " >&6 if test ${ac_cv_nghttp2+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_nghttp2=no ap_nghttp2_found="" ap_nghttp2_base="" @@ -32686,10 +32102,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_nghttp2=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -32754,9 +32169,8 @@ if test "x$ac_cv_func_nghttp2_session_se then : printf "%s\n" "#define HAVE_NGHTTP2_SESSION_SERVER_NEW2 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -32772,9 +32186,8 @@ if test "x$ac_cv_func_nghttp2_stream_get then : printf "%s\n" "#define HAVE_NGHTTP2_STREAM_GET_WEIGHT 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -32945,8 +32358,7 @@ printf "%s\n" "$as_me: WARNING: nghttp2 CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_nghttp2" >&5 printf "%s\n" "$ac_cv_nghttp2" >&6; } @@ -33092,9 +32504,8 @@ printf %s "checking whether to enable mo if test ${enable_proxy_http2+y} then : enableval=$enable_proxy_http2; force_proxy_http2=$enableval -else case e in #( - e) enable_proxy_http2=no ;; -esac +else $as_nop + enable_proxy_http2=no fi _apmod_extra_msg="" @@ -33165,8 +32576,8 @@ printf %s "checking for nghttp2... " >&6 if test ${ac_cv_nghttp2+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_nghttp2=no ap_nghttp2_found="" ap_nghttp2_base="" @@ -33511,10 +32922,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_nghttp2=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -33579,9 +32989,8 @@ if test "x$ac_cv_func_nghttp2_session_se then : printf "%s\n" "#define HAVE_NGHTTP2_SESSION_SERVER_NEW2 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -33597,9 +33006,8 @@ if test "x$ac_cv_func_nghttp2_stream_get then : printf "%s\n" "#define HAVE_NGHTTP2_STREAM_GET_WEIGHT 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -33770,8 +33178,7 @@ printf "%s\n" "$as_me: WARNING: nghttp2 CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_nghttp2" >&5 printf "%s\n" "$ac_cv_nghttp2" >&6; } @@ -33974,9 +33381,8 @@ printf %s "checking whether to enable mo if test ${enable_md+y} then : enableval=$enable_md; force_md=$enableval -else case e in #( - e) enable_md=most ;; -esac +else $as_nop + enable_md=most fi _apmod_extra_msg="" @@ -34039,8 +33445,8 @@ printf %s "checking for OpenSSL... " >&6 if test ${ac_cv_openssl+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_openssl=no ap_openssl_found="" ap_openssl_base="" @@ -34427,10 +33833,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_openssl=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -34507,9 +33912,8 @@ if test "x$ac_cv_func_SSL_CTX_new" = xye then : printf "%s\n" "#define HAVE_SSL_CTX_NEW 1" >>confdefs.h -else case e in #( - e) liberrors="yes" ;; -esac +else $as_nop + liberrors="yes" fi done @@ -34554,8 +33958,7 @@ printf "%s\n" "$as_me: WARNING: OpenSSL ap_openssl_mod_cflags=$MOD_CFLAGS ap_openssl_mod_ldflags=$MOD_LDFLAGS - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_openssl" >&5 printf "%s\n" "$ac_cv_openssl" >&6; } @@ -34619,8 +34022,8 @@ printf %s "checking for jansson... " >&6 if test ${ac_cv_jansson+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_jansson=no ap_jansson_found="" ap_jansson_base="" @@ -34959,10 +34362,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_jansson=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -35015,8 +34417,7 @@ rm -f core conftest.err conftest.$ac_obj CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_jansson" >&5 printf "%s\n" "$ac_cv_jansson" >&6; } @@ -35038,8 +34439,8 @@ printf %s "checking for curl... " >&6; } if test ${ac_cv_curl+y} then : printf %s "(cached) " >&6 -else case e in #( - e) +else $as_nop + ac_cv_curl=no ap_curl_found="" ap_curl_base="" @@ -35395,10 +34796,9 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: OK" >&5 printf "%s\n" "OK" >&6; } ac_cv_curl=yes -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 -printf "%s\n" "FAILED" >&6; } ;; -esac +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: FAILED" >&5 +printf "%s\n" "FAILED" >&6; } fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext @@ -35451,8 +34851,7 @@ rm -f core conftest.err conftest.$ac_obj CPPFLAGS="$saved_CPPFLAGS" LIBS="$saved_LIBS" LDFLAGS="$saved_LDFLAGS" - ;; -esac + fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_curl" >&5 printf "%s\n" "$ac_cv_curl" >&6; } @@ -35654,9 +35053,8 @@ printf %s "checking whether to enable mo if test ${enable_lbmethod_byrequests+y} then : enableval=$enable_lbmethod_byrequests; force_lbmethod_byrequests=$enableval -else case e in #( - e) enable_lbmethod_byrequests=$enable_proxy_balancer ;; -esac +else $as_nop + enable_lbmethod_byrequests=$enable_proxy_balancer fi _apmod_extra_msg="" @@ -35818,9 +35216,8 @@ printf %s "checking whether to enable mo if test ${enable_lbmethod_bytraffic+y} then : enableval=$enable_lbmethod_bytraffic; force_lbmethod_bytraffic=$enableval -else case e in #( - e) enable_lbmethod_bytraffic=$enable_proxy_balancer ;; -esac +else $as_nop + enable_lbmethod_bytraffic=$enable_proxy_balancer fi _apmod_extra_msg="" @@ -35982,9 +35379,8 @@ printf %s "checking whether to enable mo if test ${enable_lbmethod_bybusyness+y} then : enableval=$enable_lbmethod_bybusyness; force_lbmethod_bybusyness=$enableval -else case e in #( - e) enable_lbmethod_bybusyness=$enable_proxy_balancer ;; -esac +else $as_nop + enable_lbmethod_bybusyness=$enable_proxy_balancer fi _apmod_extra_msg="" @@ -36146,9 +35542,8 @@ printf %s "checking whether to enable mo if test ${enable_lbmethod_heartbeat+y} then : enableval=$enable_lbmethod_heartbeat; force_lbmethod_heartbeat=$enableval -else case e in #( - e) enable_lbmethod_heartbeat=$enable_proxy_balancer ;; -esac +else $as_nop + enable_lbmethod_heartbeat=$enable_proxy_balancer fi _apmod_extra_msg="" @@ -36334,8 +35729,8 @@ then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $withval" >&5 printf "%s\n" "$withval" >&6; }; -else case e in #( - e) +else $as_nop + if ap_mpm_is_supported "winnt"; then default_mpm=winnt { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: winnt" >&5 @@ -36357,8 +35752,7 @@ printf "%s\n" "worker - event is not sup { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: prefork - event and worker are not supported" >&5 printf "%s\n" "prefork - event and worker are not supported" >&6; } fi - ;; -esac + fi @@ -36414,9 +35808,8 @@ then : done fi -else case e in #( - e) mpm_build=static ;; -esac +else $as_nop + mpm_build=static fi @@ -36792,9 +36185,8 @@ printf %s "checking whether to enable mo if test ${enable_unixd+y} then : enableval=$enable_unixd; force_unixd=$enableval -else case e in #( - e) enable_unixd=$unixd_mods_enable ;; -esac +else $as_nop + enable_unixd=$unixd_mods_enable fi _apmod_extra_msg="" @@ -36935,9 +36327,8 @@ printf %s "checking whether to enable mo if test ${enable_privileges+y} then : enableval=$enable_privileges; force_privileges=$enableval -else case e in #( - e) enable_privileges=no ;; -esac +else $as_nop + enable_privileges=no fi _apmod_extra_msg="" @@ -37001,9 +36392,8 @@ if test "x$ac_cv_header_priv_h" = xyes then : printf "%s\n" "#define HAVE_PRIV_H 1" >>confdefs.h ap_HAVE_PRIV_H="yes" -else case e in #( - e) ap_HAVE_PRIV_H="no" ;; -esac +else $as_nop + ap_HAVE_PRIV_H="no" fi done @@ -37111,9 +36501,8 @@ printf %s "checking whether to enable mo if test ${enable_systemd+y} then : enableval=$enable_systemd; force_systemd=$enableval -else case e in #( - e) enable_systemd=no ;; -esac +else $as_nop + enable_systemd=no fi _apmod_extra_msg="" @@ -37175,6 +36564,72 @@ printf "%s\n" "checking dependencies" >& printf "%s\n" "$as_me: WARNING: Your system does not support systemd." >&2;} enable_systemd="no" else + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for is_selinux_enabled in -lselinux" >&5 +printf %s "checking for is_selinux_enabled in -lselinux... " >&6; } +if test ${ac_cv_lib_selinux_is_selinux_enabled+y} +then : + printf %s "(cached) " >&6 +else $as_nop + ac_check_lib_save_LIBS=$LIBS +LIBS="-lselinux $LIBS" +cat confdefs.h - <<_ACEOF >conftest.$ac_ext +/* end confdefs.h. */ + +/* Override any GCC internal prototype to avoid an error. + Use char because int might match the return type of a GCC + builtin and then its argument prototype would still apply. */ +char is_selinux_enabled (); +int +main (void) +{ +return is_selinux_enabled (); + ; + return 0; +} +_ACEOF +if ac_fn_c_try_link "$LINENO" +then : + ac_cv_lib_selinux_is_selinux_enabled=yes +else $as_nop + ac_cv_lib_selinux_is_selinux_enabled=no +fi +rm -f core conftest.err conftest.$ac_objext conftest.beam \ + conftest$ac_exeext conftest.$ac_ext +LIBS=$ac_check_lib_save_LIBS +fi +{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_selinux_is_selinux_enabled" >&5 +printf "%s\n" "$ac_cv_lib_selinux_is_selinux_enabled" >&6; } +if test "x$ac_cv_lib_selinux_is_selinux_enabled" = xyes +then : + + +printf "%s\n" "#define HAVE_SELINUX 1" >>confdefs.h + + + if test "x$MOD_SYSTEMD_LDADD" = "x"; then + test "x$silent" != "xyes" && echo " setting MOD_SYSTEMD_LDADD to \"-lselinux\"" + MOD_SYSTEMD_LDADD="-lselinux" + else + apr_addto_bugger="-lselinux" + for i in $apr_addto_bugger; do + apr_addto_duplicate="0" + for j in $MOD_SYSTEMD_LDADD; do + if test "x$i" = "x$j"; then + apr_addto_duplicate="1" + break + fi + done + if test $apr_addto_duplicate = "0"; then + test "x$silent" != "xyes" && echo " adding \"$i\" to MOD_SYSTEMD_LDADD" + MOD_SYSTEMD_LDADD="$MOD_SYSTEMD_LDADD $i" + fi + done + fi + + +fi + + if test "x$MOD_SYSTEMD_LDADD" = "x"; then test "x$silent" != "xyes" && echo " setting MOD_SYSTEMD_LDADD to \"$SYSTEMD_LIBS\"" @@ -37361,9 +36816,8 @@ printf %s "checking whether to enable mo if test ${enable_heartbeat+y} then : enableval=$enable_heartbeat; force_heartbeat=$enableval -else case e in #( - e) enable_heartbeat=maybe-all ;; -esac +else $as_nop + enable_heartbeat=maybe-all fi _apmod_extra_msg="" @@ -37525,9 +36979,8 @@ printf %s "checking whether to enable mo if test ${enable_heartmonitor+y} then : enableval=$enable_heartmonitor; force_heartmonitor=$enableval -else case e in #( - e) enable_heartmonitor=maybe-all ;; -esac +else $as_nop + enable_heartmonitor=maybe-all fi _apmod_extra_msg="" @@ -37709,9 +37162,8 @@ printf %s "checking whether to enable mo if test ${enable_dav+y} then : enableval=$enable_dav; force_dav=$enableval -else case e in #( - e) enable_dav=$dav_enable ;; -esac +else $as_nop + enable_dav=$dav_enable fi _apmod_extra_msg="" @@ -37912,9 +37364,8 @@ printf %s "checking whether to enable mo if test ${enable_status+y} then : enableval=$enable_status; force_status=$enableval -else case e in #( - e) enable_status=yes ;; -esac +else $as_nop + enable_status=yes fi _apmod_extra_msg="" @@ -38055,9 +37506,8 @@ printf %s "checking whether to enable mo if test ${enable_autoindex+y} then : enableval=$enable_autoindex; force_autoindex=$enableval -else case e in #( - e) enable_autoindex=yes ;; -esac +else $as_nop + enable_autoindex=yes fi _apmod_extra_msg="" @@ -38198,9 +37648,8 @@ printf %s "checking whether to enable mo if test ${enable_asis+y} then : enableval=$enable_asis; force_asis=$enableval -else case e in #( - e) enable_asis=maybe-all ;; -esac +else $as_nop + enable_asis=maybe-all fi _apmod_extra_msg="" @@ -38341,9 +37790,8 @@ printf %s "checking whether to enable mo if test ${enable_info+y} then : enableval=$enable_info; force_info=$enableval -else case e in #( - e) enable_info=most ;; -esac +else $as_nop + enable_info=most fi _apmod_extra_msg="" @@ -38484,9 +37932,8 @@ printf %s "checking whether to enable mo if test ${enable_suexec+y} then : enableval=$enable_suexec; force_suexec=$enableval -else case e in #( - e) enable_suexec=no ;; -esac +else $as_nop + enable_suexec=no fi _apmod_extra_msg="" @@ -38657,9 +38104,8 @@ printf %s "checking whether to enable mo if test ${enable_cgid+y} then : enableval=$enable_cgid; force_cgid=$enableval -else case e in #( - e) enable_cgid=most ;; -esac +else $as_nop + enable_cgid=most fi _apmod_extra_msg="" @@ -38850,9 +38296,8 @@ printf %s "checking whether to enable mo if test ${enable_cgi+y} then : enableval=$enable_cgi; force_cgi=$enableval -else case e in #( - e) enable_cgi=no ;; -esac +else $as_nop + enable_cgi=no fi _apmod_extra_msg="" @@ -38994,9 +38439,8 @@ printf %s "checking whether to enable mo if test ${enable_cgi+y} then : enableval=$enable_cgi; force_cgi=$enableval -else case e in #( - e) enable_cgi=most ;; -esac +else $as_nop + enable_cgi=most fi _apmod_extra_msg="" @@ -39137,9 +38581,8 @@ printf %s "checking whether to enable mo if test ${enable_cgid+y} then : enableval=$enable_cgid; force_cgid=$enableval -else case e in #( - e) enable_cgid=no ;; -esac +else $as_nop + enable_cgid=no fi _apmod_extra_msg="" @@ -39310,9 +38753,8 @@ then : printf "%s\n" "#define HAVE_CGID_FDPASSING 1" >>confdefs.h -else case e in #( - e) as_fn_error $? "cannot support mod_cgid fd-passing on this system" "$LINENO" 5 ;; -esac +else $as_nop + as_fn_error $? "cannot support mod_cgid fd-passing on this system" "$LINENO" 5 fi fi @@ -39467,9 +38909,8 @@ printf %s "checking whether to enable mo if test ${enable_dav_fs+y} then : enableval=$enable_dav_fs; force_dav_fs=$enableval -else case e in #( - e) enable_dav_fs=$dav_fs_enable ;; -esac +else $as_nop + enable_dav_fs=$dav_fs_enable fi _apmod_extra_msg="" @@ -39674,9 +39115,8 @@ printf %s "checking whether to enable mo if test ${enable_dav_lock+y} then : enableval=$enable_dav_lock; force_dav_lock=$enableval -else case e in #( - e) enable_dav_lock=maybe-all ;; -esac +else $as_nop + enable_dav_lock=maybe-all fi _apmod_extra_msg="" @@ -39910,11 +39350,10 @@ EOF printf "%s\n" "added:$EXTRA_MODLIST" >&6; } fi -else case e in #( - e) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none" >&5 +else $as_nop + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none" >&5 printf "%s\n" "none" >&6; } - ;; -esac + fi @@ -39939,9 +39378,8 @@ printf %s "checking whether to enable mo if test ${enable_vhost_alias+y} then : enableval=$enable_vhost_alias; force_vhost_alias=$enableval -else case e in #( - e) enable_vhost_alias=most ;; -esac +else $as_nop + enable_vhost_alias=most fi _apmod_extra_msg="" @@ -40082,9 +39520,8 @@ printf %s "checking whether to enable mo if test ${enable_negotiation+y} then : enableval=$enable_negotiation; force_negotiation=$enableval -else case e in #( - e) enable_negotiation=most ;; -esac +else $as_nop + enable_negotiation=most fi _apmod_extra_msg="" @@ -40225,9 +39662,8 @@ printf %s "checking whether to enable mo if test ${enable_dir+y} then : enableval=$enable_dir; force_dir=$enableval -else case e in #( - e) enable_dir=yes ;; -esac +else $as_nop + enable_dir=yes fi _apmod_extra_msg="" @@ -40368,9 +39804,8 @@ printf %s "checking whether to enable mo if test ${enable_imagemap+y} then : enableval=$enable_imagemap; force_imagemap=$enableval -else case e in #( - e) enable_imagemap=no ;; -esac +else $as_nop + enable_imagemap=no fi _apmod_extra_msg="" @@ -40511,9 +39946,8 @@ printf %s "checking whether to enable mo if test ${enable_actions+y} then : enableval=$enable_actions; force_actions=$enableval -else case e in #( - e) enable_actions=most ;; -esac +else $as_nop + enable_actions=most fi _apmod_extra_msg="" @@ -40654,9 +40088,8 @@ printf %s "checking whether to enable mo if test ${enable_speling+y} then : enableval=$enable_speling; force_speling=$enableval -else case e in #( - e) enable_speling=most ;; -esac +else $as_nop + enable_speling=most fi _apmod_extra_msg="" @@ -40797,9 +40230,8 @@ printf %s "checking whether to enable mo if test ${enable_userdir+y} then : enableval=$enable_userdir; force_userdir=$enableval -else case e in #( - e) enable_userdir=most ;; -esac +else $as_nop + enable_userdir=most fi _apmod_extra_msg="" @@ -40940,9 +40372,8 @@ printf %s "checking whether to enable mo if test ${enable_alias+y} then : enableval=$enable_alias; force_alias=$enableval -else case e in #( - e) enable_alias=yes ;; -esac +else $as_nop + enable_alias=yes fi _apmod_extra_msg="" @@ -41083,9 +40514,8 @@ printf %s "checking whether to enable mo if test ${enable_rewrite+y} then : enableval=$enable_rewrite; force_rewrite=$enableval -else case e in #( - e) enable_rewrite=most ;; -esac +else $as_nop + enable_rewrite=most fi _apmod_extra_msg="" @@ -41459,10 +40889,9 @@ if test ${with_program_name+y} then : withval=$with_program_name; progname="$withval" -else case e in #( - e) - progname="httpd" ;; -esac +else $as_nop + + progname="httpd" fi @@ -41569,10 +40998,9 @@ if test "x$ac_cv_func_vsyslog" = xyes then : printf "%s\n" "#define HAVE_VSYSLOG 1" >>confdefs.h -else case e in #( - e) - as_fn_error $? "cannot support syslog from suexec without vsyslog()" "$LINENO" 5 ;; -esac +else $as_nop + + as_fn_error $? "cannot support syslog from suexec without vsyslog()" "$LINENO" 5 fi done @@ -41670,12 +41098,11 @@ YES_IS_DEFINED _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | - $EGREP_TRADITIONAL "YES_IS_DEFINED" >/dev/null 2>&1 + $EGREP "YES_IS_DEFINED" >/dev/null 2>&1 then : ac_cv_define_APR_HAVE_IPV6=yes -else case e in #( - e) ac_cv_define_APR_HAVE_IPV6=no ;; -esac +else $as_nop + ac_cv_define_APR_HAVE_IPV6=no fi rm -rf conftest* @@ -41688,8 +41115,8 @@ then : enableval=$enable_v4_mapped; v4mapped=$enableval -else case e in #( - e) +else $as_nop + case $host in *freebsd[1234].*) v4mapped=yes @@ -41704,8 +41131,7 @@ else case e in #( if ap_mpm_is_enabled winnt; then v4mapped=no fi - ;; -esac + fi @@ -42278,8 +41704,8 @@ cat >confcache <<\_ACEOF # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # -# 'ac_cv_env_foo' variables (set or unset) will be overridden when -# loading this file, other *unset* 'ac_cv_foo' will be assigned the +# `ac_cv_env_foo' variables (set or unset) will be overridden when +# loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF @@ -42309,14 +41735,14 @@ printf "%s\n" "$as_me: WARNING: cache va (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) - # 'set' does not quote correctly, so add quotes: double-quote + # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) - # 'set' quotes correctly as required by POSIX, so do not add quotes. + # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | @@ -42406,6 +41832,7 @@ cat >>$CONFIG_STATUS <<\_ASEOF || as_wri # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh +as_nop=: if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh @@ -42414,13 +41841,12 @@ then : # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST -else case e in #( - e) case `(set -o) 2>/dev/null` in #( +else $as_nop + case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; -esac ;; esac fi @@ -42492,7 +41918,7 @@ IFS=$as_save_IFS ;; esac -# We did not find ourselves, most probably we were run as 'sh COMMAND' +# We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 @@ -42521,6 +41947,7 @@ as_fn_error () } # as_fn_error + # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. @@ -42560,12 +41987,11 @@ then : { eval $1+=\$2 }' -else case e in #( - e) as_fn_append () +else $as_nop + as_fn_append () { eval $1=\$$1\$2 - } ;; -esac + } fi # as_fn_append # as_fn_arith ARG... @@ -42579,12 +42005,11 @@ then : { as_val=$(( $* )) }' -else case e in #( - e) as_fn_arith () +else $as_nop + as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` - } ;; -esac + } fi # as_fn_arith @@ -42667,9 +42092,9 @@ if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: - # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail. - # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable. - # In both cases, we have to default to 'cp -pR'. + # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. + # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. + # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then @@ -42750,12 +42175,10 @@ as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. -as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" -as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated +as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. -as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g" -as_tr_sh="eval sed '$as_sed_sh'" # deprecated +as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" exec 6>&1 @@ -42771,7 +42194,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_wri # values after options handling. ac_log=" This file was extended by $as_me, which was -generated by GNU Autoconf 2.72. Invocation command line was +generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES CONFIG_HEADERS = $CONFIG_HEADERS @@ -42803,7 +42226,7 @@ _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 ac_cs_usage="\ -'$as_me' instantiates files and other configuration actions +\`$as_me' instantiates files and other configuration actions from templates according to the current configuration. Unless the files and actions are specified as TAGs, all are instantiated by default. @@ -42839,10 +42262,10 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_writ ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ config.status -configured by $0, generated by GNU Autoconf 2.72, +configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" -Copyright (C) 2023 Free Software Foundation, Inc. +Copyright (C) 2021 Free Software Foundation, Inc. This config.status script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it." @@ -42902,8 +42325,8 @@ do ac_need_defaults=false;; --he | --h) # Conflict between --help and --header - as_fn_error $? "ambiguous option: '$1' -Try '$0 --help' for more information.";; + as_fn_error $? "ambiguous option: \`$1' +Try \`$0 --help' for more information.";; --help | --hel | -h ) printf "%s\n" "$ac_cs_usage"; exit ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ @@ -42911,8 +42334,8 @@ Try '$0 --help' for more information.";; ac_cs_silent=: ;; # This is an error. - -*) as_fn_error $? "unrecognized option: '$1' -Try '$0 --help' for more information." ;; + -*) as_fn_error $? "unrecognized option: \`$1' +Try \`$0 --help' for more information." ;; *) as_fn_append ac_config_targets " $1" ac_need_defaults=false ;; @@ -42996,7 +42419,7 @@ do "build/config_vars.sh") CONFIG_FILES="$CONFIG_FILES build/config_vars.sh" ;; "default") CONFIG_COMMANDS="$CONFIG_COMMANDS default" ;; - *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;; + *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; esac done @@ -43016,7 +42439,7 @@ fi # creating and moving files from /tmp can sometimes cause problems. # Hook for its removal unless debugging. # Note that there is a small window in which the directory will not be cleaned: -# after its creation but before its name has been assigned to '$tmp'. +# after its creation but before its name has been assigned to `$tmp'. $debug || { tmp= ac_tmp= @@ -43040,7 +42463,7 @@ ac_tmp=$tmp # Set up the scripts for CONFIG_FILES section. # No need to generate them if there are no CONFIG_FILES. -# This happens for instance with './config.status config.h'. +# This happens for instance with `./config.status config.h'. if test -n "$CONFIG_FILES"; then @@ -43198,13 +42621,13 @@ fi # test -n "$CONFIG_FILES" # Set up the scripts for CONFIG_HEADERS section. # No need to generate them if there are no CONFIG_HEADERS. -# This happens for instance with './config.status Makefile'. +# This happens for instance with `./config.status Makefile'. if test -n "$CONFIG_HEADERS"; then cat >"$ac_tmp/defines.awk" <<\_ACAWK || BEGIN { _ACEOF -# Transform confdefs.h into an awk script 'defines.awk', embedded as +# Transform confdefs.h into an awk script `defines.awk', embedded as # here-document in config.status, that substitutes the proper values into # config.h.in to produce config.h. @@ -43314,7 +42737,7 @@ do esac case $ac_mode$ac_tag in :[FHL]*:*);; - :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;; + :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;; :[FH]-) ac_tag=-:-;; :[FH]*) ac_tag=$ac_tag:$ac_tag.in;; esac @@ -43336,19 +42759,19 @@ do -) ac_f="$ac_tmp/stdin";; *) # Look for the file first in the build tree, then in the source tree # (if the path is not absolute). The absolute path cannot be DOS-style, - # because $ac_f cannot contain ':'. + # because $ac_f cannot contain `:'. test -f "$ac_f" || case $ac_f in [\\/$]*) false;; *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";; esac || - as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;; + as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;; esac case $ac_f in *\'*) ac_f=`printf "%s\n" "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac as_fn_append ac_file_inputs " '$ac_f'" done - # Let's still pretend it is 'configure' which instantiates (i.e., don't + # Let's still pretend it is `configure' which instantiates (i.e., don't # use $as_me), people would be surprised to read: # /* config.h. Generated by config.status. */ configure_input='Generated from '` @@ -43472,7 +42895,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_writ esac _ACEOF -# Neutralize VPATH when '$srcdir' = '.'. +# Neutralize VPATH when `$srcdir' = `.'. # Shell code in configure.ac might set extrasub. # FIXME: do we really want to maintain this feature? cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 @@ -43501,9 +42924,9 @@ test -z "$ac_datarootdir_hack$ac_dataroo { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } && { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \ "$ac_tmp/out"`; test -z "$ac_out"; } && - { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir' + { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&5 -printf "%s\n" "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir' +printf "%s\n" "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&2;} rm -f "$ac_tmp/stdin" diff -pruN 2.4.63-1/debian/apache2-dev.install 2.4.64-1/debian/apache2-dev.install --- 2.4.63-1/debian/apache2-dev.install 2025-01-24 06:34:24.000000000 +0000 +++ 2.4.64-1/debian/apache2-dev.install 2025-07-10 16:20:47.000000000 +0000 @@ -1,7 +1,7 @@ /usr/bin/apxs /usr/include/apache2 -/usr/share/apache2/build/*.sh /usr/share/apache2/build/*.mk +/usr/share/apache2/build/*.sh debian/debhelper/apache2.pm /usr/share/perl5/Debian/Debhelper/Sequence/ debian/debhelper/dh_apache2 /usr/bin debian/debhelper/postinst-apache2 /usr/share/debhelper/autoscripts/ diff -pruN 2.4.63-1/debian/apache2-doc.install 2.4.64-1/debian/apache2-doc.install --- 2.4.63-1/debian/apache2-doc.install 2025-01-24 06:34:24.000000000 +0000 +++ 2.4.64-1/debian/apache2-doc.install 2025-07-10 16:20:47.000000000 +0000 @@ -1,5 +1,5 @@ /usr/lib/cgi-bin/printenv /usr/share/doc/apache2-doc/cgi-examples /usr/lib/cgi-bin/test-cgi /usr/share/doc/apache2-doc/cgi-examples /usr/share/apache2/default-site/htdocs/manual /usr/share/doc/apache2-doc -debian/apache2-doc.conf /etc/apache2/conf-available/ debian/SupportApache-small.png /usr/share/doc/apache2-doc/manual/images +debian/apache2-doc.conf /etc/apache2/conf-available/ diff -pruN 2.4.63-1/debian/apache2-utils.manpages 2.4.64-1/debian/apache2-utils.manpages --- 2.4.63-1/debian/apache2-utils.manpages 2025-01-24 06:34:24.000000000 +0000 +++ 2.4.64-1/debian/apache2-utils.manpages 2025-07-10 16:20:47.000000000 +0000 @@ -5,8 +5,8 @@ debian/tmp/usr/share/man/man1/ab.1 debian/tmp/usr/share/man/man1/htdbm.1 debian/tmp/usr/share/man/man1/htdigest.1 debian/tmp/usr/share/man/man1/htpasswd.1 -debian/tmp/usr/share/man/man8/httxt2dbm.8 debian/tmp/usr/share/man/man1/logresolve.1 debian/tmp/usr/share/man/man8/fcgistarter.8 debian/tmp/usr/share/man/man8/htcacheclean.8 +debian/tmp/usr/share/man/man8/httxt2dbm.8 debian/tmp/usr/share/man/man8/rotatelogs.8 diff -pruN 2.4.63-1/debian/apache2.dirs 2.4.64-1/debian/apache2.dirs --- 2.4.63-1/debian/apache2.dirs 2025-01-24 06:43:13.000000000 +0000 +++ 2.4.64-1/debian/apache2.dirs 2025-07-10 16:20:47.000000000 +0000 @@ -1,3 +1,4 @@ +/etc/ufw/applications.d/apache2 etc/apache2/conf-enabled etc/apache2/mods-enabled etc/apache2/sites-enabled @@ -10,4 +11,3 @@ var/cache/apache2/mod_cache_disk var/lib/apache2 var/log/apache2 var/www/html -/etc/ufw/applications.d/apache2 diff -pruN 2.4.63-1/debian/apache2.docs 2.4.64-1/debian/apache2.docs --- 2.4.63-1/debian/apache2.docs 2025-01-24 06:34:24.000000000 +0000 +++ 2.4.64-1/debian/apache2.docs 2025-07-10 16:20:47.000000000 +0000 @@ -1,4 +1,4 @@ +NOTICE debian/PACKAGING debian/README.backtrace debian/README.multiple-instances -NOTICE diff -pruN 2.4.63-1/debian/apache2.install 2.4.64-1/debian/apache2.install --- 2.4.63-1/debian/apache2.install 2025-01-24 06:43:13.000000000 +0000 +++ 2.4.64-1/debian/apache2.install 2025-07-10 16:20:47.000000000 +0000 @@ -1,5 +1,6 @@ debian/a2enmod /usr/sbin debian/a2query /usr/sbin +debian/apache2-utils.ufw.profile /etc/ufw/applications.d/ debian/apache2ctl /usr/sbin debian/ask-for-passphrase /usr/share/apache2/ debian/bash_completion/a2enmod /usr/share/bash-completion/completions/ @@ -8,4 +9,3 @@ debian/config-dir/*.conf /etc/apache2 debian/config-dir/envvars /etc/apache2 debian/config-dir/magic /etc/apache2 debian/debhelper/apache2-maintscript-helper /usr/share/apache2/ -debian/apache2-utils.ufw.profile /etc/ufw/applications.d/ diff -pruN 2.4.63-1/debian/changelog 2.4.64-1/debian/changelog --- 2.4.63-1/debian/changelog 2025-01-24 06:51:38.000000000 +0000 +++ 2.4.64-1/debian/changelog 2025-07-11 04:37:48.000000000 +0000 @@ -1,3 +1,20 @@ +apache2 (2.4.64-1) unstable; urgency=medium + + [ Yadd ] + * Add libanyevent-websocket-client-perl in test-suite dependencies + * Add build dependency to libcrypt-dev (Closes: #1107049) + * Update d/ch + * Drop old and useless build helper (Closes: #1108897) + * New upstream version 2.4.64 + (Closes: CVE-2025-23048, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, + CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020) + * Unfuzz patches + + [ Jo ] + * Adapted comment for SSLSessionTickets (Closes: #972695) + + -- Yadd Fri, 11 Jul 2025 06:37:48 +0200 + apache2 (2.4.63-1) unstable; urgency=medium * Team upload diff -pruN 2.4.63-1/debian/config-dir/mods-available/ssl.conf 2.4.64-1/debian/config-dir/mods-available/ssl.conf --- 2.4.63-1/debian/config-dir/mods-available/ssl.conf 2025-01-24 06:34:24.000000000 +0000 +++ 2.4.64-1/debian/config-dir/mods-available/ssl.conf 2025-07-10 16:20:47.000000000 +0000 @@ -78,6 +78,6 @@ SSLProtocol all -SSLv3 # Default: Off #SSLStrictSNIVHostCheck On -# Warning: Session Tickets require regular reloading of the server! +# Warning: Session Tickets require regular restarting of the server! # Make sure you do this (e.g. via logrotate) before changing this setting! SSLSessionTickets off diff -pruN 2.4.63-1/debian/control 2.4.64-1/debian/control --- 2.4.63-1/debian/control 2025-01-24 06:44:18.000000000 +0000 +++ 2.4.64-1/debian/control 2025-07-10 16:20:47.000000000 +0000 @@ -15,6 +15,9 @@ Build-Depends: debhelper-compat (= 13), libapr1-dev, libaprutil1-dev, libbrotli-dev, + libcrypt-dev, + libcurl4-openssl-dev | libcurl4-dev, + libjansson-dev, liblua5.4-dev, libnghttp2-dev, libpcre2-dev, @@ -22,9 +25,7 @@ Build-Depends: debhelper-compat (= 13), libxml2-dev, lsb-release, perl, - zlib1g-dev, - libcurl4-openssl-dev | libcurl4-dev, - libjansson-dev + zlib1g-dev Build-Conflicts: autoconf2.13 Standards-Version: 4.6.2 Vcs-Browser: https://salsa.debian.org/apache-team/apache2 @@ -38,17 +39,16 @@ Depends: apache2-bin (= ${binary:Version apache2-data (= ${source:Version}), apache2-utils (= ${binary:Version}), media-types, - ${perl:Depends}, procps [!hurd-i386], - ${misc:Depends} + ${misc:Depends}, + ${perl:Depends} Recommends: ssl-cert Suggests: apache2-doc, apache2-suexec-pristine | apache2-suexec-custom, - www-browser, - ufw + ufw, + www-browser Pre-Depends: ${misc:Pre-Depends} -Provides: httpd, - httpd-cgi +Provides: httpd, httpd-cgi Description: Apache HTTP Server The Apache HTTP Server Project's goal is to build a secure, efficient and extensible HTTP server as standards-compliant open source software. The @@ -71,9 +71,7 @@ Description: Apache HTTP Server (common Package: apache2-bin Architecture: any -Depends: ${misc:Depends}, - ${perl:Depends}, - ${shlibs:Depends} +Depends: ${misc:Depends}, ${perl:Depends}, ${shlibs:Depends} Suggests: apache2-doc, apache2-suexec-pristine | apache2-suexec-custom, www-browser @@ -91,9 +89,7 @@ Description: Apache HTTP Server (modules Package: apache2-utils Architecture: any Multi-Arch: foreign -Depends: ${misc:Depends}, - ${perl:Depends}, - ${shlibs:Depends} +Depends: ${misc:Depends}, ${perl:Depends}, ${shlibs:Depends} Description: Apache HTTP Server (utility programs for web servers) Provides some add-on programs useful for any web server. These include: - ab (Apache benchmark tool) @@ -111,9 +107,7 @@ Description: Apache HTTP Server (utility Package: apache2-suexec-pristine Architecture: any -Depends: apache2-bin, - ${misc:Depends}, - ${shlibs:Depends} +Depends: apache2-bin, ${misc:Depends}, ${shlibs:Depends} Provides: apache2-suexec Description: Apache HTTP Server standard suexec program for mod_suexec Provides the standard suexec helper program for mod_suexec. This version is @@ -122,9 +116,7 @@ Description: Apache HTTP Server standard Package: apache2-suexec-custom Architecture: any -Depends: apache2-bin, - ${misc:Depends}, - ${shlibs:Depends} +Depends: apache2-bin, ${misc:Depends}, ${shlibs:Depends} Provides: apache2-suexec Description: Apache HTTP Server configurable suexec program for mod_suexec Provides a customizable version of the suexec helper program for mod_suexec. @@ -159,8 +151,7 @@ Depends: debhelper (>= 10), openssl, ${misc:Depends}, ${perl:Depends} -Provides: dh-apache2, - dh-sequence-apache2 +Provides: dh-apache2, dh-sequence-apache2 Description: Apache HTTP Server (development headers) The Apache HTTP Server Project's goal is to build a secure, efficient and extensible HTTP server as standards-compliant open source software. The @@ -179,9 +170,7 @@ Description: Apache HTTP Server (develop Package: apache2-ssl-dev Architecture: any Multi-Arch: same -Depends: apache2-dev (= ${binary:Version}), - libssl-dev, - ${misc:Depends} +Depends: apache2-dev (= ${binary:Version}), libssl-dev, ${misc:Depends} Description: Apache HTTP Server (mod_ssl development headers) The Apache HTTP Server Project's goal is to build a secure, efficient and extensible HTTP server as standards-compliant open source software. The diff -pruN 2.4.63-1/debian/patches/fhs_compliance.patch 2.4.64-1/debian/patches/fhs_compliance.patch --- 2.4.63-1/debian/patches/fhs_compliance.patch 2025-01-24 06:43:21.000000000 +0000 +++ 2.4.64-1/debian/patches/fhs_compliance.patch 2025-07-10 16:11:05.000000000 +0000 @@ -6,7 +6,7 @@ Last-Update: 2023-10-19 --- a/configure +++ b/configure -@@ -42228,13 +42228,13 @@ +@@ -41654,13 +41654,13 @@ ap_prefix="${ap_cur}" diff -pruN 2.4.63-1/debian/rules 2.4.64-1/debian/rules --- 2.4.63-1/debian/rules 2025-01-24 06:43:13.000000000 +0000 +++ 2.4.64-1/debian/rules 2025-07-10 16:20:47.000000000 +0000 @@ -17,7 +17,7 @@ MODULE_DIR := /usr/lib/apache2/modules/ API := $(shell perl -ne 'print $$1 if m/define\s+MODULE_MAGIC_NUMBER_MAJOR\s+?(.*)$$/' < include/ap_mmn.h) OPENSSL := openssl1.1 AP2_CFLAGS = -pipe $(CFLAGS) -AP2_LDFLAGS = -Wl,--as-needed $(LDFLAGS) -lpcre2-8 -L/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0 +AP2_LDFLAGS = -Wl,--as-needed $(LDFLAGS) AP2_CPPFLAGS = -DPLATFORM='\"$(LSB_RELEASE)\"' -DBUILD_DATETIME='\"$(BUILD_DATETIME)\"' $(CPPFLAGS) AP2_LTFLAGS = --no-silent diff -pruN 2.4.63-1/debian/tests/control 2.4.64-1/debian/tests/control --- 2.4.63-1/debian/tests/control 2025-01-24 06:43:13.000000000 +0000 +++ 2.4.64-1/debian/tests/control 2025-07-10 16:20:47.000000000 +0000 @@ -1,13 +1,24 @@ Tests: run-test-suite Features: no-build-needed Restrictions: allow-stderr isolation-container breaks-testbed needs-root -Depends: build-essential, apache2, apache2-dev, - libwww-perl, libnet-ssleay-perl, libanyevent-perl, libdatetime-perl, - libhtml-parser-perl, libtime-hires-perl, libcrypt-ssleay-perl, - libhttp-dav-perl, libprotocol-http2-perl, libfcgi-perl, - libpcre2-dev, perl-doc +Depends: apache2, + apache2-dev, + build-essential, + libanyevent-perl, + libanyevent-websocket-client-perl, + libcrypt-ssleay-perl, + libdatetime-perl, + libfcgi-perl, + libhtml-parser-perl, + libhttp-dav-perl, + libnet-ssleay-perl, + libpcre2-dev, + libprotocol-http2-perl, + libtime-hires-perl, + libwww-perl, + perl-doc -Tests: duplicate-module-load, default-mods +Tests: default-mods, duplicate-module-load Restrictions: allow-stderr, needs-root Depends: apache2 @@ -21,17 +32,22 @@ Depends: apache2, curl, expect, ssl-cert Tests: check-http2 Restrictions: needs-root allow-stderr breaks-testbed -Depends: apache2, curl, ssl-cert, nghttp2-client +Depends: apache2, curl, nghttp2-client, ssl-cert Tests: chroot Features: no-build-needed Restrictions: needs-root allow-stderr breaks-testbed -Depends: apache2, wget, dpkg-dev, gcc +Depends: dpkg-dev, apache2, gcc, wget Tests: uwsgi Restrictions: allow-stderr, needs-root -Depends: apache2, uwsgi, wget, uwsgi-plugin-python3, rsync, netcat-openbsd | netcat-traditional +Depends: apache2, + netcat-openbsd | netcat-traditional, + rsync, + uwsgi, + uwsgi-plugin-python3, + wget Tests: CVE-2023-25690 -Restrictions: allow-stderr, needs-root, isolation-container -Depends: apache2, rsync, curl, wget +Restrictions: allow-stderr, isolation-container, needs-root +Depends: apache2, curl, rsync, wget diff -pruN 2.4.63-1/docs/manual/mod/core.html.en 2.4.64-1/docs/manual/mod/core.html.en --- 2.4.63-1/docs/manual/mod/core.html.en 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/core.html.en 2025-07-07 15:46:03.000000000 +0000 @@ -5022,8 +5022,12 @@ certain events before failing a request<

Security

-

UNC paths accessed outside of request processing, such as during startup, - are not necessarily checked against the hosts configured with this directive.

+

The values specified by this directive are only checked by some + components of the server, prior to accessing filesystem paths that + may be inadvertently derived from untrusted inputs.

+

Windows systems should be isolated at the network layer from + making outbound SMB/NTLM calls to unexpected destinations as a + more comprehensive and pre-emptive measure.

Directive Ordering

diff -pruN 2.4.63-1/docs/manual/mod/core.html.fr.utf8 2.4.64-1/docs/manual/mod/core.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/core.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/core.html.fr.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -33,6 +33,8 @@  ja  |  tr 

+
Cette traduction peut être périmée. Vérifiez la version + anglaise pour les changements récents.
Description:Fonctionnalités de base du serveur HTTP Apache toujours disponibles
Statut:Noyau httpd
diff -pruN 2.4.63-1/docs/manual/mod/directives.html.de 2.4.64-1/docs/manual/mod/directives.html.de --- 2.4.63-1/docs/manual/mod/directives.html.de 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.de 2025-07-07 15:46:03.000000000 +0000 @@ -305,6 +305,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -447,6 +448,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -461,6 +463,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.en 2.4.64-1/docs/manual/mod/directives.html.en --- 2.4.63-1/docs/manual/mod/directives.html.en 2025-01-08 18:33:50.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.en 2025-07-07 15:46:03.000000000 +0000 @@ -306,6 +306,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -448,6 +449,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -462,6 +464,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.es 2.4.64-1/docs/manual/mod/directives.html.es --- 2.4.63-1/docs/manual/mod/directives.html.es 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.es 2025-07-07 15:46:03.000000000 +0000 @@ -308,6 +308,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -450,6 +451,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -464,6 +466,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.fr.utf8 2.4.64-1/docs/manual/mod/directives.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/directives.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.fr.utf8 2025-06-07 12:45:14.000000000 +0000 @@ -306,6 +306,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -448,6 +449,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -462,6 +464,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.ja.utf8 2.4.64-1/docs/manual/mod/directives.html.ja.utf8 --- 2.4.63-1/docs/manual/mod/directives.html.ja.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.ja.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -303,6 +303,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -445,6 +446,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -459,6 +461,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.ko.euc-kr 2.4.64-1/docs/manual/mod/directives.html.ko.euc-kr --- 2.4.63-1/docs/manual/mod/directives.html.ko.euc-kr 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.ko.euc-kr 2025-07-07 15:46:03.000000000 +0000 @@ -303,6 +303,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -445,6 +446,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -459,6 +461,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.tr.utf8 2.4.64-1/docs/manual/mod/directives.html.tr.utf8 --- 2.4.63-1/docs/manual/mod/directives.html.tr.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.tr.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -302,6 +302,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -444,6 +445,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -458,6 +460,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/directives.html.zh-cn.utf8 2.4.64-1/docs/manual/mod/directives.html.zh-cn.utf8 --- 2.4.63-1/docs/manual/mod/directives.html.zh-cn.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/directives.html.zh-cn.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -301,6 +301,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -443,6 +444,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -457,6 +459,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • diff -pruN 2.4.63-1/docs/manual/mod/mod_http2.html.en 2.4.64-1/docs/manual/mod/mod_http2.html.en --- 2.4.63-1/docs/manual/mod/mod_http2.html.en 2025-01-08 18:33:50.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_http2.html.en 2025-07-07 15:46:03.000000000 +0000 @@ -81,6 +81,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -372,6 +373,28 @@

    +
    top
    +

    H2MaxHeaderBlockLen Directive

    + + + + + + + + +
    Description:Maximum size of response headers
    Syntax:H2MaxHeaderBlockLen n
    Default:H2MaxHeaderBlockLen 0
    Context:server config, virtual host
    Status:Extension
    Module:mod_http2
    Compatibility:Available in version 2.4.64 and later.
    +

    + H2MaxHeaderBlockLen sets the limit + on the overall size of response headers. A setting of 0 + will leave this at the default of 64 KB in nghttp2. +

    +

    + Responses with headers larger than this (adding all headers) + will not be processed and result in a reset of the stream. +

    + +
    top

    H2MaxSessionStreams Directive

    diff -pruN 2.4.63-1/docs/manual/mod/mod_http2.html.fr.utf8 2.4.64-1/docs/manual/mod/mod_http2.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/mod_http2.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_http2.html.fr.utf8 2025-06-07 12:45:14.000000000 +0000 @@ -87,6 +87,7 @@
  • H2EarlyHint
  • H2EarlyHints
  • H2MaxDataFrameLen
    • +
  • H2MaxHeaderBlockLen
  • H2MaxSessionStreams
  • H2MaxWorkerIdleSeconds
  • H2MaxWorkers
    • @@ -420,6 +421,31 @@

    +
    top
    +

    Directive H2MaxHeaderBlockLen

    +
    + + + + + + + +
    Description:Taille maximale des en-têtes d’une réponse
    Syntaxe:H2MaxHeaderBlockLen n
    Défaut:H2MaxHeaderBlockLen 0
    Contexte:configuration globale, serveur virtuel
    Statut:Extension
    Module:mod_http2
    Compatibilité:Disponible à partir de la version 2.4.64 du serveur HTTP + Apache.
    +

    + La directive H2MaxHeaderBlockLen permet + de définir la taille maximale globale des en-têtes d’une + réponse. Définir cette directive à 0 implique une taille maximale + de 64 ko dans nghttp2, ce qui correspond à la valeur par défaut. +

    +

    + Les réponses dont la somme des tailles de tous les en-têtes est + supérieure à la valeur de cette directive ne seront pas traitées + et provoqueront une réinitialisation du flux. +

    + +
    top

    Directive H2MaxSessionStreams

    diff -pruN 2.4.63-1/docs/manual/mod/mod_md.html.en 2.4.64-1/docs/manual/mod/mod_md.html.en --- 2.4.63-1/docs/manual/mod/mod_md.html.en 2025-01-08 18:33:50.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_md.html.en 2025-07-07 15:46:03.000000000 +0000 @@ -44,7 +44,7 @@ ACME protocol (RFC 8555). Certificates will be renewed by the module ahead of their expiration to account for disruption in internet services. There are ways to monitor the status of all - certififcates managed this way and configurations that will run your own + certificates managed this way and configurations that will run your own notification commands on renewal, expiration and errors.

    Second, mod_md offers an alternate OCSP Stapling implementation. This works with @@ -336,6 +336,7 @@

  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -350,6 +351,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • @@ -475,7 +478,7 @@ For testing, CAs commonly offer a second service URL. The 'test' service does not give certificates valid in a browser, but are more relaxed in regard to rate limits. - This allows for verfication of your own setup before switching + This allows for verification of your own setup before switching to the production service URL.

    LE Test Setup

    MDCertificateAuthority https://acme-staging-v02.api.letsencrypt.org/directory
    @@ -485,7 +488,7 @@
    top

    MDCertificateCheck Directive

    - + @@ -676,6 +679,31 @@
    top
    +

    MDCheckInterval Directive

    +
    Description:Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    Description:Set name and URL pattern for a certificate monitoring site.
    Syntax:MDCertificateCheck name url
    Context:server config
    Status:Experimental
    + + + + + + + +
    Description:Determines how often certificates are checked
    Syntax:MDCheckInterval duration
    Default:MDCheckInterval 12h
    Context:server config
    Status:Experimental
    Module:mod_md
    Compatibility:Available in version 2.4.60 and later
    +

    + The time between certificate checks. By default, the validity + and need for renewals is checked twice a day. This interval is + not followed precisely. Instead the module randomly applies + a +/-50% jitter to it. With the default of 12 hours, this + means the actual time between runs varies between 6 and 18 + hours, jittered anew every run. This helps to mitigate + traffic peaks at ACME servers. +

    + The minimum duration you may configure is 1 second. It is + not recommended to use such short times in production. +

    + +
    +
    top

    MDContactEmail Directive

    @@ -735,7 +763,7 @@

    You can configure those globally or for a specific MDomain. Since these values allow anyone to register under the same account, it is - adivsable to give the configuration file restricted permissions, + advisable to give the configuration file restricted permissions, e.g. root only.

    @@ -1135,6 +1163,64 @@ MDomain example2.org auto

    +
    top
    +

    MDProfile Directive

    +
    Description:Email address used for account registration
    + + + + + + +
    Description:Use a specific ACME profile from the CA
    Syntax:MDProfile name
    Context:server config
    Status:Experimental
    Module:mod_md
    Compatibility:Available in version 2.4.64 and later
    +

    + This about a non-standard ACME extension by Let's Encrypt. +

    + Lets Encrypt announced they will add Certificate Profiles + support in their CA during 2025, beginning with their staging + servers. This, among some other details, let's you select the + lifetime of the certificates you get. The "default" profile + will keep the 90 days and a "tlsserver" profile will issue + certificates with only 6 days of validity. +

    + If you do not change your mod_md configuration, you will + continue to get the 90 days certificates. Should you believe + that a shorter lifetime is beneficial for you (and take the + risk that the renewal time is way shorter), + you can configure the profile to use via 'MDProfile tlsserver'. +

    + The profile names are defined by the CA. If a profile you + configure is not available, no profile will be used and + the certificate will be issue according to what the CA + considers default. +

    + See MDProfileMandatory + on how to disable defaults for profiles. +

    + +
    +
    top
    +

    MDProfileMandatory Directive

    + + + + + + + +
    Description:Control if an MDProfile is mandatory.
    Syntax:MDProfileMandatory on|off
    Default:MDProfileMandatory off
    Context:server config
    Status:Experimental
    Module:mod_md
    +

    + Controls if a MDProfile + you configure is mandatory or not. When mandatory and the CA + does not offer a configured profile, the certificate + renewal will fail. +

    + When not mandatory and a profile is not offered by the CA, + renewals will be performed without specifying a profile and + the CA will issue a certificates according to its defaults. +

    + +
    top

    MDRenewMode Directive

    diff -pruN 2.4.63-1/docs/manual/mod/mod_md.html.fr.utf8 2.4.64-1/docs/manual/mod/mod_md.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/mod_md.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_md.html.fr.utf8 2025-06-07 12:45:14.000000000 +0000 @@ -387,6 +387,7 @@
  • MDCertificateStatus
  • MDChallengeDns01
  • MDChallengeDns01Version
    • +
  • MDCheckInterval
  • MDContactEmail
  • MDDriveMode
  • MDExternalAccountBinding
    • @@ -401,6 +402,8 @@
  • <MDomainSet>
  • MDPortMap
  • MDPrivateKeys
    • +
  • MDProfile
    • +
  • MDProfileMandatory
  • MDRenewMode
  • MDRenewWindow
  • MDRequireHttps
    • @@ -558,9 +561,8 @@
    top

    Directive MDCertificateCheck

    - + @@ -777,6 +779,35 @@
    top
    +

    Directive MDCheckInterval

    +
    Description:Définit le motif de nom pour un nom sitSet de - vérification de certificat et un motif d'URL pour un sitee de - vérification de certificat
    Description:Définit le motif de nom et d’URL pour un nom de site de + vérification de certificat.
    Syntaxe:MDCertificateCheck name url
    Contexte:configuration globale
    Statut:Expérimental
    + + + + + + + +
    Description:Détermine la périodicité de la vérification des certificats
    Syntaxe:MDCheckInterval duration
    Défaut:MDCheckInterval 12h
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_md
    Compatibilité:Disponible à partir de la version 2.4.60 du serveur HTTP + Apache
    +

    + Cette option permet de définir l’intervalle entre deux + vérifications de certificat. Par défaut, la validité et le besoin de + renouvellement sont vérifiés deux fois par jour. Cet intervalle + n’est cependant pas appliqué avec précision. En effet, le module lui + applique une plage de variation aléatoire de +/- 50%. Avec + l’intervalle par défaut de 12 heures, cela signifie que l’intervalle + réel entre deux vérifications varie entre 6 et 18 heures, la + variation s’appliquant à nouveau à chaque vérification. Cela permet + d’atténuer les pics de trafic sur les serveurs ACME. +

    + La valeur minimale pouvant être définie pour l’intervalle est de + 1 seconde. Il est cependant déconseillé de définir un intervalle + aussi court sur un serveur en production. +

    + +
    +
    top

    Directive MDContactEmail

    @@ -1317,6 +1348,69 @@ MDomain example2.org auto

    +
    top
    +

    Directive MDProfile

    +
    Description:Adresse Email pour l'enregistrement du compte
    + + + + + + +
    Description:Utiliser un profile ACME spécifique depuis le CA
    Syntaxe:MDProfile name
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_md
    Compatibilité:Disponible à partir de la version 2.4.64 du serveur HTTP + Apache
    +

    + Il s’agit d’une extension non standard d’ACME par Let's Encrypt. +

    + Lets Encrypt a annoncé qu’ils allaient ajouter la prise en + charge des profiles de certificat à leurs CA courant 2025, en + commençant par leurs serveurs de test. Cette fonctionnalité, + entre autres détails, vous permettra de définir la durée de + validité des certificats que vous recevez. À ce titre, le + profile « default Â» conservera la valeur de 90 jours, alors que + le profile « tlsserver Â» délivrera des certificats dont la durée + de validité sera de 6 jours seulement. +

    + Si vous ne modifiez pas la configuration de votre module mod_md, + vous continuerez à recevoir des certificats d’une durée de + validité de 90 jours. Si vous pensez qu’une durée de validité + plus courte convient mieux à votre situation (et acceptez le + risque que le temps de renouvellement soit beaucoup plus court), + vous pouvez définir le profile à utiliser à l’aide de + « MDProfile tlsserver Â». +

    + Les noms de profile sont définis par le CA. Si vous tentez de + définie un profile non valable, aucun profile ne sera utilisé, + et le certificat sera délivré avec les valeurs par défaut du CA. +

    + Voir la directive MDProfileMandatory pour la manière + de désactiver les valeurs par défaut pour les profiles. +

    + +
    +
    top
    +

    Directive MDProfileMandatory

    + + + + + + + +
    Description:Contrôler si un MDProfile est obligatoire.
    Syntaxe:MDProfileMandatory on|off
    Défaut:MDProfileMandatory off
    Contexte:configuration globale
    Statut:Expérimental
    Module:mod_md
    +

    + Cette directive permet de contrôler si un MDProfile que vous définissez est + obligatoire ou non. S’il est obligatoire et si le CA ne propose + pas de profile configuré, le renouvellement du certificat + échouera. +

    + S’il n’est pas obligatoire et si le CA ne propose + pas de profile, les renouvellements seront effectués sans + profile particulier et le CA délivrera les certificats avec les + valeurs par défaut. +

    + +
    top

    Directive MDRenewMode

    diff -pruN 2.4.63-1/docs/manual/mod/mod_ssl.html.en 2.4.64-1/docs/manual/mod/mod_ssl.html.en --- 2.4.63-1/docs/manual/mod/mod_ssl.html.en 2025-01-08 18:33:50.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_ssl.html.en 2025-05-12 14:01:21.000000000 +0000 @@ -39,7 +39,7 @@ Layer (SSL) and Transport Layer Security

    This module provides SSL v3 and TLS v1.x support for the Apache HTTP Server. SSL v2 is no longer supported.

    -

    This module relies on OpenSSL +

    This module relies on OpenSSL to provide the cryptography engine.

    Further details, discussion, and examples are provided in the @@ -791,7 +791,7 @@ Since TLSv1.3 does not offer renegotiati a directory context is not allowed.

    For a list of TLSv1.3 cipher names, see -the OpenSSL +the OpenSSL documentation.

    An SSL cipher specification in cipher-spec is composed of 4 major @@ -988,7 +988,7 @@ With OpenSSL 3.0 or later, if no engine is specified using a PKCS#11 URIs then it is tried to load the key and certificate from an OpenSSL provider. The OpenSSL provider to use must be defined and configured in the OpenSSL config file, -and it must support the STORE method +and it must support the STORE method for PKCS#11 URIs.

    @@ -1290,7 +1290,7 @@ features are added to OpenSSL.

    depends on the OpenSSL version being used for mod_ssl (at least version 1.0.2 is required). For a list of supported command names, see the section Supported configuration file commands in the -SSL_CONF_cmd(3) manual page for OpenSSL.

    +SSL_CONF_cmd(3) manual page for OpenSSL.

    Some of the SSLOpenSSLConfCmd commands can be used as an alternative to existing directives (such as diff -pruN 2.4.63-1/docs/manual/mod/mod_ssl.html.fr.utf8 2.4.64-1/docs/manual/mod/mod_ssl.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/mod_ssl.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/mod_ssl.html.fr.utf8 2025-05-17 13:40:09.000000000 +0000 @@ -39,7 +39,7 @@ Sockets Layer (SSL) et Transport Layer S

    Ce module fournit le support SSL v3 et TLS v1 au serveur HTTP Apache. SSL v2 n'est plus supporté.

    -

    Ce module s'appuie sur OpenSSL +

    Ce module s'appuie sur OpenSSL pour fournir le moteur de chiffrement.

    D'autres détails, discussions et exemples sont fournis dans la documentation SSL.

    @@ -892,8 +892,8 @@ TLSv1.3 n'autorise pas la renégociation chiffrement dans un contexte de répertoire n'est pas autorisé

    Pour obtenir la liste des noms d'algorithmes de chiffrement pour TLSv1.3, se -référer à la the -OpenSSL documentation.

    +référer à la documentation +OpenSSL.

    La liste d'algorithmes de chiffrement SSL spécifiée par l'argument cipher-spec comporte quatre attributs principaux auxquels @@ -1131,7 +1131,7 @@ À partir de la version 3.0 d'OpenSSL, s que la clé ou le certificat sont spécifiés à l'aide d'URIs PKCS#11, le chargement de la clé et du certificat est tenté à partir d'un fournisseur OpenSSL. Le fournisseur OpenSSL à utiliser doit être défini et configuré dans le fichier de -configuration d'OpenSSL et il doit prendre en charge la méthode +configuration d'OpenSSL et il doit prendre en charge la méthode STORE pour les URIs PKCS#11.

    @@ -1452,7 +1452,7 @@ ce dernier beaucoup plus souple.

    utilisée pour mod_ssl (la version minimale 1.0.2 est un prérequis). Pour obtenir la liste des commandes supportées, voir la section Supported configuration file commands de la page de -manuel d'OpenSSL SSL_CONF_cmd(3).

    +manuel d'OpenSSL SSL_CONF_cmd(3).

    Certaines commandes peuvent remplacer des directives existantes (comme SSLCipherSuite ou diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.de 2.4.64-1/docs/manual/mod/quickreference.html.de --- 2.4.63-1/docs/manual/mod/quickreference.html.de 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.de 2025-07-07 15:46:03.000000000 +0000 @@ -502,229 +502,231 @@ requests

    - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + - + - - - + + - - - - - + + + + - - + - - - - - - - - + + - - - - - + - - - - - - + + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - - + - - - + - - - - - - + + + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - - - - - - - - - - - - + + + + + - - - - - - - - - + + + + + + + + + + @@ -739,6 +741,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.en 2.4.64-1/docs/manual/mod/quickreference.html.en --- 2.4.63-1/docs/manual/mod/quickreference.html.en 2025-01-08 18:33:50.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.en 2025-07-07 15:46:03.000000000 +0000 @@ -497,227 +497,229 @@ requests - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + - + - - - + + - - - - - + + + + - - + - - - - - - - - + + - - - - - + - - - - - - + + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - + - - + - - + - - - - - + + - + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - - - - - - - - - - - - + + + + + + - - - - - - - - - + + + + + + + + + + @@ -732,6 +734,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.es 2.4.64-1/docs/manual/mod/quickreference.html.es --- 2.4.63-1/docs/manual/mod/quickreference.html.es 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.es 2025-07-07 15:46:03.000000000 +0000 @@ -500,227 +500,229 @@ requests - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + - + - - - + + - - - - - + + + + - - + - - - - - - - - + + - - - - - + - - - - - - + + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - + - - + - - + - - - - - + + - + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - - - - - - - - - - - - + + + + + + - - - - - - - - - + + + + + + + + + + @@ -735,6 +737,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.fr.utf8 2.4.64-1/docs/manual/mod/quickreference.html.fr.utf8 --- 2.4.63-1/docs/manual/mod/quickreference.html.fr.utf8 2025-01-11 15:01:12.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.fr.utf8 2025-06-07 12:45:14.000000000 +0000 @@ -610,305 +610,306 @@ requêtes retour 103 Early Hints - - + + - - - - - + - - - - - - + + + + + - - - - - - - + + - - + - - - + - - - - - + - - - - - - - - - - - - - - + - - - - - - - - - - - - - - + - - - - - - - - + - - - - - - - - + - - - - - - - - - - - - - - + - - - - - - - - - + - - - + - - - - - - - - - - - - - + + - - - + + - - - + - + - - - - - - - - - - - + + + - - - - - - + + + - - - + + - - + + + - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + - - - + + - - - + + - - + - - + - - - - - - - - + + - - - + - - + - - - - - - + + - - - - + + - - - - + + - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - + - - - - - - - + + + + - - + - - + - - - - + + + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - + - - - - - - - - - - - + + + + + + - - - - - - - - - + + + + + + + + + + @@ -698,6 +700,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.ko.euc-kr 2.4.64-1/docs/manual/mod/quickreference.html.ko.euc-kr --- 2.4.63-1/docs/manual/mod/quickreference.html.ko.euc-kr 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.ko.euc-kr 2025-07-07 15:46:03.000000000 +0000 @@ -473,220 +473,222 @@ requests - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + - - - - - - - + + + + + + - - - - - - - - + + - - + - - - - + + - - - - - + + + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - + - - + - - + - - - - - + + - + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - - - - - - - - - - - - + + + + + + - - - - - - - - - + + + + + + + + + + @@ -701,6 +703,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.tr.utf8 2.4.64-1/docs/manual/mod/quickreference.html.tr.utf8 --- 2.4.63-1/docs/manual/mod/quickreference.html.tr.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.tr.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -493,228 +493,230 @@ expr=ifade] - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + - + - - - + + - - - - - + + + + - - + - - - + - - - - - + + + - - - - - + + - - - - - - + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - - + + - - + - - - - - - + - + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - + - - - - - - - - - - - + + + + + + + + - - - - - - - - - + + + + + + + + + + @@ -729,6 +731,8 @@ processing + + diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.zh-cn.utf8 2.4.64-1/docs/manual/mod/quickreference.html.zh-cn.utf8 --- 2.4.63-1/docs/manual/mod/quickreference.html.zh-cn.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.zh-cn.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -492,227 +492,229 @@ requests - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + - + - - - + + - - - - - + + + + - - + - - - - - - - - + + - - - - - + - - - - - - + + + - - - - + + - - - + - - - - - - - - + + + + + - - - - - - - - - + + + + + + + - - - - + + - - - - - - - - + - - + - - + - - - - - + + - + - - - - - - + + + + - - + - - + - - - - - - - - - - - - + + + + + + + + + + + - + - - - - - - - - - - - - - + + + + + + - - - - - - - - - + + + + + + + + + + @@ -727,6 +729,8 @@ simultaneously + + diff -pruN 2.4.63-1/docs/manual/style/version.ent 2.4.64-1/docs/manual/style/version.ent --- 2.4.63-1/docs/manual/style/version.ent 2024-07-17 18:20:34.000000000 +0000 +++ 2.4.64-1/docs/manual/style/version.ent 2025-01-23 20:50:10.000000000 +0000 @@ -19,6 +19,6 @@ - + diff -pruN 2.4.63-1/httpd.spec 2.4.64-1/httpd.spec --- 2.4.63-1/httpd.spec 2025-01-20 19:35:40.000000000 +0000 +++ 2.4.64-1/httpd.spec 2025-07-07 15:53:58.000000000 +0000 @@ -4,7 +4,7 @@ Summary: Apache HTTP Server Name: httpd -Version: 2.4.63 +Version: 2.4.64 Release: 1 URL: http://httpd.apache.org/ Vendor: Apache Software Foundation diff -pruN 2.4.63-1/include/ap_config_auto.h.in 2.4.64-1/include/ap_config_auto.h.in --- 2.4.63-1/include/ap_config_auto.h.in 2025-01-20 19:35:40.000000000 +0000 +++ 2.4.64-1/include/ap_config_auto.h.in 2025-07-07 15:53:57.000000000 +0000 @@ -55,10 +55,10 @@ /* Define as default argument for thread id in error logging */ #undef DEFAULT_LOG_TID -/* Define to 1 if you have the 'arc4random_buf' function. */ +/* Define to 1 if you have the `arc4random_buf' function. */ #undef HAVE_ARC4RANDOM_BUF -/* Define to 1 if you have the 'bindprocessor' function. */ +/* Define to 1 if you have the `bindprocessor' function. */ #undef HAVE_BINDPROCESSOR /* Define to 1 if you have the header file. */ @@ -82,31 +82,31 @@ /* Define to 1 if you have the header file. */ #undef HAVE_DISTCACHE_DC_CLIENT_H -/* Define to 1 if you have the 'ENGINE_init' function. */ +/* Define to 1 if you have the `ENGINE_init' function. */ #undef HAVE_ENGINE_INIT -/* Define to 1 if you have the 'ENGINE_load_builtin_engines' function. */ +/* Define to 1 if you have the `ENGINE_load_builtin_engines' function. */ #undef HAVE_ENGINE_LOAD_BUILTIN_ENGINES -/* Define to 1 if you have the 'epoll_create' function. */ +/* Define to 1 if you have the `epoll_create' function. */ #undef HAVE_EPOLL_CREATE -/* Define to 1 if you have the 'fopen64' function. */ +/* Define to 1 if you have the `fopen64' function. */ #undef HAVE_FOPEN64 -/* Define to 1 if you have the 'getgrnam' function. */ +/* Define to 1 if you have the `getgrnam' function. */ #undef HAVE_GETGRNAM -/* Define to 1 if you have the 'getloadavg' function. */ +/* Define to 1 if you have the `getloadavg' function. */ #undef HAVE_GETLOADAVG -/* Define to 1 if you have the 'getpgid' function. */ +/* Define to 1 if you have the `getpgid' function. */ #undef HAVE_GETPGID -/* Define to 1 if you have the 'getpwnam' function. */ +/* Define to 1 if you have the `getpwnam' function. */ #undef HAVE_GETPWNAM -/* Define to 1 if you have the 'gettid' function. */ +/* Define to 1 if you have the `gettid' function. */ #undef HAVE_GETTID /* Define if struct tm has a tm_gmtoff field */ @@ -115,7 +115,7 @@ /* Define to 1 if you have the header file. */ #undef HAVE_GRP_H -/* Define to 1 if you have the 'initgroups' function. */ +/* Define to 1 if you have the `initgroups' function. */ #undef HAVE_INITGROUPS /* Define to 1 if you have the header file. */ @@ -124,10 +124,10 @@ /* Define if jansson is available */ #undef HAVE_JANSSON -/* Define to 1 if you have the 'killpg' function. */ +/* Define to 1 if you have the `killpg' function. */ #undef HAVE_KILLPG -/* Define to 1 if you have the 'kqueue' function. */ +/* Define to 1 if you have the `kqueue' function. */ #undef HAVE_KQUEUE /* Define to 1 if you have the header file. */ @@ -142,31 +142,31 @@ /* Define to 1 if you have the header file. */ #undef HAVE_NGHTTP2_NGHTTP2_H -/* Define to 1 if you have the 'nghttp2_option_set_no_closed_streams' +/* Define to 1 if you have the `nghttp2_option_set_no_closed_streams' function. */ #undef HAVE_NGHTTP2_OPTION_SET_NO_CLOSED_STREAMS /* Define to 1 if you have the - 'nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation' + `nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation' function. */ #undef HAVE_NGHTTP2_OPTION_SET_NO_RFC9113_LEADING_AND_TRAILING_WS_VALIDATION /* Define to 1 if you have the - 'nghttp2_session_callbacks_set_on_invalid_header_callback' function. */ + `nghttp2_session_callbacks_set_on_invalid_header_callback' function. */ #undef HAVE_NGHTTP2_SESSION_CALLBACKS_SET_ON_INVALID_HEADER_CALLBACK -/* Define to 1 if you have the 'nghttp2_session_change_stream_priority' +/* Define to 1 if you have the `nghttp2_session_change_stream_priority' function. */ #undef HAVE_NGHTTP2_SESSION_CHANGE_STREAM_PRIORITY -/* Define to 1 if you have the 'nghttp2_session_get_stream_local_window_size' +/* Define to 1 if you have the `nghttp2_session_get_stream_local_window_size' function. */ #undef HAVE_NGHTTP2_SESSION_GET_STREAM_LOCAL_WINDOW_SIZE -/* Define to 1 if you have the 'nghttp2_session_server_new2' function. */ +/* Define to 1 if you have the `nghttp2_session_server_new2' function. */ #undef HAVE_NGHTTP2_SESSION_SERVER_NEW2 -/* Define to 1 if you have the 'nghttp2_stream_get_weight' function. */ +/* Define to 1 if you have the `nghttp2_stream_get_weight' function. */ #undef HAVE_NGHTTP2_STREAM_GET_WEIGHT /* Define if OpenSSL is available */ @@ -175,34 +175,37 @@ /* Define to 1 if you have the header file. */ #undef HAVE_OPENSSL_ENGINE_H -/* Define to 1 if you have the 'OPENSSL_init_ssl' function. */ +/* Define to 1 if you have the `OPENSSL_init_ssl' function. */ #undef HAVE_OPENSSL_INIT_SSL /* Detected PCRE2 */ #undef HAVE_PCRE2 -/* Define to 1 if you have the 'port_create' function. */ +/* Define to 1 if you have the `port_create' function. */ #undef HAVE_PORT_CREATE -/* Define to 1 if you have the 'prctl' function. */ +/* Define to 1 if you have the `prctl' function. */ #undef HAVE_PRCTL /* Define to 1 if you have the header file. */ #undef HAVE_PRIV_H -/* Define to 1 if you have the 'pthread_kill' function. */ +/* Define to 1 if you have the `pthread_kill' function. */ #undef HAVE_PTHREAD_KILL /* Define to 1 if you have the header file. */ #undef HAVE_PWD_H -/* Define to 1 if you have the 'RAND_egd' function. */ +/* Define to 1 if you have the `RAND_egd' function. */ #undef HAVE_RAND_EGD -/* Define to 1 if you have the 'setsid' function. */ +/* Defined if SELinux is supported */ +#undef HAVE_SELINUX + +/* Define to 1 if you have the `setsid' function. */ #undef HAVE_SETSID -/* Define to 1 if you have the 'SSL_CTX_new' function. */ +/* Define to 1 if you have the `SSL_CTX_new' function. */ #undef HAVE_SSL_CTX_NEW /* Define to 1 if you have the header file. */ @@ -220,7 +223,7 @@ /* Define to 1 if you have the header file. */ #undef HAVE_STRING_H -/* Define to 1 if you have the 'syslog' function. */ +/* Define to 1 if you have the `syslog' function. */ #undef HAVE_SYSLOG /* Define if systemd is supported */ @@ -271,16 +274,16 @@ /* Define to 1 if you have that is POSIX.1 compatible. */ #undef HAVE_SYS_WAIT_H -/* Define to 1 if you have the 'timegm' function. */ +/* Define to 1 if you have the `timegm' function. */ #undef HAVE_TIMEGM -/* Define to 1 if you have the 'times' function. */ +/* Define to 1 if you have the `times' function. */ #undef HAVE_TIMES /* Define to 1 if you have the header file. */ #undef HAVE_UNISTD_H -/* Define to 1 if you have the 'vsyslog' function. */ +/* Define to 1 if you have the `vsyslog' function. */ #undef HAVE_VSYSLOG /* Define to 1 if you have the header file. */ @@ -313,7 +316,7 @@ /* This platform doesn't suffer from the thundering herd problem */ #undef SINGLE_LISTEN_UNSERIALIZED_ACCEPT -/* Define to 1 if all of the C89 standard headers exist (not just the ones +/* Define to 1 if all of the C90 standard headers exist (not just the ones required in a freestanding environment). This macro is provided for backward compatibility; new code need not use it. */ #undef STDC_HEADERS @@ -321,7 +324,7 @@ /* Path to suexec binary */ #undef SUEXEC_BIN -/* Enable extensions on AIX, Interix, z/OS. */ +/* Enable extensions on AIX 3, Interix. */ #ifndef _ALL_SOURCE # undef _ALL_SOURCE #endif @@ -382,15 +385,11 @@ #ifndef __STDC_WANT_IEC_60559_DFP_EXT__ # undef __STDC_WANT_IEC_60559_DFP_EXT__ #endif -/* Enable extensions specified by C23 Annex F. */ -#ifndef __STDC_WANT_IEC_60559_EXT__ -# undef __STDC_WANT_IEC_60559_EXT__ -#endif /* Enable extensions specified by ISO/IEC TS 18661-4:2015. */ #ifndef __STDC_WANT_IEC_60559_FUNCS_EXT__ # undef __STDC_WANT_IEC_60559_FUNCS_EXT__ #endif -/* Enable extensions specified by C23 Annex H and ISO/IEC TS 18661-3:2015. */ +/* Enable extensions specified by ISO/IEC TS 18661-3:2015. */ #ifndef __STDC_WANT_IEC_60559_TYPES_EXT__ # undef __STDC_WANT_IEC_60559_TYPES_EXT__ #endif @@ -413,7 +412,7 @@ #endif -/* Define to empty if 'const' does not conform to ANSI C. */ +/* Define to empty if `const' does not conform to ANSI C. */ #undef const /* Define to 'int' if doesn't define it for us */ diff -pruN 2.4.63-1/include/ap_listen.h 2.4.64-1/include/ap_listen.h --- 2.4.63-1/include/ap_listen.h 2016-05-30 19:26:54.000000000 +0000 +++ 2.4.64-1/include/ap_listen.h 2025-06-04 09:41:25.000000000 +0000 @@ -29,6 +29,7 @@ #include "apr_network_io.h" #include "httpd.h" #include "http_config.h" +#include "apr_optional.h" #ifdef __cplusplus extern "C" { @@ -143,6 +144,15 @@ AP_DECLARE_NONSTD(const char *) ap_set_r void *dummy, const char *arg); +#ifdef HAVE_SYSTEMD +APR_DECLARE_OPTIONAL_FN(int, + ap_find_systemd_socket, (process_rec *, apr_port_t)); + +APR_DECLARE_OPTIONAL_FN(int, + ap_systemd_listen_fds, (int)); +#endif + + #define LISTEN_COMMANDS \ AP_INIT_TAKE1("ListenBacklog", ap_set_listenbacklog, NULL, RSRC_CONF, \ "Maximum length of the queue of pending connections, as used by listen(2)"), \ diff -pruN 2.4.63-1/include/ap_mmn.h 2.4.64-1/include/ap_mmn.h --- 2.4.63-1/include/ap_mmn.h 2025-01-07 15:05:35.000000000 +0000 +++ 2.4.64-1/include/ap_mmn.h 2025-07-07 12:02:22.000000000 +0000 @@ -608,6 +608,9 @@ * 20120211.136 (2.4.63-dev) Add wait_io field to struct process_score * 20120211.137 (2.4.63-dev) Add AP_MPMQ_CAN_WAITIO * 20120211.138 (2.4.63-dev) Add is_host_matchable to proxy_worker_shared + * 20120211.139 (2.4.63-dev) Add dav_get_base_path() to mod_dav + * 20120211.140 (2.4.64-dev) Add ap_set_time_process_request() to scoreboard.h + * 20120211.141 (2.4.64-dev) add ap_stat_check() to httpd.h */ #define MODULE_MAGIC_COOKIE 0x41503234UL /* "AP24" */ @@ -615,7 +618,7 @@ #ifndef MODULE_MAGIC_NUMBER_MAJOR #define MODULE_MAGIC_NUMBER_MAJOR 20120211 #endif -#define MODULE_MAGIC_NUMBER_MINOR 138 /* 0...n */ +#define MODULE_MAGIC_NUMBER_MINOR 141 /* 0...n */ /** * Determine if the server's current MODULE_MAGIC_NUMBER is at least a diff -pruN 2.4.63-1/include/ap_release.h 2.4.64-1/include/ap_release.h --- 2.4.63-1/include/ap_release.h 2025-01-20 19:03:14.000000000 +0000 +++ 2.4.64-1/include/ap_release.h 2025-07-07 15:46:03.000000000 +0000 @@ -43,7 +43,7 @@ #define AP_SERVER_MAJORVERSION_NUMBER 2 #define AP_SERVER_MINORVERSION_NUMBER 4 -#define AP_SERVER_PATCHLEVEL_NUMBER 63 +#define AP_SERVER_PATCHLEVEL_NUMBER 64 #define AP_SERVER_DEVBUILD_BOOLEAN 0 /* Synchronize the above with docs/manual/style/version.ent */ diff -pruN 2.4.63-1/include/httpd.h 2.4.64-1/include/httpd.h --- 2.4.63-1/include/httpd.h 2025-01-15 11:51:28.000000000 +0000 +++ 2.4.64-1/include/httpd.h 2025-07-07 12:02:22.000000000 +0000 @@ -2708,6 +2708,15 @@ AP_DECLARE(apr_status_t) ap_filepath_mer #define AP_SLASHES "/" #endif +/** + * Validates the path parameter is safe to pass to stat-like calls. + * @param path The filesystem path to cehck + * @param p a pool for temporary allocations + * @return APR_SUCCESS if the stat-like call should be allowed + */ +AP_DECLARE(apr_status_t) ap_stat_check(const char *path, apr_pool_t *pool); + + #ifdef __cplusplus } #endif diff -pruN 2.4.63-1/include/scoreboard.h 2.4.64-1/include/scoreboard.h --- 2.4.63-1/include/scoreboard.h 2024-07-27 14:18:49.000000000 +0000 +++ 2.4.64-1/include/scoreboard.h 2025-06-03 08:02:35.000000000 +0000 @@ -198,7 +198,9 @@ AP_DECLARE(int) ap_update_child_status_f AP_DECLARE(int) ap_update_child_status_descr(ap_sb_handle_t *sbh, int status, const char *descr); AP_DECLARE(void) ap_time_process_request(ap_sb_handle_t *sbh, int status); - +AP_DECLARE(void) ap_set_time_process_request(ap_sb_handle_t* const sbh, + const apr_time_t timebeg,const apr_time_t timeend); + AP_DECLARE(int) ap_update_global_status(void); AP_DECLARE(worker_score *) ap_get_scoreboard_worker(ap_sb_handle_t *sbh); diff -pruN 2.4.63-1/modules/arch/unix/config5.m4 2.4.64-1/modules/arch/unix/config5.m4 --- 2.4.63-1/modules/arch/unix/config5.m4 2020-02-03 07:56:05.000000000 +0000 +++ 2.4.64-1/modules/arch/unix/config5.m4 2025-06-04 09:41:25.000000000 +0000 @@ -23,6 +23,11 @@ APACHE_MODULE(systemd, Systemd support, AC_MSG_WARN([Your system does not support systemd.]) enable_systemd="no" else + AC_CHECK_LIB(selinux, is_selinux_enabled, [ + AC_DEFINE(HAVE_SELINUX, 1, [Defined if SELinux is supported]) + APR_ADDTO(MOD_SYSTEMD_LDADD, [-lselinux]) + ]) + APR_ADDTO(MOD_SYSTEMD_LDADD, [$SYSTEMD_LIBS]) fi ]) diff -pruN 2.4.63-1/modules/arch/unix/mod_systemd.c 2.4.64-1/modules/arch/unix/mod_systemd.c --- 2.4.63-1/modules/arch/unix/mod_systemd.c 2020-02-07 17:01:07.000000000 +0000 +++ 2.4.64-1/modules/arch/unix/mod_systemd.c 2025-06-04 09:41:25.000000000 +0000 @@ -18,6 +18,7 @@ #include #include #include "ap_mpm.h" +#include "ap_listen.h" #include #include #include @@ -28,6 +29,10 @@ #include "scoreboard.h" #include "mpm_common.h" +#ifdef HAVE_SELINUX +#include +#endif + #include "systemd/sd-daemon.h" #if APR_HAVE_UNISTD_H @@ -44,6 +49,20 @@ static int systemd_pre_config(apr_pool_t return OK; } +#ifdef HAVE_SELINUX +static void log_selinux_context(void) +{ + char *con; + + if (is_selinux_enabled() && getcon(&con) == 0) { + ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, NULL, + APLOGNO(10497) "SELinux is enabled; " + "httpd running as context %s", con); + freecon(con); + } +} +#endif + /* Report the service is ready in post_config, which could be during * startup or after a reload. The server could still hit a fatal * startup error after this point during ap_run_mpm(), so this is @@ -51,9 +70,16 @@ static int systemd_pre_config(apr_pool_t * the TCP ports so new connections will not be rejected. There will * always be a possible async failure event simultaneous to the * service reporting "ready", so this should be good enough. */ -static int systemd_post_config(apr_pool_t *p, apr_pool_t *plog, +static int systemd_post_config(apr_pool_t *pconf, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *main_server) { + if (ap_state_query(AP_SQ_MAIN_STATE) == AP_SQ_MS_CREATE_PRE_CONFIG) + return OK; + +#ifdef HAVE_SELINUX + log_selinux_context(); +#endif + sd_notify(0, "READY=1\n" "STATUS=Configuration loaded.\n"); return OK; @@ -96,8 +122,42 @@ static int systemd_monitor(apr_pool_t *p return DECLINED; } +static int ap_find_systemd_socket(process_rec * process, apr_port_t port) { + int fdcount, fd; + int sdc = sd_listen_fds(0); + + if (sdc < 0) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, sdc, process->pool, APLOGNO(02486) + "find_systemd_socket: Error parsing enviroment, sd_listen_fds returned %d", + sdc); + return -1; + } + + if (sdc == 0) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, sdc, process->pool, APLOGNO(02487) + "find_systemd_socket: At least one socket must be set."); + return -1; + } + + fdcount = atoi(getenv("LISTEN_FDS")); + for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + fdcount; fd++) { + if (sd_is_socket_inet(fd, 0, 0, -1, port) > 0) { + return fd; + } + } + + return -1; +} + +static int ap_systemd_listen_fds(int unset_environment){ + return sd_listen_fds(unset_environment); +} + static void systemd_register_hooks(apr_pool_t *p) { + APR_REGISTER_OPTIONAL_FN(ap_systemd_listen_fds); + APR_REGISTER_OPTIONAL_FN(ap_find_systemd_socket); + /* Enable ap_extended_status. */ ap_hook_pre_config(systemd_pre_config, NULL, NULL, APR_HOOK_LAST); /* Signal service is ready. */ diff -pruN 2.4.63-1/modules/dav/main/mod_dav.c 2.4.64-1/modules/dav/main/mod_dav.c --- 2.4.63-1/modules/dav/main/mod_dav.c 2024-07-02 13:07:17.000000000 +0000 +++ 2.4.64-1/modules/dav/main/mod_dav.c 2025-06-02 14:52:51.000000000 +0000 @@ -250,6 +250,13 @@ DAV_DECLARE(const dav_hooks_search *) da return dav_get_provider(r)->search; } +DAV_DECLARE(const char *) dav_get_base_path(request_rec *r) +{ + dav_dir_conf *conf = ap_get_module_config(r->per_dir_config, &dav_module); + + return conf && conf->base ? conf->base : NULL; +} + /* * Command handler for the DAV directive, which is TAKE1. */ diff -pruN 2.4.63-1/modules/dav/main/mod_dav.h 2.4.64-1/modules/dav/main/mod_dav.h --- 2.4.63-1/modules/dav/main/mod_dav.h 2023-11-20 13:16:10.000000000 +0000 +++ 2.4.64-1/modules/dav/main/mod_dav.h 2025-06-02 14:52:51.000000000 +0000 @@ -430,6 +430,11 @@ typedef struct dav_locktoken dav_locktok DAV_DECLARE(dav_error *) dav_get_resource(request_rec *r, int label_allowed, int use_checked_in, dav_resource **res_p); +/* +** If DavBasePath is configured for the request location, return the +** configured path, otherwise NULL. +*/ +DAV_DECLARE(const char *) dav_get_base_path(request_rec *r); /* -------------------------------------------------------------------- ** diff -pruN 2.4.63-1/modules/generators/mod_asis.c 2.4.64-1/modules/generators/mod_asis.c --- 2.4.63-1/modules/generators/mod_asis.c 2015-05-29 20:07:15.000000000 +0000 +++ 2.4.64-1/modules/generators/mod_asis.c 2025-06-10 11:04:01.000000000 +0000 @@ -99,7 +99,7 @@ static int asis_handler(request_rec *r) APR_BRIGADE_INSERT_TAIL(bb, b); rv = ap_pass_brigade(r->output_filters, bb); if (rv != APR_SUCCESS) { - ap_log_rerror(APLOG_MARK, APLOG_ERR, rv, r, APLOGNO(01236) + ap_log_rerror(APLOG_MARK, APLOG_DEBUG, rv, r, APLOGNO(01236) "mod_asis: ap_pass_brigade failed for file %s", r->filename); return AP_FILTER_ERROR; } diff -pruN 2.4.63-1/modules/http/http_filters.c 2.4.64-1/modules/http/http_filters.c --- 2.4.63-1/modules/http/http_filters.c 2024-07-02 13:07:17.000000000 +0000 +++ 2.4.64-1/modules/http/http_filters.c 2025-07-07 11:59:38.000000000 +0000 @@ -1300,107 +1300,10 @@ typedef struct header_filter_ctx { int headers_sent; } header_filter_ctx; -AP_CORE_DECLARE_NONSTD(apr_status_t) ap_http_header_filter(ap_filter_t *f, - apr_bucket_brigade *b) +static void merge_response_headers(request_rec *r, const char **protocol) { - request_rec *r = f->r; - conn_rec *c = r->connection; - const char *clheader; - int header_only = (r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status)); - const char *protocol = NULL; - apr_bucket *e; - apr_bucket_brigade *b2; - header_struct h; - header_filter_ctx *ctx = f->ctx; - const char *ctype; - ap_bucket_error *eb = NULL; - apr_status_t rv = APR_SUCCESS; - int recursive_error = 0; - - AP_DEBUG_ASSERT(!r->main); - - if (!ctx) { - ctx = f->ctx = apr_pcalloc(r->pool, sizeof(header_filter_ctx)); - } - else if (ctx->headers_sent) { - /* Eat body if response must not have one. */ - if (header_only) { - /* Still next filters may be waiting for EOS, so pass it (alone) - * when encountered and be done with this filter. - */ - e = APR_BRIGADE_LAST(b); - if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { - APR_BUCKET_REMOVE(e); - apr_brigade_cleanup(b); - APR_BRIGADE_INSERT_HEAD(b, e); - ap_remove_output_filter(f); - rv = ap_pass_brigade(f->next, b); - } - apr_brigade_cleanup(b); - return rv; - } - } - - for (e = APR_BRIGADE_FIRST(b); - e != APR_BRIGADE_SENTINEL(b); - e = APR_BUCKET_NEXT(e)) - { - if (AP_BUCKET_IS_ERROR(e) && !eb) { - eb = e->data; - continue; - } - /* - * If we see an EOC bucket it is a signal that we should get out - * of the way doing nothing. - */ - if (AP_BUCKET_IS_EOC(e)) { - ap_remove_output_filter(f); - return ap_pass_brigade(f->next, b); - } - } - - if (!ctx->headers_sent && !check_headers(r)) { - /* We may come back here from ap_die() below, - * so clear anything from this response. - */ - apr_table_clear(r->headers_out); - apr_table_clear(r->err_headers_out); - r->content_type = r->content_encoding = NULL; - r->content_languages = NULL; - r->clength = r->chunked = 0; - apr_brigade_cleanup(b); - - /* Don't recall ap_die() if we come back here (from its own internal - * redirect or error response), otherwise we can end up in infinite - * recursion; better fall through with 500, minimal headers and an - * empty body (EOS only). - */ - if (!check_headers_recursion(r)) { - ap_die(HTTP_INTERNAL_SERVER_ERROR, r); - return AP_FILTER_ERROR; - } - r->status = HTTP_INTERNAL_SERVER_ERROR; - e = ap_bucket_eoc_create(c->bucket_alloc); - APR_BRIGADE_INSERT_TAIL(b, e); - e = apr_bucket_eos_create(c->bucket_alloc); - APR_BRIGADE_INSERT_TAIL(b, e); - ap_set_content_length(r, 0); - recursive_error = 1; - } - else if (eb) { - int status; - status = eb->status; - apr_brigade_cleanup(b); - ap_die(status, r); - return AP_FILTER_ERROR; - } - - if (r->assbackwards) { - r->sent_bodyct = 1; - ap_remove_output_filter(f); - rv = ap_pass_brigade(f->next, b); - goto out; - } + const char *ctype = NULL; + const char *clheader = NULL; /* * Now that we are ready to send a response, we need to combine the two @@ -1430,6 +1333,9 @@ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_ fixup_vary(r); } + /* determine the protocol and whether we should use keepalives. */ + basic_http_header_check(r, protocol); + ap_set_keepalive(r); /* * Control cachability for non-cacheable responses if not already set by @@ -1449,10 +1355,6 @@ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_ apr_table_unset(r->headers_out, "ETag"); } - /* determine the protocol and whether we should use keepalives. */ - basic_http_header_check(r, &protocol); - ap_set_keepalive(r); - /* 204/304 responses don't have content related headers */ if (AP_STATUS_IS_HEADER_ONLY(r->status)) { apr_table_unset(r->headers_out, "Transfer-Encoding"); @@ -1513,30 +1415,136 @@ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_ && !strcmp(clheader, "0")) { apr_table_unset(r->headers_out, "Content-Length"); } +} - b2 = apr_brigade_create(r->pool, c->bucket_alloc); - basic_http_header(r, b2, protocol); - - h.pool = r->pool; - h.bb = b2; +AP_CORE_DECLARE_NONSTD(apr_status_t) ap_http_header_filter(ap_filter_t *f, + apr_bucket_brigade *b) +{ + request_rec *r = f->r; + conn_rec *c = r->connection; + int header_only = (r->header_only || AP_STATUS_IS_HEADER_ONLY(r->status)); + apr_bucket *e; + apr_bucket_brigade *b2; + header_struct h; + header_filter_ctx *ctx = f->ctx; + ap_bucket_error *eb = NULL; + apr_status_t rv = APR_SUCCESS; + int recursive_error = 0; + const char *protocol; - send_all_header_fields(&h, r); + AP_DEBUG_ASSERT(!r->main); - terminate_header(b2); + if (!ctx) { + ctx = f->ctx = apr_pcalloc(r->pool, sizeof(header_filter_ctx)); + } + else if (ctx->headers_sent) { + /* Eat body if response must not have one. */ + if (header_only) { + /* Still next filters may be waiting for EOS, so pass it (alone) + * when encountered and be done with this filter. + */ + e = APR_BRIGADE_LAST(b); + if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { + APR_BUCKET_REMOVE(e); + apr_brigade_cleanup(b); + APR_BRIGADE_INSERT_HEAD(b, e); + ap_remove_output_filter(f); + rv = ap_pass_brigade(f->next, b); + } + apr_brigade_cleanup(b); + return rv; + } + } - if (header_only) { - e = APR_BRIGADE_LAST(b); - if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { - APR_BUCKET_REMOVE(e); - APR_BRIGADE_INSERT_TAIL(b2, e); + for (e = APR_BRIGADE_FIRST(b); + e != APR_BRIGADE_SENTINEL(b); + e = APR_BUCKET_NEXT(e)) + { + if (AP_BUCKET_IS_ERROR(e) && !eb) { + eb = e->data; + continue; + } + /* + * If we see an EOC bucket it is a signal that we should get out + * of the way doing nothing. + */ + if (AP_BUCKET_IS_EOC(e)) { ap_remove_output_filter(f); + return ap_pass_brigade(f->next, b); + } + } + + if (!ctx->headers_sent) { + merge_response_headers(r, &protocol); + if (!check_headers(r)) { + /* We may come back here from ap_die() below, + * so clear anything from this response. + */ + apr_table_clear(r->headers_out); + apr_table_clear(r->err_headers_out); + r->content_type = r->content_encoding = NULL; + r->content_languages = NULL; + r->clength = r->chunked = 0; + apr_brigade_cleanup(b); + + /* Don't recall ap_die() if we come back here (from its own internal + * redirect or error response), otherwise we can end up in infinite + * recursion; better fall through with 500, minimal headers and an + * empty body (EOS only). + */ + if (!check_headers_recursion(r)) { + ap_die(HTTP_INTERNAL_SERVER_ERROR, r); + return AP_FILTER_ERROR; + } + r->status = HTTP_INTERNAL_SERVER_ERROR; + e = ap_bucket_eoc_create(c->bucket_alloc); + APR_BRIGADE_INSERT_TAIL(b, e); + e = apr_bucket_eos_create(c->bucket_alloc); + APR_BRIGADE_INSERT_TAIL(b, e); + ap_set_content_length(r, 0); + recursive_error = 1; + } + else if (eb) { + int status; + status = eb->status; + apr_brigade_cleanup(b); + ap_die(status, r); + return AP_FILTER_ERROR; } - apr_brigade_cleanup(b); } - rv = ap_pass_brigade(f->next, b2); - apr_brigade_cleanup(b2); - ctx->headers_sent = 1; + if (r->assbackwards) { + r->sent_bodyct = 1; + ap_remove_output_filter(f); + rv = ap_pass_brigade(f->next, b); + goto out; + } + + if (!ctx->headers_sent) { + b2 = apr_brigade_create(r->pool, c->bucket_alloc); + basic_http_header(r, b2, protocol); + + h.pool = r->pool; + h.bb = b2; + + send_all_header_fields(&h, r); + + terminate_header(b2); + + if (header_only) { + e = APR_BRIGADE_LAST(b); + if (e != APR_BRIGADE_SENTINEL(b) && APR_BUCKET_IS_EOS(e)) { + APR_BUCKET_REMOVE(e); + APR_BRIGADE_INSERT_TAIL(b2, e); + ap_remove_output_filter(f); + } + apr_brigade_cleanup(b); + } + + rv = ap_pass_brigade(f->next, b2); + apr_brigade_cleanup(b2); + ctx->headers_sent = 1; + } if (rv != APR_SUCCESS || header_only) { goto out; diff -pruN 2.4.63-1/modules/http2/h2_config.c 2.4.64-1/modules/http2/h2_config.c --- 2.4.63-1/modules/http2/h2_config.c 2023-08-29 07:23:10.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_config.c 2025-06-03 07:40:48.000000000 +0000 @@ -77,6 +77,7 @@ typedef struct h2_config { int output_buffered; apr_interval_time_t stream_timeout;/* beam timeout */ int max_data_frame_len; /* max # bytes in a single h2 DATA frame */ + int max_hd_block_len; /* max # bytes in a response header block */ int proxy_requests; /* act as forward proxy */ int h2_websockets; /* if mod_h2 negotiating WebSockets */ } h2_config; @@ -117,6 +118,7 @@ static h2_config defconf = { 1, /* stream output buffered */ -1, /* beam timeout */ 0, /* max DATA frame len, 0 == no extra limit */ + 0, /* max header block len, 0 == no extra limit */ 0, /* forward proxy */ 0, /* WebSockets negotiation, enabled */ }; @@ -165,6 +167,7 @@ void *h2_config_create_svr(apr_pool_t *p conf->output_buffered = DEF_VAL; conf->stream_timeout = DEF_VAL; conf->max_data_frame_len = DEF_VAL; + conf->max_hd_block_len = DEF_VAL; conf->proxy_requests = DEF_VAL; conf->h2_websockets = DEF_VAL; return conf; @@ -216,6 +219,7 @@ static void *h2_config_merge(apr_pool_t n->padding_always = H2_CONFIG_GET(add, base, padding_always); n->stream_timeout = H2_CONFIG_GET(add, base, stream_timeout); n->max_data_frame_len = H2_CONFIG_GET(add, base, max_data_frame_len); + n->max_hd_block_len = H2_CONFIG_GET(add, base, max_hd_block_len); n->proxy_requests = H2_CONFIG_GET(add, base, proxy_requests); n->h2_websockets = H2_CONFIG_GET(add, base, h2_websockets); return n; @@ -313,6 +317,8 @@ static apr_int64_t h2_srv_config_geti64( return H2_CONFIG_GET(conf, &defconf, proxy_requests); case H2_CONF_WEBSOCKETS: return H2_CONFIG_GET(conf, &defconf, h2_websockets); + case H2_CONF_MAX_HEADER_BLOCK_LEN: + return H2_CONFIG_GET(conf, &defconf, max_hd_block_len); default: return DEF_VAL; } @@ -381,6 +387,8 @@ static void h2_srv_config_seti(h2_config case H2_CONF_WEBSOCKETS: H2_CONFIG_SET(conf, h2_websockets, val); break; + case H2_CONF_MAX_HEADER_BLOCK_LEN: + H2_CONFIG_SET(conf, max_hd_block_len, val); default: break; } @@ -650,6 +658,17 @@ static const char *h2_conf_set_max_data_ return NULL; } +static const char *h2_conf_set_max_hd_block_len(cmd_parms *cmd, + void *dirconf, const char *value) +{ + int val = (int)apr_atoi64(value); + if (val < 0) { + return "value must be 0 or larger"; + } + CONFIG_CMD_SET(cmd, dirconf, H2_CONF_MAX_HEADER_BLOCK_LEN, val); + return NULL; +} + static const char *h2_conf_set_session_extra_files(cmd_parms *cmd, void *dirconf, const char *value) { @@ -1071,6 +1090,8 @@ const command_rec h2_cmds[] = { RSRC_CONF, "set stream timeout"), AP_INIT_TAKE1("H2MaxDataFrameLen", h2_conf_set_max_data_frame_len, NULL, RSRC_CONF, "maximum number of bytes in a single HTTP/2 DATA frame"), + AP_INIT_TAKE1("H2MaxHeaderBlockLen", h2_conf_set_max_hd_block_len, NULL, + RSRC_CONF, "maximum number of bytes in a response header block"), AP_INIT_TAKE2("H2EarlyHint", h2_conf_add_early_hint, NULL, OR_FILEINFO|OR_AUTHCFG, "add a a 'Link:' header for a 103 Early Hints response."), AP_INIT_TAKE1("H2ProxyRequests", h2_conf_set_proxy_requests, NULL, diff -pruN 2.4.63-1/modules/http2/h2_config.h 2.4.64-1/modules/http2/h2_config.h --- 2.4.63-1/modules/http2/h2_config.h 2023-08-29 07:23:10.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_config.h 2025-06-03 07:40:48.000000000 +0000 @@ -46,6 +46,7 @@ typedef enum { H2_CONF_MAX_DATA_FRAME_LEN, H2_CONF_PROXY_REQUESTS, H2_CONF_WEBSOCKETS, + H2_CONF_MAX_HEADER_BLOCK_LEN, } h2_config_var_t; struct apr_hash_t; diff -pruN 2.4.63-1/modules/http2/h2_mplx.c 2.4.64-1/modules/http2/h2_mplx.c --- 2.4.63-1/modules/http2/h2_mplx.c 2024-07-27 14:18:49.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_mplx.c 2025-06-03 08:07:31.000000000 +0000 @@ -29,6 +29,7 @@ #include #include #include +#include #include @@ -974,7 +975,9 @@ static void s_c2_done(h2_mplx *m, conn_r /* From here on, the final handling of c2 is done by c1 processing. * Which means we can give it c1's scoreboard handle for updates. */ c2->sbh = m->c1->sbh; - +#if AP_MODULE_MAGIC_AT_LEAST(20211221, 29) + ap_set_time_process_request(c2->sbh,conn_ctx->started_at,conn_ctx->done_at); +#endif ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c2, "h2_mplx(%s-%d): request done, %f ms elapsed", conn_ctx->id, conn_ctx->stream_id, @@ -1260,7 +1263,7 @@ static apr_status_t mplx_pollset_poll(h2 if (on_stream_input) { APR_ARRAY_PUSH(m->streams_ev_in, h2_stream*) = m->stream0; } - continue; + break; } } diff -pruN 2.4.63-1/modules/http2/h2_proxy_session.c 2.4.64-1/modules/http2/h2_proxy_session.c --- 2.4.63-1/modules/http2/h2_proxy_session.c 2025-01-07 15:00:40.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_proxy_session.c 2025-07-07 12:05:49.000000000 +0000 @@ -850,6 +850,18 @@ static apr_status_t open_stream(h2_proxy dconf = ap_get_module_config(r->per_dir_config, &proxy_module); if (dconf->preserve_host) { authority = orig_host; + if (!authority) { + /* Duplicate mod_proxy behaviour if ProxyPreserveHost is + * used but an "HTTP/0.9" request is received without a + * Host: header */ + authority = r->server->server_hostname; + ap_log_rerror(APLOG_MARK, APLOG_WARNING, 0, r, APLOGNO(10511) + "HTTP/0.9 request (with no host line) " + "on incoming request and preserve host set " + "forcing hostname to be %s for uri %s", + authority, r->uri); + apr_table_setn(r->headers_in, "Host", authority); + } } else { authority = puri.hostname; @@ -1681,17 +1693,7 @@ static int done_iter(void *udata, void * h2_proxy_stream *stream = val; int touched = (stream->data_sent || stream->data_received || stream->id <= ctx->session->last_stream_id); - if (touched && stream->output) { - apr_bucket *b = ap_bucket_error_create(HTTP_BAD_GATEWAY, NULL, - stream->r->pool, - stream->cfront->bucket_alloc); - APR_BRIGADE_INSERT_TAIL(stream->output, b); - b = apr_bucket_eos_create(stream->cfront->bucket_alloc); - APR_BRIGADE_INSERT_TAIL(stream->output, b); - ap_pass_brigade(stream->r->output_filters, stream->output); - } - ctx->done(ctx->session, stream->r, APR_ECONNABORTED, touched, - stream->error_code); + ctx->done(ctx->session, stream->r, APR_ECONNABORTED, touched, stream->error_code); return 1; } diff -pruN 2.4.63-1/modules/http2/h2_request.c 2.4.64-1/modules/http2/h2_request.c --- 2.4.63-1/modules/http2/h2_request.c 2024-03-19 08:38:00.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_request.c 2025-07-07 12:12:49.000000000 +0000 @@ -64,18 +64,20 @@ typedef struct { apr_table_t *headers; apr_pool_t *pool; apr_status_t status; + h2_hd_scratch *scratch; } h1_ctx; static int set_h1_header(void *ctx, const char *key, const char *value) { h1_ctx *x = ctx; int was_added; - h2_req_add_header(x->headers, x->pool, key, strlen(key), value, strlen(value), 0, &was_added); + h2_req_add_header(x->headers, x->pool, key, strlen(key), + value, strlen(value), x->scratch, &was_added); return 1; } apr_status_t h2_request_rcreate(h2_request **preq, apr_pool_t *pool, - request_rec *r) + request_rec *r, h2_hd_scratch *scratch) { h2_request *req; const char *scheme, *authority, *path; @@ -125,6 +127,7 @@ apr_status_t h2_request_rcreate(h2_reque x.pool = pool; x.headers = req->headers; x.status = APR_SUCCESS; + x.scratch = scratch; apr_table_do(set_h1_header, &x, r->headers_in, NULL); *preq = req; @@ -134,7 +137,8 @@ apr_status_t h2_request_rcreate(h2_reque apr_status_t h2_request_add_header(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen, - size_t max_field_len, int *pwas_added) + struct h2_hd_scratch *scratch, + int *pwas_added) { apr_status_t status = APR_SUCCESS; @@ -185,7 +189,7 @@ apr_status_t h2_request_add_header(h2_re else { /* non-pseudo header, add to table */ status = h2_req_add_header(req->headers, pool, name, nlen, value, vlen, - max_field_len, pwas_added); + scratch, pwas_added); } return status; diff -pruN 2.4.63-1/modules/http2/h2_request.h 2.4.64-1/modules/http2/h2_request.h --- 2.4.63-1/modules/http2/h2_request.h 2023-01-09 07:35:18.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_request.h 2025-07-07 12:12:49.000000000 +0000 @@ -19,17 +19,21 @@ #include "h2.h" +struct h2_hd_scratch; + h2_request *h2_request_create(int id, apr_pool_t *pool, const char *method, const char *scheme, const char *authority, const char *path, apr_table_t *header); apr_status_t h2_request_rcreate(h2_request **preq, apr_pool_t *pool, - request_rec *r); + request_rec *r, + struct h2_hd_scratch *scratch); apr_status_t h2_request_add_header(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen, - size_t max_field_len, int *pwas_added); + struct h2_hd_scratch *scratch, + int *pwas_added); apr_status_t h2_request_add_trailer(h2_request *req, apr_pool_t *pool, const char *name, size_t nlen, diff -pruN 2.4.63-1/modules/http2/h2_session.c 2.4.64-1/modules/http2/h2_session.c --- 2.4.63-1/modules/http2/h2_session.c 2025-01-19 19:32:14.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_session.c 2025-07-07 12:12:49.000000000 +0000 @@ -109,13 +109,29 @@ static void cleanup_unprocessed_streams( h2_mplx_c1_streams_do(session->mplx, rst_unprocessed_stream, session); } +/* APR callback invoked if allocation fails. */ +static int abort_on_oom(int retcode) +{ + ap_abort_on_oom(); + return retcode; /* unreachable, hopefully. */ +} + static h2_stream *h2_session_open_stream(h2_session *session, int stream_id, int initiated_on) { h2_stream * stream; + apr_allocator_t *allocator; apr_pool_t *stream_pool; + apr_status_t rv; - apr_pool_create(&stream_pool, session->pool); + rv = apr_allocator_create(&allocator); + if (rv != APR_SUCCESS) + return NULL; + + apr_allocator_max_free_set(allocator, ap_max_mem_free); + apr_pool_create_ex(&stream_pool, session->pool, NULL, allocator); + apr_allocator_owner_set(allocator, stream_pool); + apr_pool_abort_set(abort_on_oom, stream_pool); apr_pool_tag(stream_pool, "h2_stream"); stream = h2_stream_create(stream_id, stream_pool, session, @@ -624,6 +640,29 @@ static int on_frame_send_cb(nghttp2_sess return 0; } +static int on_frame_not_send_cb(nghttp2_session *ngh2, + const nghttp2_frame *frame, + int ngh2_err, + void *user_data) +{ + h2_session *session = user_data; + int stream_id = frame->hd.stream_id; + h2_stream *stream; + char buffer[256]; + + stream = get_stream(session, stream_id); + h2_util_frame_print(frame, buffer, sizeof(buffer)/sizeof(buffer[0])); + ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, session->c1, + H2_SSSN_LOG(APLOGNO(10509), session, + "not sent FRAME[%s], error %d: %s"), + buffer, ngh2_err, nghttp2_strerror(ngh2_err)); + if(stream) { + h2_stream_rst(stream, NGHTTP2_PROTOCOL_ERROR); + return 0; + } + return NGHTTP2_ERR_CALLBACK_FAILURE; +} + #ifdef H2_NG2_INVALID_HEADER_CB static int on_invalid_header_cb(nghttp2_session *ngh2, const nghttp2_frame *frame, @@ -699,6 +738,7 @@ static apr_status_t init_callbacks(conn_ NGH2_SET_CALLBACK(*pcb, on_header, on_header_cb); NGH2_SET_CALLBACK(*pcb, send_data, on_send_data_cb); NGH2_SET_CALLBACK(*pcb, on_frame_send, on_frame_send_cb); + NGH2_SET_CALLBACK(*pcb, on_frame_not_send, on_frame_not_send_cb); #ifdef H2_NG2_INVALID_HEADER_CB NGH2_SET_CALLBACK(*pcb, on_invalid_header, on_invalid_header_cb); #endif @@ -948,6 +988,14 @@ apr_status_t h2_session_create(h2_sessio } h2_c1_io_init(&session->io, session); + /* setup request header scratch buffers */ + session->hd_scratch.max_len = session->s->limit_req_fieldsize? + session->s->limit_req_fieldsize : 8190; + session->hd_scratch.name = + apr_pcalloc(session->pool, session->hd_scratch.max_len + 1); + session->hd_scratch.value = + apr_pcalloc(session->pool, session->hd_scratch.max_len + 1); + session->padding_max = h2_config_sgeti(s, H2_CONF_PADDING_BITS); if (session->padding_max) { session->padding_max = (0x01 << session->padding_max) - 1; @@ -988,6 +1036,11 @@ apr_status_t h2_session_create(h2_sessio * handle them, just like the HTTP/1.1 parser does. */ nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation(options, 1); #endif + + if(h2_config_sgeti(s, H2_CONF_MAX_HEADER_BLOCK_LEN) > 0) + nghttp2_option_set_max_send_header_block_length(options, + h2_config_sgeti(s, H2_CONF_MAX_HEADER_BLOCK_LEN)); + rv = nghttp2_session_server_new2(&session->ngh2, callbacks, session, options); nghttp2_session_callbacks_del(callbacks); @@ -1003,7 +1056,7 @@ apr_status_t h2_session_create(h2_sessio n = h2_config_sgeti(s, H2_CONF_PUSH_DIARY_SIZE); session->push_diary = h2_push_diary_create(session->pool, n); - + if (APLOGcdebug(c)) { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, 0, c, H2_SSSN_LOG(APLOGNO(03200), session, @@ -1125,13 +1178,13 @@ static apr_status_t h2_session_start(h2_ * interim updates, any smaller connection window will lead to blocking * in DATA flow. */ - *rv = nghttp2_submit_window_update(session->ngh2, NGHTTP2_FLAG_NONE, - 0, NGHTTP2_MAX_WINDOW_SIZE - win_size); + *rv = nghttp2_session_set_local_window_size( + session->ngh2, NGHTTP2_FLAG_NONE, 0, NGHTTP2_MAX_WINDOW_SIZE); if (*rv != 0) { status = APR_EGENERAL; ap_log_cerror(APLOG_MARK, APLOG_ERR, status, session->c1, H2_SSSN_LOG(APLOGNO(02970), session, - "nghttp2_submit_window_update: %s"), + "nghttp2_session_set_local_window_size: %s"), nghttp2_strerror(*rv)); } } @@ -1670,9 +1723,10 @@ static void on_stream_state_enter(void * break; case H2_SS_CLEANUP: nghttp2_session_set_stream_user_data(session->ngh2, stream->id, NULL); + update_child_status(session, SERVER_BUSY_WRITE, "done", stream); h2_mplx_c1_stream_cleanup(session->mplx, stream, &session->open_streams); + stream = NULL; ++session->streams_done; - update_child_status(session, SERVER_BUSY_WRITE, "done", stream); break; default: break; diff -pruN 2.4.63-1/modules/http2/h2_session.h 2.4.64-1/modules/http2/h2_session.h --- 2.4.63-1/modules/http2/h2_session.h 2024-07-27 14:18:49.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_session.h 2025-07-07 12:12:49.000000000 +0000 @@ -29,6 +29,7 @@ */ #include "h2.h" +#include "h2_util.h" struct apr_thread_mutext_t; struct apr_thread_cond_t; @@ -118,6 +119,8 @@ typedef struct h2_session { struct h2_iqueue *out_c1_blocked; /* all streams with output blocked on c1 buffer full */ struct h2_iqueue *ready_to_process; /* all streams ready for processing */ + h2_hd_scratch hd_scratch; + } h2_session; const char *h2_session_state_str(h2_session_state state); diff -pruN 2.4.63-1/modules/http2/h2_stream.c 2.4.64-1/modules/http2/h2_stream.c --- 2.4.63-1/modules/http2/h2_stream.c 2025-01-07 15:06:41.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_stream.c 2025-07-07 12:12:49.000000000 +0000 @@ -659,7 +659,8 @@ apr_status_t h2_stream_set_request_rec(h if (stream->rst_error) { return APR_ECONNRESET; } - status = h2_request_rcreate(&req, stream->pool, r); + status = h2_request_rcreate(&req, stream->pool, r, + &stream->session->hd_scratch); if (status == APR_SUCCESS) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, status, r, H2_STRM_LOG(APLOGNO(03058), stream, @@ -691,13 +692,11 @@ static void set_error_response(h2_stream static apr_status_t add_trailer(h2_stream *stream, const char *name, size_t nlen, const char *value, size_t vlen, - size_t max_field_len, int *pwas_added) + h2_hd_scratch *scratch) { conn_rec *c = stream->session->c1; - char *hname, *hvalue; const char *existing; - *pwas_added = 0; if (nlen == 0 || name[0] == ':') { ap_log_cerror(APLOG_MARK, APLOG_DEBUG, APR_EINVAL, c, H2_STRM_LOG(APLOGNO(03060), stream, @@ -710,20 +709,35 @@ static apr_status_t add_trailer(h2_strea if (!stream->trailers_in) { stream->trailers_in = apr_table_make(stream->pool, 5); } - hname = apr_pstrndup(stream->pool, name, nlen); - h2_util_camel_case_header(hname, nlen); - existing = apr_table_get(stream->trailers_in, hname); - if (max_field_len - && ((existing? strlen(existing)+2 : 0) + vlen + nlen + 2 > max_field_len)) { - /* "key: (oldval, )?nval" is too long */ + + if (((nlen + vlen + 2) > scratch->max_len)) return APR_EINVAL; + + /* We need 0-terminated strings to operate on apr_table */ + AP_DEBUG_ASSERT(nlen < scratch->max_len); + memcpy(scratch->name, name, nlen); + scratch->name[nlen] = 0; + AP_DEBUG_ASSERT(vlen < scratch->max_len); + memcpy(scratch->value, value, vlen); + scratch->value[vlen] = 0; + + existing = apr_table_get(stream->trailers_in, scratch->name); + if(existing) { + if (!vlen) /* not adding a 0-length value to existing */ + return APR_SUCCESS; + if ((strlen(existing) + 2 + vlen + nlen + 2 > scratch->max_len)) { + /* "name: existing, value" is too long */ + return APR_EINVAL; + } + apr_table_merge(stream->trailers_in, scratch->name, scratch->value); } - if (!existing) *pwas_added = 1; - hvalue = apr_pstrndup(stream->pool, value, vlen); - apr_table_mergen(stream->trailers_in, hname, hvalue); - ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, - H2_STRM_MSG(stream, "added trailer '%s: %s'"), hname, hvalue); - + else { + h2_util_camel_case_header(scratch->name, nlen); + apr_table_set(stream->trailers_in, scratch->name, scratch->value); + } + ap_log_cerror(APLOG_MARK, APLOG_TRACE2, 0, c, + H2_STRM_MSG(stream, "added trailer '%s: %s'"), + scratch->name, scratch->value); return APR_SUCCESS; } @@ -732,7 +746,7 @@ apr_status_t h2_stream_add_header(h2_str const char *value, size_t vlen) { h2_session *session = stream->session; - int error = 0, was_added = 0; + int error = 0; apr_status_t status = APR_SUCCESS; H2_STRM_ASSERT_MAGIC(stream, H2_STRM_MAGIC_OK); @@ -760,6 +774,7 @@ apr_status_t h2_stream_add_header(h2_str ++stream->request_headers_added; } else if (H2_SS_IDLE == stream->state) { + int was_added; if (!stream->rtmp) { if (H2_STREAM_CLIENT_INITIATED(stream->id)) { ++stream->session->remote.emitted_count; @@ -771,7 +786,7 @@ apr_status_t h2_stream_add_header(h2_str } status = h2_request_add_header(stream->rtmp, stream->pool, name, nlen, value, vlen, - session->s->limit_req_fieldsize, &was_added); + &session->hd_scratch, &was_added); ap_log_cerror(APLOG_MARK, APLOG_TRACE2, status, session->c1, H2_STRM_MSG(stream, "add_header: '%.*s: %.*s"), (int)nlen, name, (int)vlen, value); @@ -779,8 +794,8 @@ apr_status_t h2_stream_add_header(h2_str } else if (H2_SS_OPEN == stream->state) { status = add_trailer(stream, name, nlen, value, vlen, - session->s->limit_req_fieldsize, &was_added); - if (was_added) ++stream->request_headers_added; + &session->hd_scratch); + if (!status) ++stream->request_headers_added; } else { status = APR_EINVAL; @@ -789,16 +804,17 @@ apr_status_t h2_stream_add_header(h2_str if (APR_EINVAL == status) { /* header too long */ - if (!h2_stream_is_ready(stream)) { + if (!h2_stream_is_ready(stream) && !stream->request_headers_failed) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, session->c1, - H2_STRM_LOG(APLOGNO(10180), stream,"Request header exceeds " - "LimitRequestFieldSize: %.*s"), + H2_STRM_LOG(APLOGNO(10180), stream, + "Request header exceeds LimitRequestFieldSize(%d): %.*s"), + (int)session->hd_scratch.max_len, (int)H2MIN(nlen, 80), name); } error = HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE; goto cleanup; } - + if (session->s->limit_req_fields > 0 && stream->request_headers_added > session->s->limit_req_fields) { /* too many header lines */ @@ -810,12 +826,13 @@ apr_status_t h2_stream_add_header(h2_str if (!h2_stream_is_ready(stream)) { ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, session->c1, H2_STRM_LOG(APLOGNO(10181), stream, "Number of request headers " - "exceeds LimitRequestFields")); + "exceeds LimitRequestFields(%d)"), + (int)session->s->limit_req_fields); } error = HTTP_REQUEST_HEADER_FIELDS_TOO_LARGE; goto cleanup; } - + cleanup: if (error) { ++stream->request_headers_failed; @@ -1721,10 +1738,10 @@ static apr_status_t stream_do_response(h if (nghttp2_is_fatal(ngrv)) { rv = APR_EGENERAL; h2_session_dispatch_event(stream->session, - H2_SESSION_EV_PROTO_ERROR, ngrv, nghttp2_strerror(rv)); + H2_SESSION_EV_PROTO_ERROR, ngrv, nghttp2_strerror(ngrv)); ap_log_cerror(APLOG_MARK, APLOG_ERR, rv, c1, APLOGNO(10402) "submit_response: %s", - nghttp2_strerror(rv)); + nghttp2_strerror(ngrv)); goto cleanup; } diff -pruN 2.4.63-1/modules/http2/h2_util.c 2.4.64-1/modules/http2/h2_util.c --- 2.4.63-1/modules/http2/h2_util.c 2023-08-29 07:23:10.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_util.c 2025-07-07 12:12:49.000000000 +0000 @@ -1693,10 +1693,9 @@ int h2_ignore_resp_trailer(const char *n } static apr_status_t req_add_header(apr_table_t *headers, apr_pool_t *pool, - nghttp2_nv *nv, size_t max_field_len, + nghttp2_nv *nv, h2_hd_scratch *scratch, int *pwas_added) { - char *hname, *hvalue; const char *existing; *pwas_added = 0; @@ -1712,15 +1711,14 @@ static apr_status_t req_add_header(apr_t /* Cookie header come separately in HTTP/2, but need * to be merged by "; " (instead of default ", ") */ - if (max_field_len - && strlen(existing) + nv->valuelen + nv->namelen + 4 - > max_field_len) { + if ((strlen(existing) + nv->valuelen + nv->namelen + 4) + > scratch->max_len) { /* "key: oldval, nval" is too long */ return APR_EINVAL; } - hvalue = apr_pstrndup(pool, (const char*)nv->value, nv->valuelen); apr_table_setn(headers, "Cookie", - apr_psprintf(pool, "%s; %s", existing, hvalue)); + apr_psprintf(pool, "%s; %.*s", existing, + (int)nv->valuelen, nv->value)); return APR_SUCCESS; } } @@ -1731,27 +1729,40 @@ static apr_status_t req_add_header(apr_t } } - hname = apr_pstrndup(pool, (const char*)nv->name, nv->namelen); - h2_util_camel_case_header(hname, nv->namelen); - existing = apr_table_get(headers, hname); - if (max_field_len) { - if ((existing? strlen(existing)+2 : 0) + nv->valuelen + nv->namelen + 2 - > max_field_len) { - /* "key: (oldval, )?nval" is too long */ + if (((nv->namelen + nv->valuelen + 2) > scratch->max_len)) + return APR_EINVAL; + + /* We need 0-terminated strings to operate on apr_table */ + AP_DEBUG_ASSERT(nv->namelen < scratch->max_len); + memcpy(scratch->name, nv->name, nv->namelen); + scratch->name[nv->namelen] = 0; + AP_DEBUG_ASSERT(nv->valuelen < scratch->max_len); + memcpy(scratch->value, nv->value, nv->valuelen); + scratch->value[nv->valuelen] = 0; + + *pwas_added = 1; + existing = apr_table_get(headers, scratch->name); + if (existing) { + if (!nv->valuelen) /* not adding a 0-length value to existing */ + return APR_SUCCESS; + if ((strlen(existing) + 2 + nv->valuelen + nv->namelen + 2) + > scratch->max_len) { + /* "name: existing, value" is too long */ return APR_EINVAL; } + apr_table_merge(headers, scratch->name, scratch->value); + } + else { + h2_util_camel_case_header(scratch->name, nv->namelen); + apr_table_set(headers, scratch->name, scratch->value); } - if (!existing) *pwas_added = 1; - hvalue = apr_pstrndup(pool, (const char*)nv->value, nv->valuelen); - apr_table_mergen(headers, hname, hvalue); - return APR_SUCCESS; } apr_status_t h2_req_add_header(apr_table_t *headers, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen, - size_t max_field_len, int *pwas_added) + h2_hd_scratch *scratch, int *pwas_added) { nghttp2_nv nv; @@ -1759,7 +1770,7 @@ apr_status_t h2_req_add_header(apr_table nv.namelen = nlen; nv.value = (uint8_t*)value; nv.valuelen = vlen; - return req_add_header(headers, pool, &nv, max_field_len, pwas_added); + return req_add_header(headers, pool, &nv, scratch, pwas_added); } /******************************************************************************* diff -pruN 2.4.63-1/modules/http2/h2_util.h 2.4.64-1/modules/http2/h2_util.h --- 2.4.63-1/modules/http2/h2_util.h 2023-01-09 07:35:18.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_util.h 2025-07-07 12:12:49.000000000 +0000 @@ -397,14 +397,21 @@ apr_status_t h2_req_create_ngheader(h2_n const struct h2_request *req); #endif +typedef struct h2_hd_scratch { + size_t max_len; /* header field size name + ': ' + value */ + char *name; /* max_len+1 sized */ + char *value; /* max_len+1 sized */ + +} h2_hd_scratch; + /** * Add a HTTP/2 header and return the table key if it really was added * and not ignored. */ -apr_status_t h2_req_add_header(apr_table_t *headers, apr_pool_t *pool, +apr_status_t h2_req_add_header(apr_table_t *headers, apr_pool_t *pool, const char *name, size_t nlen, const char *value, size_t vlen, - size_t max_field_len, int *pwas_added); + h2_hd_scratch *scratch, int *pwas_added); /******************************************************************************* * apr brigade helpers diff -pruN 2.4.63-1/modules/http2/h2_version.h 2.4.64-1/modules/http2/h2_version.h --- 2.4.63-1/modules/http2/h2_version.h 2024-07-27 14:18:49.000000000 +0000 +++ 2.4.64-1/modules/http2/h2_version.h 2025-06-03 08:07:31.000000000 +0000 @@ -27,7 +27,7 @@ * @macro * Version number of the http2 module as c string */ -#define MOD_HTTP2_VERSION "2.0.27" +#define MOD_HTTP2_VERSION "2.0.32" /** * @macro @@ -35,7 +35,7 @@ * release. This is a 24 bit number with 8 bits for major number, 8 bits * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203. */ -#define MOD_HTTP2_VERSION_NUM 0x02001b +#define MOD_HTTP2_VERSION_NUM 0x020020 #endif /* mod_h2_h2_version_h */ diff -pruN 2.4.63-1/modules/http2/mod_proxy_http2.c 2.4.64-1/modules/http2/mod_proxy_http2.c --- 2.4.63-1/modules/http2/mod_proxy_http2.c 2024-06-26 00:28:32.000000000 +0000 +++ 2.4.64-1/modules/http2/mod_proxy_http2.c 2025-06-03 07:48:08.000000000 +0000 @@ -65,7 +65,7 @@ typedef struct h2_proxy_ctx { unsigned is_ssl : 1; request_rec *r; /* the request processed in this ctx */ - int r_status; /* status of request work */ + apr_status_t r_status; /* status of request work */ int r_done; /* request was processed, not necessarily successfully */ int r_may_retry; /* request may be retried */ int has_reusable_session; /* http2 session is live and clean */ @@ -414,7 +414,7 @@ run_connect: "setup new connection: is_ssl=%d %s %s %s", ctx->p_conn->is_ssl, ctx->p_conn->ssl_hostname, locurl, ctx->p_conn->hostname); - ctx->r_status = ap_map_http_request_error(status, HTTP_SERVICE_UNAVAILABLE); + ctx->r_status = status; goto cleanup; } @@ -428,7 +428,7 @@ run_connect: if (ctx->cfront->aborted) goto cleanup; status = ctx_run(ctx); - if (ctx->r_status != OK && ctx->r_may_retry && !ctx->cfront->aborted) { + if (ctx->r_status != APR_SUCCESS && ctx->r_may_retry && !ctx->cfront->aborted) { /* Not successfully processed, but may retry, tear down old conn and start over */ if (ctx->p_conn) { ctx->p_conn->close = 1; @@ -464,12 +464,6 @@ cleanup: ap_set_module_config(ctx->cfront->conn_config, &proxy_http2_module, NULL); ap_log_cerror(APLOG_MARK, APLOG_DEBUG, status, ctx->cfront, APLOGNO(03377) "leaving handler"); - if (ctx->r_status != OK) { - ap_die(ctx->r_status, r); - } - else if (status != APR_SUCCESS) { - ap_die(ap_map_http_request_error(status, HTTP_SERVICE_UNAVAILABLE), r); - } return ctx->r_status; } diff -pruN 2.4.63-1/modules/lua/mod_lua.c 2.4.64-1/modules/lua/mod_lua.c --- 2.4.63-1/modules/lua/mod_lua.c 2025-01-07 15:00:40.000000000 +0000 +++ 2.4.64-1/modules/lua/mod_lua.c 2025-06-02 14:48:53.000000000 +0000 @@ -473,14 +473,16 @@ static apr_status_t lua_output_filter_ha L = ctx->L; /* While the Lua function is still yielding, pass in buckets to the coroutine */ if (!ctx->broken) { - for (pbktIn = APR_BRIGADE_FIRST(pbbIn); - pbktIn != APR_BRIGADE_SENTINEL(pbbIn); - pbktIn = APR_BUCKET_NEXT(pbktIn)) - { + while (!APR_BRIGADE_EMPTY(pbbIn)) { const char *data; apr_size_t len; apr_bucket *pbktOut; + pbktIn = APR_BRIGADE_FIRST(pbbIn); + if (APR_BUCKET_IS_EOS(pbktIn)) { + break; + } + /* read the bucket */ apr_bucket_read(pbktIn,&data,&len,APR_BLOCK_READ); @@ -514,10 +516,11 @@ static apr_status_t lua_output_filter_ha lua_tostring(L, -1)); return HTTP_INTERNAL_SERVER_ERROR; } + apr_bucket_delete(pbktIn); } /* If we've safely reached the end, do a final call to Lua to allow for any finishing moves by the script, such as appending a tail. */ - if (APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(pbbIn))) { + if (!APR_BRIGADE_EMPTY(pbbIn) && APR_BUCKET_IS_EOS(APR_BRIGADE_LAST(pbbIn))) { apr_bucket *pbktEOS; lua_pushnil(L); lua_setglobal(L, "bucket"); diff -pruN 2.4.63-1/modules/mappers/mod_rewrite.c 2.4.64-1/modules/mappers/mod_rewrite.c --- 2.4.63-1/modules/mappers/mod_rewrite.c 2024-10-14 06:56:45.000000000 +0000 +++ 2.4.64-1/modules/mappers/mod_rewrite.c 2025-07-07 12:02:22.000000000 +0000 @@ -319,6 +319,12 @@ typedef enum { to be returned in r->status */ } rule_return_type; +typedef enum { + COND_RC_NOMATCH = 0, /* the cond didn't match */ + COND_RC_MATCH = 1, /* the cond matched */ + COND_RC_STATUS_SET = 3 /* The condition eval set a final r->status */ +} cond_return_type; + typedef struct { char *input; /* Input string of RewriteCond */ char *pattern; /* the RegExp pattern string */ @@ -4103,13 +4109,13 @@ static APR_INLINE int compare_lexicograp /* * Apply a single rewriteCond */ -static int apply_rewrite_cond(rewritecond_entry *p, rewrite_ctx *ctx) +static cond_return_type apply_rewrite_cond(rewritecond_entry *p, rewrite_ctx *ctx) { char *input = NULL; apr_finfo_t sb; request_rec *rsub, *r = ctx->r; ap_regmatch_t regmatch[AP_MAX_REG_MATCH]; - int rc = 0; + int rc = COND_RC_NOMATCH; int basis; if (p->ptype != CONDPAT_AP_EXPR) @@ -4117,40 +4123,65 @@ static int apply_rewrite_cond(rewritecon switch (p->ptype) { case CONDPAT_FILE_EXISTS: + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_REG) { - rc = 1; + rc = COND_RC_MATCH; } break; case CONDPAT_FILE_SIZE: + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_REG && sb.size > 0) { - rc = 1; + rc = COND_RC_MATCH; } break; case CONDPAT_FILE_LINK: + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } #if !defined(OS2) if ( apr_stat(&sb, input, APR_FINFO_MIN | APR_FINFO_LINK, r->pool) == APR_SUCCESS && sb.filetype == APR_LNK) { - rc = 1; + rc = COND_RC_MATCH; } #endif break; case CONDPAT_FILE_DIR: + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } if ( apr_stat(&sb, input, APR_FINFO_MIN, r->pool) == APR_SUCCESS && sb.filetype == APR_DIR) { - rc = 1; + rc = COND_RC_MATCH; } break; case CONDPAT_FILE_XBIT: + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } if ( apr_stat(&sb, input, APR_FINFO_PROT, r->pool) == APR_SUCCESS && (sb.protection & (APR_UEXECUTE | APR_GEXECUTE | APR_WEXECUTE))) { - rc = 1; + rc = COND_RC_MATCH; } break; @@ -4158,7 +4189,7 @@ static int apply_rewrite_cond(rewritecon if (*input && subreq_ok(r)) { rsub = ap_sub_req_lookup_uri(input, r, NULL); if (rsub->status < 400) { - rc = 1; + rc = COND_RC_MATCH; } rewritelog(r, 5, NULL, "RewriteCond URI (-U check: " "path=%s -> status=%d", input, rsub->status); @@ -4168,12 +4199,17 @@ static int apply_rewrite_cond(rewritecon case CONDPAT_LU_FILE: if (*input && subreq_ok(r)) { + if (APR_SUCCESS != ap_stat_check(input, r->pool)) { + r->status = HTTP_FORBIDDEN; + rewritelog(r, 4, ctx->perdir, "RewriteCond: refusing to stat input='%s'", input); + return COND_RC_STATUS_SET; + } rsub = ap_sub_req_lookup_file(input, r, NULL); if (rsub->status < 300 && /* double-check that file exists since default result is 200 */ apr_stat(&sb, rsub->filename, APR_FINFO_MIN, r->pool) == APR_SUCCESS) { - rc = 1; + rc = COND_RC_MATCH; } rewritelog(r, 5, NULL, "RewriteCond file (-F check: path=%s " "-> file=%s status=%d", input, rsub->filename, @@ -4189,10 +4225,10 @@ static int apply_rewrite_cond(rewritecon basis = 1; test_str_g: if (p->flags & CONDFLAG_NOCASE) { - rc = (strcasecmp(input, p->pattern) >= basis) ? 1 : 0; + rc = (strcasecmp(input, p->pattern) >= basis) ? COND_RC_MATCH : COND_RC_NOMATCH; } else { - rc = (compare_lexicography(input, p->pattern) >= basis) ? 1 : 0; + rc = (compare_lexicography(input, p->pattern) >= basis) ? COND_RC_MATCH : COND_RC_NOMATCH; } break; @@ -4203,10 +4239,10 @@ test_str_g: basis = -1; test_str_l: if (p->flags & CONDFLAG_NOCASE) { - rc = (strcasecmp(input, p->pattern) <= basis) ? 1 : 0; + rc = (strcasecmp(input, p->pattern) <= basis) ? COND_RC_MATCH : COND_RC_NOMATCH; } else { - rc = (compare_lexicography(input, p->pattern) <= basis) ? 1 : 0; + rc = (compare_lexicography(input, p->pattern) <= basis) ? COND_RC_MATCH : COND_RC_NOMATCH; } break; @@ -4237,7 +4273,10 @@ test_str_l: rewritelog(r, 1, ctx->perdir, "RewriteCond: expr='%s' evaluation failed: %s", p->pattern - p->pskip, err); - rc = 0; + rc = COND_RC_NOMATCH; + } + else { + rc = COND_RC_MATCH; } /* update briRC backref info */ if (rc && !(p->flags & CONDFLAG_NOTMATCH)) { @@ -4258,7 +4297,7 @@ test_str_l: break; } - if (p->flags & CONDFLAG_NOTMATCH) { + if (p->flags & CONDFLAG_NOTMATCH && rc <= COND_RC_MATCH) { rc = !rc; } @@ -4391,6 +4430,12 @@ static rule_return_type apply_rewrite_ru rewritecond_entry *c = &conds[i]; rc = apply_rewrite_cond(c, ctx); + + /* Error while evaluating cond, r->status set */ + if (COND_RC_STATUS_SET == rc) { + return RULE_RC_STATUS_SET; + } + /* * Reset vary_this if the novary flag is set for this condition. */ diff -pruN 2.4.63-1/modules/md/md.h 2.4.64-1/modules/md/md.h --- 2.4.63-1/modules/md/md.h 2023-08-16 12:02:03.000000000 +0000 +++ 2.4.64-1/modules/md/md.h 2025-02-05 12:41:51.000000000 +0000 @@ -92,6 +92,8 @@ struct md_t { struct apr_array_header_t *pkey_files; /* != NULL iff privkeys explicitly configured */ const char *ca_eab_kid; /* optional KEYID for external account binding */ const char *ca_eab_hmac; /* optional HMAC for external account binding */ + const char *profile; /* optional cert profile to order */ + int profile_mandatory; /* if profile, when given, is mandatory */ const char *state_descr; /* description of state of NULL */ @@ -154,6 +156,8 @@ struct md_t { #define MD_KEY_HTTPS "https" #define MD_KEY_ID "id" #define MD_KEY_IDENTIFIER "identifier" +#define MD_KEY_ISSUER_NAME "issuer-name" +#define MD_KEY_ISSUER_URI "issuer-uri" #define MD_KEY_KEY "key" #define MD_KEY_KID "kid" #define MD_KEY_KEYAUTHZ "keyAuthorization" @@ -175,6 +179,8 @@ struct md_t { #define MD_KEY_PKEY "privkey" #define MD_KEY_PKEY_FILES "pkey-files" #define MD_KEY_PROBLEM "problem" +#define MD_KEY_PROFILE "profile" +#define MD_KEY_PROFILE_MANDATORY "profile-mandatory" #define MD_KEY_PROTO "proto" #define MD_KEY_READY "ready" #define MD_KEY_REGISTRATION "registration" diff -pruN 2.4.63-1/modules/md/md_acme.c 2.4.64-1/modules/md/md_acme.c --- 2.4.63-1/modules/md/md_acme.c 2021-12-26 09:59:00.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme.c 2025-02-05 12:41:51.000000000 +0000 @@ -664,6 +664,15 @@ typedef struct { md_result_t *result; } update_dir_ctx; +static int collect_profiles(void *baton, const char* key, md_json_t *json) +{ + update_dir_ctx *ctx = baton; + (void)json; + APR_ARRAY_PUSH(ctx->acme->api.v2.profiles, const char *) = + apr_pstrdup(ctx->acme->p, key); + return 1; +} + static apr_status_t update_directory(const md_http_response_t *res, void *data) { md_http_request_t *req = res->req; @@ -728,6 +737,20 @@ static apr_status_t update_directory(con acme->new_nonce_fn = acmev2_new_nonce; acme->req_init_fn = acmev2_req_init; acme->post_new_account_fn = acmev2_POST_new_account; + + if (md_json_has_key(json, "meta", "profiles", NULL)) { + acme->api.v2.profiles = apr_array_make(acme->p, 5, sizeof(const char*)); + md_json_iterkey(collect_profiles, data, json, "meta", "profiles", NULL); + md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, req->pool, + "found %d profiles in ACME directory meta", + acme->api.v2.profiles->nelts); + } + else { + acme->api.v2.profiles = NULL; + md_log_perror(MD_LOG_MARK, MD_LOG_TRACE2, rv, req->pool, + "no profiles in ACME directory meta"); + + } } else if ((s = md_json_dups(acme->p, json, "new-authz", NULL))) { acme->api.v1.new_authz = s; diff -pruN 2.4.63-1/modules/md/md_acme.h 2.4.64-1/modules/md/md_acme.h --- 2.4.63-1/modules/md/md_acme.h 2021-11-24 11:07:53.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme.h 2025-02-05 12:41:51.000000000 +0000 @@ -118,6 +118,7 @@ struct md_acme_t { const char *key_change; const char *revoke_cert; const char *new_nonce; + struct apr_array_header_t *profiles; } v2; } api; const char *ca_agreement; diff -pruN 2.4.63-1/modules/md/md_acme_drive.c 2.4.64-1/modules/md/md_acme_drive.c --- 2.4.63-1/modules/md/md_acme_drive.c 2025-01-15 12:59:16.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme_drive.c 2025-02-05 12:41:51.000000000 +0000 @@ -765,7 +765,9 @@ static apr_status_t acme_renew(md_proto_ if (!ad->domains) { ad->domains = md_dns_make_minimal(d->p, ad->md->domains); } - + ad->profile = ad->md->profile; + ad->profile_mandatory = ad->md->profile_mandatory; + md_result_activity_printf(result, "Contacting ACME server for %s at %s", d->md->name, ca_effective); if (APR_SUCCESS != (rv = md_acme_create(&ad->acme, d->p, ca_effective, diff -pruN 2.4.63-1/modules/md/md_acme_drive.h 2.4.64-1/modules/md/md_acme_drive.h --- 2.4.63-1/modules/md/md_acme_drive.h 2021-05-12 10:14:42.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme_drive.h 2025-02-05 12:41:51.000000000 +0000 @@ -29,6 +29,8 @@ typedef struct md_acme_driver_t { md_t *md; struct apr_array_header_t *domains; apr_array_header_t *ca_challenges; + const char *profile; + int profile_mandatory; int complete; apr_array_header_t *creds; /* the new md_credentials_t */ diff -pruN 2.4.63-1/modules/md/md_acme_order.c 2.4.64-1/modules/md/md_acme_order.c --- 2.4.63-1/modules/md/md_acme_order.c 2023-10-31 10:28:22.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme_order.c 2025-02-05 12:41:51.000000000 +0000 @@ -263,13 +263,14 @@ typedef struct { md_acme_order_t *order; md_acme_t *acme; const char *name; + const char *profile; apr_array_header_t *domains; md_result_t *result; } order_ctx_t; -#define ORDER_CTX_INIT(ctx, p, o, a, n, d, r) \ +#define ORDER_CTX_INIT(ctx, p, o, a, n, d, pf, r) \ (ctx)->p = (p); (ctx)->order = (o); (ctx)->acme = (a); \ - (ctx)->name = (n); (ctx)->domains = d; (ctx)->result = r + (ctx)->name = (n); (ctx)->domains = d; (ctx)->profile = pf; (ctx)->result = r static apr_status_t identifier_to_json(void *value, md_json_t *json, apr_pool_t *p, void *baton) { @@ -289,6 +290,8 @@ static apr_status_t on_init_order_regist jpayload = md_json_create(req->p); md_json_seta(ctx->domains, identifier_to_json, NULL, jpayload, "identifiers", NULL); + if (ctx->profile) + md_json_sets(ctx->profile, jpayload, "profile", NULL); return md_acme_req_body_init(req, jpayload); } @@ -321,13 +324,14 @@ out: } apr_status_t md_acme_order_register(md_acme_order_t **porder, md_acme_t *acme, apr_pool_t *p, - const char *name, apr_array_header_t *domains) + const char *name, apr_array_header_t *domains, + const char *profile) { order_ctx_t ctx; apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); - ORDER_CTX_INIT(&ctx, p, NULL, acme, name, domains, NULL); + ORDER_CTX_INIT(&ctx, p, NULL, acme, name, domains, profile, NULL); rv = md_acme_POST(acme, acme->api.v2.new_order, on_init_order_register, on_order_upd, NULL, NULL, &ctx); *porder = (APR_SUCCESS == rv)? ctx.order : NULL; return rv; @@ -340,7 +344,7 @@ apr_status_t md_acme_order_update(md_acm apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); - ORDER_CTX_INIT(&ctx, p, order, acme, NULL, NULL, result); + ORDER_CTX_INIT(&ctx, p, order, acme, NULL, NULL, NULL, result); rv = md_acme_GET(acme, order->url, NULL, on_order_upd, NULL, NULL, &ctx); if (APR_SUCCESS != rv && APR_SUCCESS != acme->last->status) { md_result_dup(result, acme->last); @@ -380,7 +384,7 @@ apr_status_t md_acme_order_await_ready(m apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); - ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); + ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, NULL, result); md_result_activity_setn(result, "Waiting for order to become ready"); rv = md_util_try(await_ready, &ctx, 0, timeout, 0, 0, 1); @@ -423,7 +427,7 @@ apr_status_t md_acme_order_await_valid(m apr_status_t rv; assert(MD_ACME_VERSION_MAJOR(acme->version) > 1); - ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); + ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, NULL, result); md_result_activity_setn(result, "Waiting for finalized order to become valid"); rv = md_util_try(await_valid, &ctx, 0, timeout, 0, 0, 1); @@ -552,7 +556,7 @@ apr_status_t md_acme_order_monitor_authz order_ctx_t ctx; apr_status_t rv; - ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, result); + ORDER_CTX_INIT(&ctx, p, order, acme, md->name, NULL, NULL, result); md_result_activity_printf(result, "Monitoring challenge status for %s", md->name); rv = md_util_try(check_challenges, &ctx, 0, timeout, 0, 0, 1); diff -pruN 2.4.63-1/modules/md/md_acme_order.h 2.4.64-1/modules/md/md_acme_order.h --- 2.4.63-1/modules/md/md_acme_order.h 2023-03-05 10:13:26.000000000 +0000 +++ 2.4.64-1/modules/md/md_acme_order.h 2025-02-05 12:41:51.000000000 +0000 @@ -76,7 +76,8 @@ apr_status_t md_acme_order_monitor_authz /* ACMEv2 only ************************************************************************************/ apr_status_t md_acme_order_register(md_acme_order_t **porder, md_acme_t *acme, apr_pool_t *p, - const char *name, struct apr_array_header_t *domains); + const char *name, struct apr_array_header_t *domains, + const char *profile); apr_status_t md_acme_order_update(md_acme_order_t *order, md_acme_t *acme, struct md_result_t *result, apr_pool_t *p); diff -pruN 2.4.63-1/modules/md/md_acmev2_drive.c 2.4.64-1/modules/md/md_acmev2_drive.c --- 2.4.63-1/modules/md/md_acmev2_drive.c 2025-01-15 12:59:16.000000000 +0000 +++ 2.4.64-1/modules/md/md_acmev2_drive.c 2025-02-05 12:41:51.000000000 +0000 @@ -56,6 +56,7 @@ static apr_status_t ad_setup_order(md_pr md_acme_driver_t *ad = d->baton; apr_status_t rv; md_t *md = ad->md; + const char *profile = NULL; assert(ad->md); assert(ad->acme); @@ -77,7 +78,33 @@ static apr_status_t ad_setup_order(md_pr } md_result_activity_setn(result, "Creating new order"); - rv = md_acme_order_register(&ad->order, ad->acme, d->p, d->md->name, ad->domains); + if (ad->profile) { + if(ad->acme->api.v2.profiles) { + int i; + for (i = 0; !profile && i < ad->acme->api.v2.profiles->nelts; ++i) { + const char *s = APR_ARRAY_IDX(ad->acme->api.v2.profiles, i, const char*); + if (!apr_strnatcasecmp(s, ad->profile)) + profile = s; + } + } + if (profile) + md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, + "%s: ordering ACME profile '%s'", md->name, profile); + else if (ad->profile_mandatory) { + md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, d->p, + "%s: mandatory ACME profile '%s' is not offered by CA", + md->name, ad->profile); + rv = APR_EINVAL; + goto leave; + } + else { + md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, rv, d->p, + "%s: ACME profile '%s' is not offered by CA, continuing without", + md->name, ad->profile); + } + } + + rv = md_acme_order_register(&ad->order, ad->acme, d->p, d->md->name, ad->domains, profile); if (APR_SUCCESS !=rv) goto leave; rv = md_acme_order_save(d->store, d->p, MD_SG_STAGING, d->md->name, ad->order, 0); if (APR_SUCCESS != rv) { diff -pruN 2.4.63-1/modules/md/md_core.c 2.4.64-1/modules/md/md_core.c --- 2.4.63-1/modules/md/md_core.c 2023-03-05 10:13:26.000000000 +0000 +++ 2.4.64-1/modules/md/md_core.c 2025-02-05 12:41:51.000000000 +0000 @@ -317,6 +317,8 @@ md_json_t *md_to_json(const md_t *md, ap md_json_sets(md->ca_eab_kid, json, MD_KEY_EAB, MD_KEY_KID, NULL); if (md->ca_eab_hmac) md_json_sets(md->ca_eab_hmac, json, MD_KEY_EAB, MD_KEY_HMAC, NULL); } + if (md->profile) md_json_sets(md->profile, json, MD_KEY_PROFILE, NULL); + md_json_setb(md->profile_mandatory > 0, json, MD_KEY_PROFILE_MANDATORY, NULL); return json; } return NULL; @@ -383,6 +385,10 @@ md_t *md_from_json(md_json_t *json, apr_ md->ca_eab_kid = md_json_dups(p, json, MD_KEY_EAB, MD_KEY_KID, NULL); md->ca_eab_hmac = md_json_dups(p, json, MD_KEY_EAB, MD_KEY_HMAC, NULL); } + + md->profile_mandatory = (int)md_json_getb(json, MD_KEY_PROFILE_MANDATORY, NULL); + if (md_json_has_key(json, MD_KEY_PROFILE, NULL)) + md->profile = md_json_dups(p, json, MD_KEY_PROFILE, NULL); return md; } return NULL; diff -pruN 2.4.63-1/modules/md/md_crypt.c 2.4.64-1/modules/md/md_crypt.c --- 2.4.63-1/modules/md/md_crypt.c 2024-06-06 14:29:10.000000000 +0000 +++ 2.4.64-1/modules/md/md_crypt.c 2025-06-03 08:20:55.000000000 +0000 @@ -63,6 +63,14 @@ || LIBRESSL_VERSION_NUMBER >= 0x3050000fL) /* Missing from LibreSSL < 3.5.0 and only available since OpenSSL v1.1.x */ #include +#define MD_HAVE_CT 1 +#endif +#ifndef MD_HAVE_CT +#define MD_HAVE_CT 0 +#endif + +#if OPENSSL_VERSION_NUMBER < 0x10100000L +#define MD_OPENSSL_10x #endif static int initialized; @@ -253,9 +261,9 @@ static apr_time_t md_asn1_time_get(const #endif } -apr_time_t md_asn1_generalized_time_get(void *ASN1_GENERALIZEDTIME) +apr_time_t md_asn1_generalized_time_get(void *asn1_gtime) { - return md_asn1_time_get(ASN1_GENERALIZEDTIME); + return md_asn1_time_get(asn1_gtime); } /**************************************************************************************************/ @@ -562,7 +570,7 @@ static md_pkey_spec_t PkeySpecDef = { MD md_pkey_spec_t *md_pkeys_spec_get(const md_pkeys_spec_t *pks, int index) { if (md_pkeys_spec_is_empty(pks)) { - return index == 1? &PkeySpecDef : NULL; + return index == 0? &PkeySpecDef : NULL; } else if (pks && index >= 0 && index < pks->specs->nelts) { return APR_ARRAY_IDX(pks->specs, index, md_pkey_spec_t*); @@ -799,7 +807,11 @@ static apr_status_t check_EC_curve(int n int rv = APR_ENOENT; nc = EC_get_builtin_curves(NULL, 0); +#ifdef MD_OPENSSL_10x + if (NULL == (curves = OPENSSL_malloc((int)(sizeof(*curves) * nc))) || +#else if (NULL == (curves = OPENSSL_malloc(sizeof(*curves) * nc)) || +#endif nc != EC_get_builtin_curves(curves, nc)) { rv = APR_EGENERAL; md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, @@ -978,42 +990,64 @@ static const char *bn64(const BIGNUM *b, const char *md_pkey_get_rsa_e64(md_pkey_t *pkey, apr_pool_t *p) { + const char *e64 = NULL; + #if OPENSSL_VERSION_NUMBER < 0x30000000L + +#if OPENSSL_VERSION_NUMBER < 0x10101000L + RSA *rsa = EVP_PKEY_get1_RSA(pkey->pkey); +#else const RSA *rsa = EVP_PKEY_get0_RSA(pkey->pkey); +#endif if (rsa) { const BIGNUM *e; RSA_get0_key(rsa, NULL, &e, NULL); - return bn64(e, p); + e64 = bn64(e, p); +#if OPENSSL_VERSION_NUMBER < 0x10101000L + RSA_free(rsa); +#endif } -#else + +#else /* OPENSSL_VERSION_NUMBER >= 0x30000000L */ BIGNUM *e = NULL; if (EVP_PKEY_get_bn_param(pkey->pkey, OSSL_PKEY_PARAM_RSA_E, &e)) { - const char *e64 = bn64(e, p); + e64 = bn64(e, p); BN_free(e); - return e64; } #endif - return NULL; + + return e64; } const char *md_pkey_get_rsa_n64(md_pkey_t *pkey, apr_pool_t *p) { + const char *n64 = NULL; + #if OPENSSL_VERSION_NUMBER < 0x30000000L + +#if OPENSSL_VERSION_NUMBER < 0x10101000L + RSA *rsa = EVP_PKEY_get1_RSA(pkey->pkey); +#else const RSA *rsa = EVP_PKEY_get0_RSA(pkey->pkey); +#endif if (rsa) { const BIGNUM *n; RSA_get0_key(rsa, &n, NULL, NULL); - return bn64(n, p); + n64 = bn64(n, p); +#if OPENSSL_VERSION_NUMBER < 0x10101000L + RSA_free(rsa); +#endif } -#else + +#else /* OPENSSL_VERSION_NUMBER >= 0x30000000L */ BIGNUM *n = NULL; if (EVP_PKEY_get_bn_param(pkey->pkey, OSSL_PKEY_PARAM_RSA_N, &n)) { - const char *n64 = bn64(n, p); + n64 = bn64(n, p); BN_free(n); - return n64; } #endif - return NULL; + + return n64; } apr_status_t md_crypt_sign64(const char **psign64, md_pkey_t *pkey, apr_pool_t *p, @@ -1265,6 +1299,18 @@ int md_cert_covers_md(md_cert_t *cert, c return 0; } +const char *md_cert_get_issuer_name(const md_cert_t *cert, apr_pool_t *p) +{ + X509_NAME *xname = X509_get_issuer_name(cert->x509); + if(xname) { + char *name, *s = X509_NAME_oneline(xname, NULL, 0); + name = apr_pstrdup(p, s); + OPENSSL_free(s); + return name; + } + return NULL; +} + apr_status_t md_cert_get_issuers_uri(const char **puri, const md_cert_t *cert, apr_pool_t *p) { apr_status_t rv = APR_ENOENT; @@ -1477,7 +1523,11 @@ apr_status_t md_cert_read_chain(apr_arra md_cert_t *cert; int added = 0; +#ifdef MD_OPENSSL_10x + if (NULL == (bf = BIO_new_mem_buf((char *)pem, (int)pem_len))) { +#else if (NULL == (bf = BIO_new_mem_buf(pem, (int)pem_len))) { +#endif rv = APR_ENOMEM; goto cleanup; } @@ -2037,11 +2087,10 @@ out: return rv; } +#if MD_HAVE_CT #define MD_OID_CT_SCTS_NUM "1.3.6.1.4.1.11129.2.4.2" #define MD_OID_CT_SCTS_SNAME "CT-SCTs" #define MD_OID_CT_SCTS_LNAME "CT Certificate SCTs" - -#ifndef OPENSSL_NO_CT static int get_ct_scts_nid(void) { int nid = OBJ_txt2nid(MD_OID_CT_SCTS_NUM); @@ -2065,7 +2114,7 @@ const char *md_nid_get_lname(int nid) apr_status_t md_cert_get_ct_scts(apr_array_header_t *scts, apr_pool_t *p, const md_cert_t *cert) { -#ifndef OPENSSL_NO_CT +#if MD_HAVE_CT int nid, i, idx, critical; STACK_OF(SCT) *sct_list; SCT *sct_handle; diff -pruN 2.4.63-1/modules/md/md_crypt.h 2.4.64-1/modules/md/md_crypt.h --- 2.4.63-1/modules/md/md_crypt.h 2022-04-27 12:08:18.000000000 +0000 +++ 2.4.64-1/modules/md/md_crypt.h 2025-02-05 12:41:51.000000000 +0000 @@ -190,6 +190,7 @@ struct md_timeperiod_t md_cert_get_valid */ int md_certs_are_equal(const md_cert_t *a, const md_cert_t *b); +const char *md_cert_get_issuer_name(const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_get_issuers_uri(const char **puri, const md_cert_t *cert, apr_pool_t *p); apr_status_t md_cert_get_alt_names(apr_array_header_t **pnames, const md_cert_t *cert, apr_pool_t *p); diff -pruN 2.4.63-1/modules/md/md_curl.c 2.4.64-1/modules/md/md_curl.c --- 2.4.63-1/modules/md/md_curl.c 2022-08-25 14:11:44.000000000 +0000 +++ 2.4.64-1/modules/md/md_curl.c 2025-07-07 15:40:38.000000000 +0000 @@ -244,6 +244,7 @@ static apr_status_t internals_setup(md_h md_curl_internals_t *internals; CURL *curl; apr_status_t rv = APR_SUCCESS; + long ssl_options = 0; curl = md_http_get_impl_data(req->http); if (!curl) { @@ -302,6 +303,12 @@ static apr_status_t internals_setup(md_h } if (req->ca_file) { curl_easy_setopt(curl, CURLOPT_CAINFO, req->ca_file); + /* for a custom CA, allow certificates checking to ignore the + * Schannel error CRYPT_E_NO_REVOCATION_CHECK (could be a missing OCSP + * responder URL in the certs???). See issue #361 */ +#ifdef CURLSSLOPT_NO_REVOKE + ssl_options |= CURLSSLOPT_NO_REVOKE; +#endif } if (req->unix_socket_path) { curl_easy_setopt(curl, CURLOPT_UNIX_SOCKET_PATH, req->unix_socket_path); @@ -340,7 +347,10 @@ static apr_status_t internals_setup(md_h curl_easy_setopt(curl, CURLOPT_DEBUGFUNCTION, curl_debug_log); curl_easy_setopt(curl, CURLOPT_DEBUGDATA, req); } - + + if (ssl_options) + curl_easy_setopt(curl, CURLOPT_SSL_OPTIONS, ssl_options); + leave: req->internals = (APR_SUCCESS == rv)? internals : NULL; return rv; diff -pruN 2.4.63-1/modules/md/md_reg.c 2.4.64-1/modules/md/md_reg.c --- 2.4.63-1/modules/md/md_reg.c 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/modules/md/md_reg.c 2025-02-05 12:41:51.000000000 +0000 @@ -81,6 +81,18 @@ static apr_status_t load_props(md_reg_t else if (APR_STATUS_IS_ENOENT(rv)) { rv = APR_SUCCESS; } + else { + apr_status_t rv2; + md_log_perror(MD_LOG_MARK, MD_LOG_INFO, 0, p, + "removing md/%s on error loading it", MD_FN_HTTPD_JSON); + rv2 = md_store_remove(reg->store, MD_SG_NONE, NULL, MD_FN_HTTPD_JSON, + p, TRUE); + if (rv2 != APR_SUCCESS) + md_log_perror(MD_LOG_MARK, MD_LOG_ERR, APR_EINVAL, p, + "error removing md/%s", MD_FN_HTTPD_JSON); + else + rv = APR_SUCCESS; + } return rv; } @@ -222,11 +234,16 @@ static apr_status_t state_init(md_reg_t const md_cert_t *cert; const md_pkey_spec_t *spec; apr_status_t rv = APR_SUCCESS; - int i; + int i, is_static = (md->cert_files && md->cert_files->nelts); if (md->renew_window == NULL) md->renew_window = reg->renew_window; if (md->warn_window == NULL) md->warn_window = reg->warn_window; + if(is_static) { + if(md->renew_mode == MD_RENEW_AUTO) + md->renew_mode = MD_RENEW_MANUAL; + } + if (md->domains && md->domains->pool != p) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, 0, p, "md{%s}: state_init called with foreign pool", md->name); @@ -860,12 +877,24 @@ apr_status_t md_reg_sync_start(md_reg_t idx = md_array_str_index(ctx.store_names, md->name, 0, 1); if (idx < 0) { APR_ARRAY_PUSH(ctx.maybe_new_mds, md_t*) = md; + } + else { md_array_remove_at(ctx.store_names, idx); } } - if (ctx.maybe_new_mds->nelts == 0) goto leave; /* none new */ - if (ctx.store_names->nelts == 0) goto leave; /* all new */ + if (ctx.maybe_new_mds->nelts == 0) { + /* none new */ + goto leave; + } + if (ctx.store_names->nelts == 0) { + /* all new */ + for (i = 0; i < ctx.maybe_new_mds->nelts; ++i) { + md = APR_ARRAY_IDX(ctx.maybe_new_mds, i, md_t*); + APR_ARRAY_PUSH(ctx.new_mds, md_t*) = md; + } + goto leave; + } md_log_perror(MD_LOG_MARK, MD_LOG_DEBUG, 0, p, "sync MDs, %d potentially new MDs detected, looking for renames among " diff -pruN 2.4.63-1/modules/md/md_status.c 2.4.64-1/modules/md/md_status.c --- 2.4.63-1/modules/md/md_status.c 2022-05-16 11:36:20.000000000 +0000 +++ 2.4.64-1/modules/md/md_status.c 2025-02-05 12:41:51.000000000 +0000 @@ -47,12 +47,21 @@ static apr_status_t status_get_cert_json apr_status_t rv = APR_SUCCESS; md_timeperiod_t valid; md_json_t *json; - + const char *issuer_uri, *issuer_name; + + json = md_json_create(p); + issuer_name = md_cert_get_issuer_name(cert, p); + if (issuer_name) + md_json_sets(issuer_name, json, MD_KEY_ISSUER_NAME, NULL); + rv = md_cert_get_issuers_uri(&issuer_uri, cert, p); + if(rv == APR_SUCCESS && issuer_uri) + md_json_sets(issuer_uri, json, MD_KEY_ISSUER_URI, NULL); valid.start = md_cert_get_not_before(cert); valid.end = md_cert_get_not_after(cert); md_json_set_timeperiod(&valid, json, MD_KEY_VALID, NULL); md_json_sets(md_cert_get_serial_number(cert, p), json, MD_KEY_SERIAL, NULL); + md_json_sets(md_cert_get_serial_number(cert, p), json, MD_KEY_SERIAL, NULL); if (APR_SUCCESS != (rv = md_cert_to_sha256_fingerprint(&finger, cert, p))) goto leave; md_json_sets(finger, json, MD_KEY_SHA256_FINGERPRINT, NULL); diff -pruN 2.4.63-1/modules/md/md_store_fs.c 2.4.64-1/modules/md/md_store_fs.c --- 2.4.63-1/modules/md/md_store_fs.c 2022-08-25 14:11:44.000000000 +0000 +++ 2.4.64-1/modules/md/md_store_fs.c 2025-02-05 12:41:51.000000000 +0000 @@ -275,6 +275,15 @@ static apr_status_t setup_store_file(voi read: if (MD_OK(md_util_is_file(fname, ptemp))) { rv = read_store_file(s_fs, fname, p, ptemp); + if (rv != APR_SUCCESS) { + md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, + "The central store file md/md_store.json seems to exist, but " + "its content are not readable as JSON. Either it got somehow corrupted " + "or the store directory was configured for a location with a foreign " + "md_store.json file. Either way, it is unclear how to proceeed. " + "You should either restore the correct file/location or clean the directory " + "so it gets initialized again."); + } } else if (APR_STATUS_IS_ENOENT(rv) && APR_STATUS_IS_EEXIST(rv = init_store_file(s_fs, fname, p, ptemp))) { @@ -511,7 +520,6 @@ static apr_status_t mk_group_dir(const c perms = gperms(s_fs, group); - *pdir = NULL; rv = fs_get_dname(pdir, &s_fs->s, group, name, p); if ((APR_SUCCESS != rv) || (MD_SG_NONE == group)) goto cleanup; @@ -531,7 +539,7 @@ static apr_status_t mk_group_dir(const c cleanup: if (APR_SUCCESS != rv) { md_log_perror(MD_LOG_MARK, MD_LOG_ERR, rv, p, "mk_group_dir %d %s", - group, (*pdir? *pdir : (name? name : "(null)"))); + group, (*pdir? *pdir : (name? name : "(null)"))); } return rv; } diff -pruN 2.4.63-1/modules/md/md_version.h 2.4.64-1/modules/md/md_version.h --- 2.4.63-1/modules/md/md_version.h 2025-01-15 12:59:16.000000000 +0000 +++ 2.4.64-1/modules/md/md_version.h 2025-06-03 08:20:55.000000000 +0000 @@ -27,7 +27,7 @@ * @macro * Version number of the md module as c string */ -#define MOD_MD_VERSION "2.4.31" +#define MOD_MD_VERSION "2.5.2" /** * @macro @@ -35,7 +35,7 @@ * release. This is a 24 bit number with 8 bits for major number, 8 bits * for minor and 8 bits for patch. Version 1.2.3 becomes 0x010203. */ -#define MOD_MD_VERSION_NUM 0x02041f +#define MOD_MD_VERSION_NUM 0x020502 #define MD_ACME_DEF_URL "https://acme-v02.api.letsencrypt.org/directory" #define MD_TAILSCALE_DEF_URL "file://localhost/var/run/tailscale/tailscaled.sock" diff -pruN 2.4.63-1/modules/md/mod_md.c 2.4.64-1/modules/md/mod_md.c --- 2.4.63-1/modules/md/mod_md.c 2023-08-16 12:02:03.000000000 +0000 +++ 2.4.64-1/modules/md/mod_md.c 2025-06-03 08:20:55.000000000 +0000 @@ -363,6 +363,12 @@ static void merge_srv_config(md_t *md, m if (md->stapling < 0) { md->stapling = md_config_geti(md->sc, MD_CONFIG_STAPLING); } + if (!md->profile) { + md->profile = md_config_gets(md->sc, MD_CONFIG_CA_PROFILE); + } + if (md->profile_mandatory < 0) { + md->profile_mandatory = md_config_geti(md->sc, MD_CONFIG_CA_PROFILE_MANDATORY); + } } static apr_status_t check_coverage(md_t *md, const char *domain, server_rec *s, @@ -945,7 +951,8 @@ static apr_status_t md_post_config_befor /*5*/ md_reg_load_stagings(mc->reg, mc->mds, mc->env, p); leave: - md_reg_unlock_global(mc->reg, ptemp); + if (mc->reg) + md_reg_unlock_global(mc->reg, ptemp); return rv; } @@ -1256,7 +1263,7 @@ static int md_add_cert_files(server_rec s->server_hostname); } ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, - "host '%s' is covered by a Managed Domaina and " + "host '%s' is covered by a Managed Domain and " "is being provided with %d key/certificate files.", s->server_hostname, md_cert_files->nelts); apr_array_cat(cert_files, md_cert_files); @@ -1285,55 +1292,95 @@ static int md_add_fallback_cert_files(se return DECLINED; } -static int md_answer_challenge(conn_rec *c, const char *servername, - const char **pcert_pem, const char **pkey_pem) +static int md_get_challenge_cert(conn_rec *c, const char *servername, + md_srv_conf_t *sc, + md_pkey_type_t key_type, + const char **pcert_pem, + const char **pkey_pem) { - const char *protocol; - int hook_rv = DECLINED; apr_status_t rv = APR_ENOENT; - md_srv_conf_t *sc; - md_store_t *store; + int i; char *cert_name, *pkey_name; const char *cert_pem, *key_pem; - int i; - - if (!servername - || !(protocol = md_protocol_get(c)) - || strcmp(PROTO_ACME_TLS_1, protocol)) { - goto cleanup; - } - sc = md_config_get(c->base_server); - if (!sc || !sc->mc->reg) goto cleanup; + md_store_t *store = md_reg_store_get(sc->mc->reg); + md_pkey_spec_t *key_spec; - ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, - "Answer challenge[tls-alpn-01] for %s", servername); - store = md_reg_store_get(sc->mc->reg); + for (i = 0; i < md_pkeys_spec_count(sc->pks); i++) { + key_spec = md_pkeys_spec_get(sc->pks, i); + if (key_spec->type != key_type) + continue; - for (i = 0; i < md_pkeys_spec_count( sc->pks ); i++) { - tls_alpn01_fnames(c->pool, md_pkeys_spec_get(sc->pks,i), - &pkey_name, &cert_name); + tls_alpn01_fnames(c->pool, key_spec, &pkey_name, &cert_name); rv = md_store_load(store, MD_SG_CHALLENGES, servername, cert_name, MD_SV_TEXT, (void**)&cert_pem, c->pool); + ap_log_cerror(APLOG_MARK, APLOG_TRACE1, rv, c, + "Load challenge: cert %s", cert_name); if (APR_STATUS_IS_ENOENT(rv)) continue; if (APR_SUCCESS != rv) goto cleanup; rv = md_store_load(store, MD_SG_CHALLENGES, servername, pkey_name, MD_SV_TEXT, (void**)&key_pem, c->pool); + ap_log_cerror(APLOG_MARK, APLOG_TRACE1, rv, c, + "Load challenge: key %s", pkey_name); if (APR_STATUS_IS_ENOENT(rv)) continue; if (APR_SUCCESS != rv) goto cleanup; ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, - "Found challenge cert %s, key %s for %s", + "Found challenge: cert %s, key %s for %s", cert_name, pkey_name, servername); *pcert_pem = cert_pem; *pkey_pem = key_pem; - hook_rv = OK; - break; + return OK; + } +cleanup: + return DECLINED; +} + +static int md_answer_challenge(conn_rec *c, const char *servername, + const char **pcert_pem, const char **pkey_pem) +{ + const char *protocol; + int hook_rv = DECLINED; + md_srv_conf_t *sc; + + *pcert_pem = *pkey_pem = NULL; + + if (!servername + || !(protocol = md_protocol_get(c)) + || strcmp(PROTO_ACME_TLS_1, protocol)) { + goto cleanup; } + sc = md_config_get(c->base_server); + if (!sc || !sc->mc->reg) goto cleanup; + + ap_log_cerror(APLOG_MARK, APLOG_TRACE1, 0, c, + "Answer challenge[tls-alpn-01] for %s", servername); + + /* A challenge for TLS-ALPN-01 used to have a single certificate, + * overriding the single fallback certificate already installed in + * the connections SSL* instance. + * Since the addition of `MDPrivateKeys`, there can be more than one, + * but the server API for a challenge cert can return only one. This + * is a short coming of the API. + * This means we cannot override all fallback certificates present, just + * a single one. If there is an RSA cert in fallback, we need to override + * that, because the ACME server has a preference for that (at least LE + * has). So we look for an RSA challenge cert first. + * The fallback is an EC cert and that works since without RSA challenges, + * there should also be no RSA fallbacks. + * Bit of a mess. */ + hook_rv = md_get_challenge_cert(c, servername, sc, MD_PKEY_TYPE_DEFAULT, + pcert_pem, pkey_pem); + if (hook_rv == DECLINED) + hook_rv = md_get_challenge_cert(c, servername, sc, MD_PKEY_TYPE_RSA, + pcert_pem, pkey_pem); + if (hook_rv == DECLINED) + hook_rv = md_get_challenge_cert(c, servername, sc, MD_PKEY_TYPE_EC, + pcert_pem, pkey_pem); if (DECLINED == hook_rv) { - ap_log_cerror(APLOG_MARK, APLOG_INFO, rv, c, APLOGNO(10080) + ap_log_cerror(APLOG_MARK, APLOG_INFO, 0, c, APLOGNO(10080) "%s: unknown tls-alpn-01 challenge host", servername); } @@ -1514,7 +1561,7 @@ static void md_hooks(apr_pool_t *pool) /* Run once after configuration is set, before mod_ssl. * Run again after mod_ssl is done. */ - ap_hook_post_config(md_post_config_before_ssl, NULL, mod_ssl, APR_HOOK_MIDDLE); + ap_hook_post_config(md_post_config_before_ssl, NULL, mod_ssl, APR_HOOK_FIRST); ap_hook_post_config(md_post_config_after_ssl, mod_ssl, mod_wd, APR_HOOK_LAST); /* Run once after a child process has been created. diff -pruN 2.4.63-1/modules/md/mod_md_config.c 2.4.64-1/modules/md/mod_md_config.c --- 2.4.63-1/modules/md/mod_md_config.c 2024-06-06 14:29:10.000000000 +0000 +++ 2.4.64-1/modules/md/mod_md_config.c 2025-02-05 12:41:51.000000000 +0000 @@ -120,6 +120,8 @@ static md_srv_conf_t defconf = { NULL, /* ca challenges array */ NULL, /* ca eab kid */ NULL, /* ca eab hmac */ + NULL, /* ACME profile */ + 0, /* ACME profile mandatory */ 0, /* stapling */ 1, /* staple others */ NULL, /* dns01_cmd */ @@ -175,6 +177,8 @@ static void srv_conf_props_clear(md_srv_ sc->ca_challenges = NULL; sc->ca_eab_kid = NULL; sc->ca_eab_hmac = NULL; + sc->profile = NULL; + sc->profile_mandatory = DEF_VAL; sc->stapling = DEF_VAL; sc->staple_others = DEF_VAL; sc->dns01_cmd = NULL; @@ -196,6 +200,8 @@ static void srv_conf_props_copy(md_srv_c to->ca_challenges = from->ca_challenges; to->ca_eab_kid = from->ca_eab_kid; to->ca_eab_hmac = from->ca_eab_hmac; + to->profile = from->profile; + to->profile_mandatory = from->profile_mandatory; to->stapling = from->stapling; to->staple_others = from->staple_others; to->dns01_cmd = from->dns01_cmd; @@ -221,6 +227,8 @@ static void srv_conf_props_apply(md_t *m if (from->ca_challenges) md->ca_challenges = apr_array_copy(p, from->ca_challenges); if (from->ca_eab_kid) md->ca_eab_kid = from->ca_eab_kid; if (from->ca_eab_hmac) md->ca_eab_hmac = from->ca_eab_hmac; + if (from->profile) md->profile = from->profile; + if (from->profile_mandatory != DEF_VAL) md->profile_mandatory = from->profile_mandatory; if (from->stapling != DEF_VAL) md->stapling = from->stapling; if (from->dns01_cmd) md->dns01_cmd = from->dns01_cmd; } @@ -266,6 +274,8 @@ static void *md_config_merge(apr_pool_t : (base->ca_challenges? apr_array_copy(pool, base->ca_challenges) : NULL)); nsc->ca_eab_kid = add->ca_eab_kid? add->ca_eab_kid : base->ca_eab_kid; nsc->ca_eab_hmac = add->ca_eab_hmac? add->ca_eab_hmac : base->ca_eab_hmac; + nsc->profile = add->profile? add->profile : base->profile; + nsc->profile_mandatory = (add->profile_mandatory != DEF_VAL)? add->profile_mandatory : base->profile_mandatory; nsc->stapling = (add->stapling != DEF_VAL)? add->stapling : base->stapling; nsc->staple_others = (add->staple_others != DEF_VAL)? add->staple_others : base->staple_others; nsc->dns01_cmd = (add->dns01_cmd)? add->dns01_cmd : base->dns01_cmd; @@ -579,6 +589,31 @@ static const char *md_config_set_renew_m return NULL; } +static const char *md_config_set_profile(cmd_parms *cmd, void *dc, const char *value) +{ + md_srv_conf_t *config = md_config_get(cmd->server); + const char *err; + + (void)dc; + if ((err = md_conf_check_location(cmd, MD_LOC_ALL))) { + return err; + } + config->profile = value; + return NULL; +} + +static const char *md_config_set_profile_mandatory(cmd_parms *cmd, void *dc, const char *value) +{ + md_srv_conf_t *config = md_config_get(cmd->server); + const char *err; + + (void)dc; + if ((err = md_conf_check_location(cmd, MD_LOC_ALL))) { + return err; + } + return set_on_off(&config->profile_mandatory, value, cmd->pool); +} + static const char *md_config_set_must_staple(cmd_parms *cmd, void *dc, const char *value) { md_srv_conf_t *config = md_config_get(cmd->server); @@ -1325,6 +1360,10 @@ const command_rec md_cmds[] = { "Determines how DNS names are matched to vhosts."), AP_INIT_TAKE1("MDCheckInterval", md_config_set_check_interval, NULL, RSRC_CONF, "Time between certificate checks."), + AP_INIT_TAKE1("MDProfile", md_config_set_profile, NULL, RSRC_CONF, + "The name of an CA profile to order certificates for."), + AP_INIT_TAKE1("MDProfileMandatory", md_config_set_profile_mandatory, NULL, RSRC_CONF, + "Determines if a configured CA profile is mandatory."), AP_INIT_TAKE1(NULL, NULL, NULL, RSRC_CONF, NULL) }; @@ -1395,6 +1434,8 @@ const char *md_config_gets(const md_srv_ return sc->ca_agreement? sc->ca_agreement : defconf.ca_agreement; case MD_CONFIG_NOTIFY_CMD: return sc->mc->notify_cmd; + case MD_CONFIG_CA_PROFILE: + return sc->profile? sc->profile : defconf.profile; default: return NULL; } @@ -1415,6 +1456,8 @@ int md_config_geti(const md_srv_conf_t * return (sc->stapling != DEF_VAL)? sc->stapling : defconf.stapling; case MD_CONFIG_STAPLE_OTHERS: return (sc->staple_others != DEF_VAL)? sc->staple_others : defconf.staple_others; + case MD_CONFIG_CA_PROFILE_MANDATORY: + return (sc->profile_mandatory != DEF_VAL)? sc->profile_mandatory : defconf.profile_mandatory; default: return 0; } diff -pruN 2.4.63-1/modules/md/mod_md_config.h 2.4.64-1/modules/md/mod_md_config.h --- 2.4.63-1/modules/md/mod_md_config.h 2024-06-06 14:29:10.000000000 +0000 +++ 2.4.64-1/modules/md/mod_md_config.h 2025-02-05 12:41:51.000000000 +0000 @@ -39,6 +39,8 @@ typedef enum { MD_CONFIG_MESSGE_CMD, MD_CONFIG_STAPLING, MD_CONFIG_STAPLE_OTHERS, + MD_CONFIG_CA_PROFILE, + MD_CONFIG_CA_PROFILE_MANDATORY, } md_config_var_t; typedef enum { @@ -103,6 +105,8 @@ typedef struct md_srv_conf_t { struct apr_array_header_t *ca_challenges; /* challenge types configured */ const char *ca_eab_kid; /* != NULL, external account binding keyid */ const char *ca_eab_hmac; /* != NULL, external account binding hmac */ + const char *profile; /* != NULL, ACME order profile */ + int profile_mandatory; /* if ACME profile, when set, is mandatory */ int stapling; /* OCSP stapling enabled */ int staple_others; /* Provide OCSP stapling for non-MD certificates */ diff -pruN 2.4.63-1/modules/md/mod_md_status.c 2.4.64-1/modules/md/mod_md_status.c --- 2.4.63-1/modules/md/mod_md_status.c 2024-12-03 09:59:46.000000000 +0000 +++ 2.4.64-1/modules/md/mod_md_status.c 2025-06-03 08:20:55.000000000 +0000 @@ -543,7 +543,7 @@ static void si_val_activity(status_ctx * apr_brigade_puts(ctx->bb, NULL, NULL, "Pending"); } else { - apr_brigade_printf(ctx->bb, NULL, NULL, "%s: %s", ctx->prefix, "Pending"); + apr_brigade_printf(ctx->bb, NULL, NULL, "%s: %s", ctx->prefix, "Pending\n"); } } else if (MD_RENEW_MANUAL == md_json_getl(mdj, MD_KEY_RENEW_MODE, NULL)) { @@ -551,7 +551,7 @@ static void si_val_activity(status_ctx * apr_brigade_puts(ctx->bb, NULL, NULL, "Manual renew"); } else { - apr_brigade_printf(ctx->bb, NULL, NULL, "%s: %s", ctx->prefix, "Manual renew"); + apr_brigade_printf(ctx->bb, NULL, NULL, "%s: %s", ctx->prefix, "Manual renew\n"); } } if (!HTML_STATUS(ctx)) { diff -pruN 2.4.63-1/modules/metadata/mod_headers.c 2.4.64-1/modules/metadata/mod_headers.c --- 2.4.63-1/modules/metadata/mod_headers.c 2024-06-24 17:54:34.000000000 +0000 +++ 2.4.64-1/modules/metadata/mod_headers.c 2025-07-07 12:01:02.000000000 +0000 @@ -782,21 +782,27 @@ static int do_headers_fixup(request_rec } break; case hdr_set: - if (!ap_cstr_casecmp(hdr->header, "Content-Type")) { - ap_set_content_type_ex(r, process_tags(hdr, r), 1); + if (r->headers_in != headers && + !ap_cstr_casecmp(hdr->header, "Content-Type")) { + ap_set_content_type(r, process_tags(hdr, r)); } apr_table_setn(headers, hdr->header, process_tags(hdr, r)); break; case hdr_setifempty: if (NULL == apr_table_get(headers, hdr->header)) { - if (!ap_cstr_casecmp(hdr->header, "Content-Type")) { - ap_set_content_type_ex(r, process_tags(hdr, r), 1); + if (r->headers_in != headers && + !ap_cstr_casecmp(hdr->header, "Content-Type")) { + ap_set_content_type(r, process_tags(hdr, r)); } apr_table_setn(headers, hdr->header, process_tags(hdr, r)); } break; case hdr_unset: apr_table_unset(headers, hdr->header); + if (r->headers_in != headers && + !ap_cstr_casecmp(hdr->header, "Content-Type")) { + ap_set_content_type(r, NULL); + } break; case hdr_echo: v.r = r; @@ -809,7 +815,7 @@ static int do_headers_fixup(request_rec const char *repl = process_regexp(hdr, r->content_type, r); if (repl == NULL) return 0; - ap_set_content_type_ex(r, repl, 1); + if (r->headers_in != headers) ap_set_content_type_ex(r, repl, 1); } if (apr_table_get(headers, hdr->header)) { edit_do ed; diff -pruN 2.4.63-1/modules/proxy/mod_proxy_ajp.c 2.4.64-1/modules/proxy/mod_proxy_ajp.c --- 2.4.63-1/modules/proxy/mod_proxy_ajp.c 2023-11-18 11:08:42.000000000 +0000 +++ 2.4.64-1/modules/proxy/mod_proxy_ajp.c 2025-07-07 11:33:13.000000000 +0000 @@ -218,6 +218,9 @@ static int ap_proxy_ajp_request(apr_pool if (psf->io_buffer_size_set) maxsize = psf->io_buffer_size; + /* Override with worker setting if present */ + if (conn->worker->s->io_buffer_size_set) + maxsize = conn->worker->s->io_buffer_size; if (maxsize > AJP_MAX_BUFFER_SZ) maxsize = AJP_MAX_BUFFER_SZ; else if (maxsize < AJP_MSG_BUFFER_SZ) diff -pruN 2.4.63-1/modules/proxy/mod_proxy_balancer.c 2.4.64-1/modules/proxy/mod_proxy_balancer.c --- 2.4.63-1/modules/proxy/mod_proxy_balancer.c 2025-01-15 12:03:59.000000000 +0000 +++ 2.4.64-1/modules/proxy/mod_proxy_balancer.c 2025-06-04 07:36:11.000000000 +0000 @@ -276,11 +276,23 @@ static proxy_worker *find_session_route( char **url) { proxy_worker *worker = NULL; + char *url_with_qs; if (!*balancer->s->sticky) return NULL; + /* + * The route might be contained in the query string and *url is not + * supposed to contain the query string. Hence add it temporarily if + * present. + */ + if (r->args) { + url_with_qs = apr_pstrcat(r->pool, *url, "?", r->args, NULL); + } + else { + url_with_qs = *url; + } /* Try to find the sticky route inside url */ - *route = get_path_param(r->pool, *url, balancer->s->sticky_path, balancer->s->scolonsep); + *route = get_path_param(r->pool, url_with_qs, balancer->s->sticky_path, balancer->s->scolonsep); if (*route) { ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(01159) "Found value %s for stickysession %s", diff -pruN 2.4.63-1/modules/proxy/proxy_util.c 2.4.64-1/modules/proxy/proxy_util.c --- 2.4.63-1/modules/proxy/proxy_util.c 2025-01-07 15:05:35.000000000 +0000 +++ 2.4.64-1/modules/proxy/proxy_util.c 2025-06-10 10:43:58.000000000 +0000 @@ -45,16 +45,16 @@ APLOG_USE_MODULE(proxy); /* - * Opaque structure containing target server info when - * using a forward proxy. - * Up to now only used in combination with HTTP CONNECT to ProxyRemote + * Opaque structure containing infos for CONNECT-ing an origin server through a + * remote (forward) proxy. Saved in the (opaque) proxy_conn_rec::forward pointer + * field for backend connections kept alive, allowing for reuse when subsequent + * requests should be routed through the same remote proxy. */ typedef struct { - int use_http_connect; /* Use SSL Tunneling via HTTP CONNECT */ - const char *target_host; /* Target hostname */ - apr_port_t target_port; /* Target port */ const char *proxy_auth; /* Proxy authorization */ -} forward_info; + const char *target_host; /* Target/origin hostname */ + apr_port_t target_port; /* Target/origin port */ +} remote_connect_info; /* * Opaque structure containing a refcounted and TTL'ed address. @@ -1508,6 +1508,7 @@ static void socket_cleanup(proxy_conn_re conn->connection = NULL; conn->ssl_hostname = NULL; apr_pool_clear(conn->scpool); + conn->close = 0; } static void conn_cleanup(proxy_conn_rec *conn) @@ -1525,6 +1526,7 @@ static void conn_cleanup(proxy_conn_rec static apr_status_t conn_pool_cleanup(void *theworker) { + /* Signal that the child is exiting */ ((proxy_worker *)theworker)->cp = NULL; return APR_SUCCESS; } @@ -1603,10 +1605,7 @@ PROXY_DECLARE(int) ap_proxy_connection_r { proxy_worker *worker = conn->worker; - return !(conn->close - || conn->forward - || worker->s->disablereuse - || !worker->s->is_address_reusable); + return !(conn->close || worker->s->disablereuse); } static proxy_conn_rec *connection_make(apr_pool_t *p, proxy_worker *worker) @@ -1659,18 +1658,17 @@ static void connection_cleanup(void *the apr_pool_clear(p); conn = connection_make(p, worker); } - else if (conn->close - || conn->forward + else if (!conn->sock || (conn->connection && conn->connection->keepalive == AP_CONN_CLOSE) - || worker->s->disablereuse) { + || !ap_proxy_connection_reusable(conn)) { socket_cleanup(conn); - conn->close = 0; } else if (conn->is_ssl) { - /* Unbind/reset the SSL connection dir config (sslconn->dc) from - * r->per_dir_config, r will likely get destroyed before this proxy - * conn is reused. + /* The current ssl section/dir config of the conn is not necessarily + * the one it will be reused for, so while the conn is in the reslist + * reset its ssl config to the worker's, until a new user sets its own + * ssl config eventually in proxy_connection_create() and so on. */ ap_proxy_ssl_engine(conn->connection, worker->section_config, 1); } @@ -2822,7 +2820,6 @@ PROXY_DECLARE(int) ap_proxy_acquire_conn (int)worker->s->port); (*conn)->worker = worker; - (*conn)->close = 0; (*conn)->inreslist = 0; return OK; @@ -3267,7 +3264,6 @@ ap_proxy_determine_connection(apr_pool_t /* Close a possible existing socket if we are told to do so */ if (conn->close) { socket_cleanup(conn); - conn->close = 0; } /* @@ -3333,12 +3329,10 @@ ap_proxy_determine_connection(apr_pool_t uri->scheme, conn->uds_path, conn->hostname, conn->port); } else { + remote_connect_info *connect_info = NULL; const char *hostname = uri->hostname; apr_port_t hostport = uri->port; - /* Not a remote CONNECT until further notice */ - conn->forward = NULL; - if (proxyname) { hostname = proxyname; hostport = proxyport; @@ -3349,7 +3343,6 @@ ap_proxy_determine_connection(apr_pool_t * sending our actual HTTPS requests. */ if (conn->is_ssl) { - forward_info *forward; const char *proxy_auth; /* Do we want to pass Proxy-Authorization along? @@ -3368,13 +3361,15 @@ ap_proxy_determine_connection(apr_pool_t proxy_auth = NULL; } - /* Reset forward info if they changed */ - if (!(forward = conn->forward) - || forward->target_port != uri->port - || ap_cstr_casecmp(forward->target_host, uri->hostname) != 0 - || (forward->proxy_auth != NULL) != (proxy_auth != NULL) - || (forward->proxy_auth != NULL && proxy_auth != NULL && - strcmp(forward->proxy_auth, proxy_auth) != 0)) { + /* Save our real backend data for using it later during HTTP CONNECT */ + connect_info = conn->forward; + if (!connect_info + /* reset connect info if they changed */ + || connect_info->target_port != uri->port + || ap_cstr_casecmp(connect_info->target_host, uri->hostname) != 0 + || (connect_info->proxy_auth != NULL) != (proxy_auth != NULL) + || (connect_info->proxy_auth != NULL && proxy_auth != NULL && + strcmp(connect_info->proxy_auth, proxy_auth) != 0)) { apr_pool_t *fwd_pool = conn->pool; if (worker->s->is_address_reusable) { if (conn->fwd_pool) { @@ -3385,26 +3380,24 @@ ap_proxy_determine_connection(apr_pool_t } fwd_pool = conn->fwd_pool; } - forward = apr_pcalloc(fwd_pool, sizeof(forward_info)); - conn->forward = forward; - - /* - * Save our real backend data for using it later during HTTP CONNECT. - */ - forward->use_http_connect = 1; - forward->target_host = apr_pstrdup(fwd_pool, uri->hostname); - forward->target_port = uri->port; + connect_info = apr_pcalloc(fwd_pool, sizeof(*connect_info)); + connect_info->target_host = apr_pstrdup(fwd_pool, uri->hostname); + connect_info->target_port = uri->port; if (proxy_auth) { - forward->proxy_auth = apr_pstrdup(fwd_pool, proxy_auth); + connect_info->proxy_auth = apr_pstrdup(fwd_pool, proxy_auth); } + conn->forward = NULL; } } } - if (conn->hostname - && (conn->port != hostport - || ap_cstr_casecmp(conn->hostname, hostname) != 0)) { + /* Close the connection if the remote proxy or origin server don't match */ + if (conn->forward != connect_info + || (conn->hostname + && (conn->port != hostport + || ap_cstr_casecmp(conn->hostname, hostname) != 0))) { conn_cleanup(conn); + conn->forward = connect_info; } /* Resolve the connection address with the determined hostname/port */ @@ -3448,9 +3441,8 @@ ap_proxy_determine_connection(apr_pool_t if (dconf->preserve_host) { ssl_hostname = r->hostname; } - else if (conn->forward - && ((forward_info *)(conn->forward))->use_http_connect) { - ssl_hostname = ((forward_info *)conn->forward)->target_host; + else if (conn->forward) { + ssl_hostname = ((remote_connect_info *)conn->forward)->target_host; } else { ssl_hostname = conn->hostname; @@ -3547,7 +3539,7 @@ PROXY_DECLARE(int) ap_proxy_is_socket_co /* - * Send a HTTP CONNECT request to a forward proxy. + * Send a HTTP CONNECT request to a remote proxy. * The proxy is given by "backend", the target server * is contained in the "forward" member of "backend". */ @@ -3560,24 +3552,24 @@ static apr_status_t send_http_connect(pr int complete = 0; char buffer[HUGE_STRING_LEN]; char drain_buffer[HUGE_STRING_LEN]; - forward_info *forward = (forward_info *)backend->forward; + remote_connect_info *connect_info = backend->forward; int len = 0; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00948) "CONNECT: sending the CONNECT request for %s:%d " "to the remote proxy %pI (%s)", - forward->target_host, forward->target_port, + connect_info->target_host, connect_info->target_port, backend->addr, backend->hostname); /* Create the CONNECT request */ nbytes = apr_snprintf(buffer, sizeof(buffer), "CONNECT %s:%d HTTP/1.0" CRLF, - forward->target_host, forward->target_port); + connect_info->target_host, connect_info->target_port); /* Add proxy authorization from the configuration, or initial * request if necessary */ - if (forward->proxy_auth != NULL) { + if (connect_info->proxy_auth != NULL) { nbytes += apr_snprintf(buffer + nbytes, sizeof(buffer) - nbytes, "Proxy-Authorization: %s" CRLF, - forward->proxy_auth); + connect_info->proxy_auth); } /* Set a reasonable agent and send everything */ nbytes += apr_snprintf(buffer + nbytes, sizeof(buffer) - nbytes, @@ -3621,7 +3613,7 @@ static apr_status_t send_http_connect(pr char code_str[4]; ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00949) - "send_http_connect: response from the forward proxy: %s", + "send_http_connect: response from the remote proxy: %s", buffer); /* Extract the returned code */ @@ -3632,7 +3624,7 @@ static apr_status_t send_http_connect(pr } else { ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00950) - "send_http_connect: the forward proxy returned code is '%s'", + "send_http_connect: the remote proxy returned code is '%s'", code_str); status = APR_INCOMPLETE; } @@ -3796,7 +3788,7 @@ PROXY_DECLARE(int) ap_proxy_connect_back { apr_status_t rv; int loglevel; - forward_info *forward = conn->forward; + remote_connect_info *connect_info = conn->forward; apr_sockaddr_t *backend_addr; /* the local address to use for the outgoing connection */ apr_sockaddr_t *local_addr; @@ -3997,27 +3989,25 @@ PROXY_DECLARE(int) ap_proxy_connect_back conn->sock = newsock; - if (forward && forward->use_http_connect) { - /* - * For HTTP CONNECT we need to prepend CONNECT request before - * sending our actual HTTPS requests. - */ - { - rv = send_http_connect(conn, s); - /* If an error occurred, loop round and try again */ - if (rv != APR_SUCCESS) { - conn->sock = NULL; - apr_socket_close(newsock); - loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; - ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(00958) - "%s: attempt to connect to %s:%hu " - "via http CONNECT through %pI (%s:%hu) failed", - proxy_function, - forward->target_host, forward->target_port, - backend_addr, conn->hostname, conn->port); - backend_addr = backend_addr->next; - continue; - } + /* + * For HTTP CONNECT we need to prepend CONNECT request before + * sending our actual HTTPS requests. + */ + if (connect_info) { + rv = send_http_connect(conn, s); + /* If an error occurred, loop round and try again */ + if (rv != APR_SUCCESS) { + conn->sock = NULL; + apr_socket_close(newsock); + loglevel = backend_addr->next ? APLOG_DEBUG : APLOG_ERR; + ap_log_error(APLOG_MARK, loglevel, rv, s, APLOGNO(00958) + "%s: attempt to connect to %s:%hu " + "via http CONNECT through %pI (%s:%hu) failed", + proxy_function, + connect_info->target_host, connect_info->target_port, + backend_addr, conn->hostname, conn->port); + backend_addr = backend_addr->next; + continue; } } } @@ -4058,13 +4048,13 @@ PROXY_DECLARE(int) ap_proxy_connect_back * e.g. for a timeout or bad status. We should respect this and should * not continue with a connection via this worker even if we got one. */ - if (rv == APR_SUCCESS) { - socket_cleanup(conn); - } rv = APR_EINVAL; } - - return rv == APR_SUCCESS ? OK : DECLINED; + if (rv != APR_SUCCESS) { + socket_cleanup(conn); + return DECLINED; + } + return OK; } static apr_status_t connection_shutdown(void *theconn) @@ -4101,9 +4091,9 @@ static int proxy_connection_create(const ap_conf_vector_t *per_dir_config = (r) ? r->per_dir_config : conn->worker->section_config; apr_sockaddr_t *backend_addr = conn->addr; - int rc; apr_interval_time_t current_timeout; apr_bucket_alloc_t *bucket_alloc; + int rc = OK; if (conn->connection) { if (conn->is_ssl) { @@ -4115,15 +4105,15 @@ static int proxy_connection_create(const return OK; } - bucket_alloc = apr_bucket_alloc_create(conn->scpool); - conn->tmp_bb = apr_brigade_create(conn->scpool, bucket_alloc); - /* - * The socket is now open, create a new backend server connection - */ - conn->connection = ap_run_create_connection(conn->scpool, s, conn->sock, - 0, NULL, - bucket_alloc); - + if (conn->sock) { + bucket_alloc = apr_bucket_alloc_create(conn->scpool); + conn->tmp_bb = apr_brigade_create(conn->scpool, bucket_alloc); + /* + * The socket is now open, create a new backend server connection + */ + conn->connection = ap_run_create_connection(conn->scpool, s, conn->sock, + 0, NULL, bucket_alloc); + } if (!conn->connection) { /* * the peer reset the connection already; ap_run_create_connection() @@ -4131,11 +4121,11 @@ static int proxy_connection_create(const */ ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(00960) "%s: an error occurred creating a " - "new connection to %pI (%s)", proxy_function, - backend_addr, conn->hostname); - /* XXX: Will be closed when proxy_conn is closed */ - socket_cleanup(conn); - return HTTP_INTERNAL_SERVER_ERROR; + "new connection to %pI (%s)%s", + proxy_function, backend_addr, conn->hostname, + conn->sock ? "" : " (not connected)"); + rc = HTTP_INTERNAL_SERVER_ERROR; + goto cleanup; } /* For ssl connection to backend */ @@ -4145,7 +4135,8 @@ static int proxy_connection_create(const s, APLOGNO(00961) "%s: failed to enable ssl support " "for %pI (%s)", proxy_function, backend_addr, conn->hostname); - return HTTP_INTERNAL_SERVER_ERROR; + rc = HTTP_INTERNAL_SERVER_ERROR; + goto cleanup; } if (conn->ssl_hostname) { /* Set a note on the connection about what CN is requested, @@ -4180,7 +4171,7 @@ static int proxy_connection_create(const ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(00963) "%s: pre_connection setup failed (%d)", proxy_function, rc); - return rc; + goto cleanup; } apr_socket_timeout_set(conn->sock, current_timeout); @@ -4190,6 +4181,10 @@ static int proxy_connection_create(const apr_pool_pre_cleanup_register(conn->scpool, conn, connection_shutdown); return OK; + +cleanup: + socket_cleanup(conn); + return rc; } PROXY_DECLARE(int) ap_proxy_connection_create_ex(const char *proxy_function, diff -pruN 2.4.63-1/modules/session/mod_session_dbd.c 2.4.64-1/modules/session/mod_session_dbd.c --- 2.4.63-1/modules/session/mod_session_dbd.c 2019-08-09 10:42:24.000000000 +0000 +++ 2.4.64-1/modules/session/mod_session_dbd.c 2025-06-10 11:00:37.000000000 +0000 @@ -537,7 +537,7 @@ static const char *check_string(cmd_parm { if (APR_SUCCESS != ap_cookie_check_string(string)) { return apr_pstrcat(cmd->pool, cmd->directive->directive, - " cannot be empty, or contain '=', ';' or '&'.", + " cannot contain '=', ';' or '&'.", NULL); } return NULL; @@ -571,6 +571,11 @@ static const char *set_cookie_name(cmd_p char *line = apr_pstrdup(cmd->pool, args); session_dbd_dir_conf *conf = (session_dbd_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); + if (!cookie) { + return apr_pstrcat(cmd->pool, cmd->directive->directive, + " requires at least one argument!", + NULL); + } conf->name = cookie; conf->name_set = 1; while (apr_isspace(*last)) { @@ -586,6 +591,11 @@ static const char *set_cookie_name2(cmd_ char *line = apr_pstrdup(cmd->pool, args); session_dbd_dir_conf *conf = (session_dbd_dir_conf *) config; char *cookie = apr_strtok(line, " \t", &last); + if (!cookie) { + return apr_pstrcat(cmd->pool, cmd->directive->directive, + " requires at least one argument!", + NULL); + } conf->name2 = cookie; conf->name2_set = 1; while (apr_isspace(*last)) { diff -pruN 2.4.63-1/modules/ssl/ssl_engine_config.c 2.4.64-1/modules/ssl/ssl_engine_config.c --- 2.4.63-1/modules/ssl/ssl_engine_config.c 2024-03-27 09:26:41.000000000 +0000 +++ 2.4.64-1/modules/ssl/ssl_engine_config.c 2025-07-07 12:09:30.000000000 +0000 @@ -741,11 +741,13 @@ const char *ssl_cmd_SSLEngine(cmd_parms return NULL; } else if (!strcasecmp(arg, "Optional")) { - sc->enabled = SSL_ENABLED_OPTIONAL; + sc->enabled = SSL_ENABLED_FALSE; + ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, cmd->server, APLOGNO(10510) + "'SSLEngine optional' is no longer supported"); return NULL; } - return "Argument must be On, Off, or Optional"; + return "Argument must be On or Off"; } const char *ssl_cmd_SSLFIPS(cmd_parms *cmd, void *dcfg, int flag) diff -pruN 2.4.63-1/modules/ssl/ssl_engine_init.c 2.4.64-1/modules/ssl/ssl_engine_init.c --- 2.4.63-1/modules/ssl/ssl_engine_init.c 2025-01-20 10:27:52.000000000 +0000 +++ 2.4.64-1/modules/ssl/ssl_engine_init.c 2025-07-07 12:09:30.000000000 +0000 @@ -427,7 +427,7 @@ apr_status_t ssl_init_Module(apr_pool_t &ssl_module); sc = mySrvConfig(s); - if (sc->enabled == SSL_ENABLED_TRUE || sc->enabled == SSL_ENABLED_OPTIONAL) { + if (sc->enabled == SSL_ENABLED_TRUE) { if ((rv = ssl_run_init_server(s, p, 0, sc->server->ssl_ctx)) != APR_SUCCESS) { return rv; } @@ -618,7 +618,12 @@ static apr_status_t ssl_init_ctx_protoco int protocol = mctx->protocol; SSLSrvConfigRec *sc = mySrvConfig(s); #if OPENSSL_VERSION_NUMBER >= 0x10100000L - int prot; + /* default is highest supported version, will be overridden below */ +#if SSL_HAVE_PROTOCOL_TLSV1_3 + int prot = TLS1_3_VERSION; +#else + int prot = TLS1_2_VERSION; +#endif #endif /* @@ -2121,9 +2126,9 @@ apr_status_t ssl_init_ConfigureServer(se &ssl_module); apr_status_t rv; - /* Initialize the server if SSL is enabled or optional. + /* Initialize the server if SSL is enabled. */ - if ((sc->enabled == SSL_ENABLED_TRUE) || (sc->enabled == SSL_ENABLED_OPTIONAL)) { + if (sc->enabled == SSL_ENABLED_TRUE) { ap_log_error(APLOG_MARK, APLOG_INFO, 0, s, APLOGNO(01914) "Configuring server %s for SSL protocol", sc->vhost_id); if ((rv = ssl_init_server_ctx(s, p, ptemp, sc, pphrases)) diff -pruN 2.4.63-1/modules/ssl/ssl_engine_kernel.c 2.4.64-1/modules/ssl/ssl_engine_kernel.c --- 2.4.63-1/modules/ssl/ssl_engine_kernel.c 2024-07-04 15:58:17.000000000 +0000 +++ 2.4.64-1/modules/ssl/ssl_engine_kernel.c 2025-07-07 12:09:30.000000000 +0000 @@ -38,59 +38,6 @@ static void ssl_configure_env(request_re static int ssl_find_vhost(void *servername, conn_rec *c, server_rec *s); #endif -#define SWITCH_STATUS_LINE "HTTP/1.1 101 Switching Protocols" -#define UPGRADE_HEADER "Upgrade: TLS/1.0, HTTP/1.1" -#define CONNECTION_HEADER "Connection: Upgrade" - -/* Perform an upgrade-to-TLS for the given request, per RFC 2817. */ -static apr_status_t upgrade_connection(request_rec *r) -{ - struct conn_rec *conn = r->connection; - apr_bucket_brigade *bb; - SSLConnRec *sslconn; - apr_status_t rv; - SSL *ssl; - - ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r, APLOGNO(02028) - "upgrading connection to TLS"); - - bb = apr_brigade_create(r->pool, conn->bucket_alloc); - - rv = ap_fputs(conn->output_filters, bb, SWITCH_STATUS_LINE CRLF - UPGRADE_HEADER CRLF CONNECTION_HEADER CRLF CRLF); - if (rv == APR_SUCCESS) { - APR_BRIGADE_INSERT_TAIL(bb, - apr_bucket_flush_create(conn->bucket_alloc)); - rv = ap_pass_brigade(conn->output_filters, bb); - } - - if (rv) { - ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02029) - "failed to send 101 interim response for connection " - "upgrade"); - return rv; - } - - ssl_init_ssl_connection(conn, r); - - sslconn = myConnConfig(conn); - ssl = sslconn->ssl; - - /* Perform initial SSL handshake. */ - SSL_set_accept_state(ssl); - SSL_do_handshake(ssl); - - if (!SSL_is_init_finished(ssl)) { - ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02030) - "TLS upgrade handshake failed"); - ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server); - - return APR_ECONNABORTED; - } - - return APR_SUCCESS; -} - /* Perform a speculative (and non-blocking) read from the connection * filters for the given request, to determine whether there is any * pending data to read. Return non-zero if there is, else zero. */ @@ -270,40 +217,17 @@ int ssl_hook_ReadReq(request_rec *r) { SSLSrvConfigRec *sc = mySrvConfig(r->server); SSLConnRec *sslconn; - const char *upgrade; #ifdef HAVE_TLSEXT const char *servername; #endif SSL *ssl; - /* Perform TLS upgrade here if "SSLEngine optional" is configured, - * SSL is not already set up for this connection, and the client - * has sent a suitable Upgrade header. */ - if (sc->enabled == SSL_ENABLED_OPTIONAL && !myConnConfig(r->connection) - && (upgrade = apr_table_get(r->headers_in, "Upgrade")) != NULL - && ap_find_token(r->pool, upgrade, "TLS/1.0")) { - if (upgrade_connection(r)) { - return AP_FILTER_ERROR; - } - } - /* If we are on a slave connection, we do not expect to have an SSLConnRec, * but our master connection might. */ sslconn = myConnConfig(r->connection); if (!(sslconn && sslconn->ssl) && r->connection->master) { sslconn = myConnConfig(r->connection->master); } - - /* If "SSLEngine optional" is configured, this is not an SSL - * connection, and this isn't a subrequest, send an Upgrade - * response header. Note this must happen before map_to_storage - * and OPTIONS * request processing is completed. - */ - if (sc->enabled == SSL_ENABLED_OPTIONAL && !(sslconn && sslconn->ssl) - && !r->main) { - apr_table_setn(r->headers_out, "Upgrade", "TLS/1.0, HTTP/1.1"); - apr_table_mergen(r->headers_out, "Connection", "upgrade"); - } if (!sslconn) { return DECLINED; @@ -371,19 +295,6 @@ int ssl_hook_ReadReq(request_rec *r) " provided in HTTP request", servername); return HTTP_BAD_REQUEST; } - if (r->server != handshakeserver - && !ssl_server_compatible(sslconn->server, r->server)) { - /* - * The request does not select the virtual host that was - * selected by the SNI and its SSL parameters are different - */ - - ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02032) - "Hostname %s provided via SNI and hostname %s provided" - " via HTTP have no compatible SSL setup", - servername, r->hostname); - return HTTP_MISDIRECTED_REQUEST; - } } else if (((sc->strict_sni_vhost_check == SSL_ENABLED_TRUE) || hssc->strict_sni_vhost_check == SSL_ENABLED_TRUE) @@ -404,6 +315,21 @@ int ssl_hook_ReadReq(request_rec *r) "which is required to access this server.
    \n"); return HTTP_FORBIDDEN; } + if (r->server != handshakeserver + && !ssl_server_compatible(sslconn->server, r->server)) { + /* + * The request does not select the virtual host that was + * selected for handshaking and its SSL parameters are different + */ + + ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02032) + "Hostname %s %s and hostname %s provided" + " via HTTP have no compatible SSL setup", + servername ? servername : handshakeserver->server_hostname, + servername ? "provided via SNI" : "(default host as no SNI was provided)", + r->hostname); + return HTTP_MISDIRECTED_REQUEST; + } } #endif modssl_set_app_data2(ssl, r); @@ -1236,16 +1162,6 @@ int ssl_hook_Access(request_rec *r) * Support for SSLRequireSSL directive */ if (dc->bSSLRequired && !ssl) { - if ((sc->enabled == SSL_ENABLED_OPTIONAL) && !r->connection->master) { - /* This vhost was configured for optional SSL, just tell the - * client that we need to upgrade. - */ - apr_table_setn(r->err_headers_out, "Upgrade", "TLS/1.0, HTTP/1.1"); - apr_table_setn(r->err_headers_out, "Connection", "Upgrade"); - - return HTTP_UPGRADE_REQUIRED; - } - ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02219) "access to %s failed, reason: %s", r->filename, "SSL connection required"); diff -pruN 2.4.63-1/modules/ssl/ssl_engine_vars.c 2.4.64-1/modules/ssl/ssl_engine_vars.c --- 2.4.63-1/modules/ssl/ssl_engine_vars.c 2022-02-24 20:37:08.000000000 +0000 +++ 2.4.64-1/modules/ssl/ssl_engine_vars.c 2025-07-07 12:03:42.000000000 +0000 @@ -1208,8 +1208,9 @@ static const char *ssl_var_log_handler_c result = "-"; else if (strEQ(a, "errstr")) result = (char *)sslconn->verify_error; - if (result != NULL && result[0] == NUL) - result = NULL; + if (result) { + result = *result ? ap_escape_logitem(r->pool, result) : NULL; + } return result; } @@ -1222,8 +1223,9 @@ static const char *ssl_var_log_handler_x char *result; result = ssl_var_lookup(r->pool, r->server, r->connection, r, a); - if (result != NULL && result[0] == NUL) - result = NULL; + if (result) { + result = *result ? ap_escape_logitem(r->pool, result) : NULL; + } return result; } diff -pruN 2.4.63-1/modules/ssl/ssl_private.h 2.4.64-1/modules/ssl/ssl_private.h --- 2.4.63-1/modules/ssl/ssl_private.h 2024-07-11 07:28:53.000000000 +0000 +++ 2.4.64-1/modules/ssl/ssl_private.h 2025-07-07 12:09:30.000000000 +0000 @@ -290,8 +290,16 @@ void free_bio_methods(void); #define X509_get_notAfter X509_getm_notAfter #endif -#if OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined(LIBRESSL_VERSION_NUMBER) -#define HAVE_OPENSSL_KEYLOG +/* The SSL_CTX_set_keylog_callback() API is present in 1.1.1+. + * + * OpenSSL 3.5+ also provides optional native handling of + * $SSLKEYLOGFILE inside libssl, which duplicates the mod_ssl support. + * The mod_ssl support is hence disabled for 3.5+, unless that OpenSSL + * feature is itself disabled (and OPENSSL_NO_SSLKEYLOG is defined). + */ +#if OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined(LIBRESSL_VERSION_NUMBER) \ + && (OPENSSL_VERSION_NUMBER <= 0x30500000L || defined(OPENSSL_NO_SSLKEYLOG)) +#define HAVE_OPENSSL_KEYLOG #endif #ifdef HAVE_FIPS @@ -518,7 +526,6 @@ typedef enum { SSL_ENABLED_UNSET = UNSET, SSL_ENABLED_FALSE = 0, SSL_ENABLED_TRUE = 1, - SSL_ENABLED_OPTIONAL = 3 } ssl_enabled_t; /** diff -pruN 2.4.63-1/server/core.c 2.4.64-1/server/core.c --- 2.4.63-1/server/core.c 2024-09-27 13:08:17.000000000 +0000 +++ 2.4.64-1/server/core.c 2025-07-07 12:02:22.000000000 +0000 @@ -1838,8 +1838,10 @@ static const char *set_override(cmd_parm } else if (!ap_cstr_casecmp(k, "Options")) { d->override |= OR_OPTIONS; - if (v) - set_allow_opts(cmd, &(d->override_opts), v); + if (v) { + if ((err = set_allow_opts(cmd, &(d->override_opts), v)) != NULL) + return err; + } else d->override_opts = OPT_ALL; } @@ -5513,9 +5515,13 @@ static apr_status_t core_insert_network_ } static apr_status_t core_dirwalk_stat(apr_finfo_t *finfo, request_rec *r, - apr_int32_t wanted) + apr_int32_t wanted) { - return apr_stat(finfo, r->filename, wanted, r->pool); + apr_status_t rv = ap_stat_check(r->filename, r->pool); + if (rv == APR_SUCCESS) { + rv = apr_stat(finfo, r->filename, wanted, r->pool); + } + return rv; } static void core_dump_config(apr_pool_t *p, server_rec *s) @@ -5678,7 +5684,7 @@ static apr_status_t check_unc(const char *s++ = '/'; ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, - "ap_filepath_merge: check converted path %s allowed %d", + "check_unc: check converted path %s allowed %d", teststring, sconf->unc_list ? sconf->unc_list->nelts : 0); @@ -5690,19 +5696,19 @@ static apr_status_t check_unc(const char !ap_cstr_casecmp(uri.hostinfo, configured_unc))) { rv = APR_SUCCESS; ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, - "ap_filepath_merge: match %s %s", + "check_unc: match %s %s", uri.hostinfo, configured_unc); break; } else { ap_log_error(APLOG_MARK, APLOG_TRACE4, 0, ap_server_conf, - "ap_filepath_merge: no match %s %s", uri.hostinfo, + "check_unc: no match %s %s", uri.hostinfo, configured_unc); } } if (rv != APR_SUCCESS) { ap_log_error(APLOG_MARK, APLOG_ERR, rv, ap_server_conf, APLOGNO(10504) - "ap_filepath_merge: UNC path %s not allowed by UNCList", teststring); + "check_unc: UNC path %s not allowed by UNCList", teststring); } return rv; @@ -5732,6 +5738,17 @@ AP_DECLARE(apr_status_t) ap_filepath_mer #endif } +#ifdef WIN32 +AP_DECLARE(apr_status_t) ap_stat_check(const char *path, apr_pool_t *p) +{ + return check_unc(path, p); +} +#else +AP_DECLARE(apr_status_t) ap_stat_check(const char *path, apr_pool_t *p) +{ + return APR_SUCCESS; +} +#endif static void register_hooks(apr_pool_t *p) { diff -pruN 2.4.63-1/server/listen.c 2.4.64-1/server/listen.c --- 2.4.63-1/server/listen.c 2024-06-24 12:30:01.000000000 +0000 +++ 2.4.64-1/server/listen.c 2025-06-04 09:41:25.000000000 +0000 @@ -60,9 +60,12 @@ static int ap_listenbacklog; static int ap_listencbratio; static int send_buffer_size; static int receive_buffer_size; +#ifdef HAVE_SYSTEMD +static int use_systemd = -1; +#endif /* TODO: make_sock is just begging and screaming for APR abstraction */ -static apr_status_t make_sock(apr_pool_t *p, ap_listen_rec *server) +static apr_status_t make_sock(apr_pool_t *p, ap_listen_rec *server, int do_bind_listen) { apr_socket_t *s = server->sd; int one = 1; @@ -95,20 +98,6 @@ static apr_status_t make_sock(apr_pool_t return stat; } -#if APR_HAVE_IPV6 - if (server->bind_addr->family == APR_INET6) { - stat = apr_socket_opt_set(s, APR_IPV6_V6ONLY, v6only_setting); - if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { - ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00069) - "make_sock: for address %pI, apr_socket_opt_set: " - "(IPV6_V6ONLY)", - server->bind_addr); - apr_socket_close(s); - return stat; - } - } -#endif - /* * To send data over high bandwidth-delay connections at full * speed we must force the TCP window to open wide enough to keep the @@ -170,21 +159,37 @@ static apr_status_t make_sock(apr_pool_t } #endif - if ((stat = apr_socket_bind(s, server->bind_addr)) != APR_SUCCESS) { - ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, stat, p, APLOGNO(00072) - "make_sock: could not bind to address %pI", - server->bind_addr); - apr_socket_close(s); - return stat; - } + if (do_bind_listen) { +#if APR_HAVE_IPV6 + if (server->bind_addr->family == APR_INET6) { + stat = apr_socket_opt_set(s, APR_IPV6_V6ONLY, v6only_setting); + if (stat != APR_SUCCESS && stat != APR_ENOTIMPL) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, stat, p, APLOGNO(00069) + "make_sock: for address %pI, apr_socket_opt_set: " + "(IPV6_V6ONLY)", + server->bind_addr); + apr_socket_close(s); + return stat; + } + } +#endif - if ((stat = apr_socket_listen(s, ap_listenbacklog)) != APR_SUCCESS) { - ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_ERR, stat, p, APLOGNO(00073) - "make_sock: unable to listen for connections " - "on address %pI", - server->bind_addr); - apr_socket_close(s); - return stat; + if ((stat = apr_socket_bind(s, server->bind_addr)) != APR_SUCCESS) { + ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_CRIT, stat, p, APLOGNO(00072) + "make_sock: could not bind to address %pI", + server->bind_addr); + apr_socket_close(s); + return stat; + } + + if ((stat = apr_socket_listen(s, ap_listenbacklog)) != APR_SUCCESS) { + ap_log_perror(APLOG_MARK, APLOG_STARTUP|APLOG_ERR, stat, p, APLOGNO(00073) + "make_sock: unable to listen for connections " + "on address %pI", + server->bind_addr); + apr_socket_close(s); + return stat; + } } #ifdef WIN32 @@ -278,6 +283,101 @@ static apr_status_t close_listeners_on_e return APR_SUCCESS; } +#ifdef HAVE_SYSTEMD + +static apr_status_t alloc_systemd_listener(process_rec * process, + int fd, const char *proto, + ap_listen_rec **out_rec) +{ + apr_status_t rv; + struct sockaddr sa; + socklen_t len = sizeof(struct sockaddr); + apr_os_sock_info_t si; + ap_listen_rec *rec; + *out_rec = NULL; + + memset(&si, 0, sizeof(si)); + + rv = getsockname(fd, &sa, &len); + + if (rv != 0) { + rv = apr_get_netos_error(); + ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, process->pool, APLOGNO(02489) + "getsockname on %d failed.", fd); + return rv; + } + + si.os_sock = &fd; + si.family = sa.sa_family; + si.local = &sa; + si.type = SOCK_STREAM; + si.protocol = APR_PROTO_TCP; + + rec = apr_pcalloc(process->pool, sizeof(ap_listen_rec)); + + + rv = apr_os_sock_make(&rec->sd, &si, process->pool); + if (rv != APR_SUCCESS) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, process->pool, APLOGNO(02490) + "apr_os_sock_make on %d failed.", fd); + return rv; + } + + rv = apr_socket_addr_get(&rec->bind_addr, APR_LOCAL, rec->sd); + if (rv != APR_SUCCESS) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, rv, process->pool, APLOGNO(02491) + "apr_socket_addr_get on %d failed.", fd); + return rv; + } + + rec->protocol = apr_pstrdup(process->pool, proto); + + *out_rec = rec; + + return make_sock(process->pool, rec, 0); +} + +static const char *set_systemd_listener(process_rec *process, apr_port_t port, + const char *proto) +{ + ap_listen_rec *last, *new; + apr_status_t rv; + APR_OPTIONAL_FN_TYPE(ap_find_systemd_socket) *find_systemd_socket; + int fd; + + find_systemd_socket = APR_RETRIEVE_OPTIONAL_FN(ap_find_systemd_socket); + + if (!find_systemd_socket) + return "Systemd socket activation is used, but mod_systemd is probably " + "not loaded"; + + fd = find_systemd_socket(process, port); + if (fd < 0) { + return "Systemd socket activation is used, but this port is not " + "configured in systemd"; + } + + last = ap_listeners; + while (last && last->next) { + last = last->next; + } + + rv = alloc_systemd_listener(process, fd, proto, &new); + if (rv != APR_SUCCESS) { + return "Failed to setup socket passed by systemd using socket activation"; + } + + if (last == NULL) { + ap_listeners = new; + } + else { + last->next = new; + } + + return NULL; +} +#endif /* HAVE_SYSTEMD */ + /* Returns non-zero if socket address SA matches hostname, port and * scope_id. p is used for temporary allocations. */ static int match_address(const apr_sockaddr_t *sa, @@ -529,7 +629,7 @@ static int open_listeners(apr_pool_t *po } } #endif - if (make_sock(pool, lr) == APR_SUCCESS) { + if (make_sock(pool, lr, 1) == APR_SUCCESS) { ++num_open; } else { @@ -615,6 +715,9 @@ AP_DECLARE(int) ap_setup_listeners(serve int num_listeners = 0; const char* proto; int found; +#ifdef HAVE_SYSTEMD + APR_OPTIONAL_FN_TYPE(ap_systemd_listen_fds) *systemd_listen_fds; +#endif for (ls = s; ls; ls = ls->next) { proto = ap_get_server_protocol(ls); @@ -641,8 +744,32 @@ AP_DECLARE(int) ap_setup_listeners(serve } } - if (open_listeners(s->process->pool)) { - return 0; + +#ifdef HAVE_SYSTEMD + if (use_systemd) { + const char *userdata_key = "ap_open_systemd_listeners"; + void *data; + /* clear the enviroment on our second run + * so that none of our future children get confused. + */ + apr_pool_userdata_get(&data, userdata_key, s->process->pool); + if (!data) { + apr_pool_userdata_set((const void *)1, userdata_key, + apr_pool_cleanup_null, s->process->pool); + } + else { + systemd_listen_fds = APR_RETRIEVE_OPTIONAL_FN(ap_systemd_listen_fds); + if (systemd_listen_fds != NULL) { + systemd_listen_fds(1); + } + } + } + else +#endif + { + if (open_listeners(s->process->pool)) { + return 0; + } } for (lr = ap_listeners; lr; lr = lr->next) { @@ -715,24 +842,36 @@ AP_DECLARE(apr_status_t) ap_duplicate_li char *hostname; apr_port_t port; apr_sockaddr_t *sa; - duplr = apr_palloc(p, sizeof(ap_listen_rec)); - duplr->slave = NULL; - duplr->protocol = apr_pstrdup(p, lr->protocol); - hostname = apr_pstrdup(p, lr->bind_addr->hostname); - port = lr->bind_addr->port; - apr_sockaddr_info_get(&sa, hostname, APR_UNSPEC, port, 0, p); - duplr->bind_addr = sa; - duplr->next = NULL; - stat = apr_socket_create(&duplr->sd, duplr->bind_addr->family, - SOCK_STREAM, 0, p); - if (stat != APR_SUCCESS) { - ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, p, APLOGNO(02640) - "ap_duplicate_listeners: for address %pI, " - "cannot duplicate a new socket!", - duplr->bind_addr); - return stat; +#ifdef HAVE_SYSTEMD + if (use_systemd) { + int thesock; + apr_os_sock_get(&thesock, lr->sd); + if ((stat = alloc_systemd_listener(s->process, thesock, + lr->protocol, &duplr)) != APR_SUCCESS) { + return stat; + } + } + else +#endif + { + duplr = apr_palloc(p, sizeof(ap_listen_rec)); + duplr->slave = NULL; + duplr->protocol = apr_pstrdup(p, lr->protocol); + hostname = apr_pstrdup(p, lr->bind_addr->hostname); + port = lr->bind_addr->port; + apr_sockaddr_info_get(&sa, hostname, APR_UNSPEC, port, 0, p); + duplr->bind_addr = sa; + duplr->next = NULL; + if ((stat = apr_socket_create(&duplr->sd, duplr->bind_addr->family, + SOCK_STREAM, 0, p)) != APR_SUCCESS) { + ap_log_perror(APLOG_MARK, APLOG_CRIT, 0, p, APLOGNO(02640) + "ap_duplicate_socket: for address %pI, " + "cannot duplicate a new socket!", + duplr->bind_addr); + return stat; + } + make_sock(p, duplr, 1); } - make_sock(p, duplr); #if AP_NONBLOCK_WHEN_MULTI_LISTEN use_nonblock = (ap_listeners && ap_listeners->next); stat = apr_socket_opt_set(duplr->sd, APR_SO_NONBLOCK, use_nonblock); @@ -851,6 +990,9 @@ AP_DECLARE_NONSTD(const char *) ap_set_l apr_port_t port; apr_status_t rv; const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY); +#ifdef HAVE_SYSTEMD + APR_OPTIONAL_FN_TYPE(ap_systemd_listen_fds) *systemd_listen_fds; +#endif if (err != NULL) { return err; @@ -859,6 +1001,16 @@ AP_DECLARE_NONSTD(const char *) ap_set_l if (argc < 1 || argc > 2) { return "Listen requires 1 or 2 arguments."; } +#ifdef HAVE_SYSTEMD + if (use_systemd == -1) { + systemd_listen_fds = APR_RETRIEVE_OPTIONAL_FN(ap_systemd_listen_fds); + if (systemd_listen_fds != NULL) { + use_systemd = systemd_listen_fds(0) > 0; + } else { + use_systemd = 0; + } + } +#endif rv = apr_parse_addr_port(&host, &scope_id, &port, argv[0], cmd->pool); if (rv != APR_SUCCESS) { @@ -894,6 +1046,12 @@ AP_DECLARE_NONSTD(const char *) ap_set_l ap_str_tolower(proto); } +#ifdef HAVE_SYSTEMD + if (use_systemd) { + return set_systemd_listener(cmd->server->process, port, proto); + } +#endif + return alloc_listener(cmd->server->process, host, port, proto, scope_id, NULL, cmd->temp_pool); } diff -pruN 2.4.63-1/server/scoreboard.c 2.4.64-1/server/scoreboard.c --- 2.4.63-1/server/scoreboard.c 2024-02-02 11:50:07.000000000 +0000 +++ 2.4.64-1/server/scoreboard.c 2025-06-04 07:37:32.000000000 +0000 @@ -653,6 +653,22 @@ AP_DECLARE(void) ap_time_process_request } } +AP_DECLARE(void) ap_set_time_process_request(ap_sb_handle_t* const sbh, + const apr_time_t timebeg,const apr_time_t timeend) +{ + worker_score *ws; + if (!sbh || sbh->child_num < 0) + return; + + ws = &ap_scoreboard_image->servers[sbh->child_num][sbh->thread_num]; + + ws->start_time = timebeg; + ws->stop_time = ws->last_used = timeend; + + if (ap_extended_status) + ws->duration += timeend - timebeg; +} + AP_DECLARE(int) ap_update_global_status(void) { #ifdef HAVE_TIMES diff -pruN 2.4.63-1/server/util_expr_eval.c 2.4.64-1/server/util_expr_eval.c --- 2.4.63-1/server/util_expr_eval.c 2023-07-17 20:33:05.000000000 +0000 +++ 2.4.64-1/server/util_expr_eval.c 2025-07-07 12:02:22.000000000 +0000 @@ -1147,10 +1147,21 @@ static const char *file_func(ap_expr_eva return buf; } +static apr_status_t stat_check(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) +{ + apr_status_t rv = APR_SUCCESS; + if (APR_SUCCESS != (rv = ap_stat_check(arg, ctx->p))) { + *ctx->err = apr_psprintf(ctx->p, "stat of %s not allowed", arg); + } + return rv; +} static const char *filesize_func(ap_expr_eval_ctx_t *ctx, const void *data, char *arg) { apr_finfo_t sb; + if (APR_SUCCESS != stat_check(ctx, data, arg)) { + return ""; + } if (apr_stat(&sb, arg, APR_FINFO_MIN, ctx->p) == APR_SUCCESS && sb.filetype == APR_REG && sb.size > 0) return apr_psprintf(ctx->p, "%" APR_OFF_T_FMT, sb.size); @@ -1185,6 +1196,9 @@ static int op_file_min(ap_expr_eval_ctx_ { apr_finfo_t sb; const char *name = (const char *)data; + if (APR_SUCCESS != stat_check(ctx, data, arg)) { + return FALSE; + } if (apr_stat(&sb, arg, APR_FINFO_MIN, ctx->p) != APR_SUCCESS) return FALSE; switch (name[0]) { @@ -1206,6 +1220,9 @@ static int op_file_link(ap_expr_eval_ctx { #if !defined(OS2) apr_finfo_t sb; + if (APR_SUCCESS != stat_check(ctx, data, arg)) { + return FALSE; + } if (apr_stat(&sb, arg, APR_FINFO_MIN | APR_FINFO_LINK, ctx->p) == APR_SUCCESS && sb.filetype == APR_LNK) { return TRUE; @@ -1217,6 +1234,9 @@ static int op_file_link(ap_expr_eval_ctx static int op_file_xbit(ap_expr_eval_ctx_t *ctx, const void *data, const char *arg) { apr_finfo_t sb; + if (APR_SUCCESS != stat_check(ctx, data, arg)) { + return FALSE; + } if (apr_stat(&sb, arg, APR_FINFO_PROT| APR_FINFO_LINK, ctx->p) == APR_SUCCESS && (sb.protection & (APR_UEXECUTE | APR_GEXECUTE | APR_WEXECUTE))) { return TRUE; @@ -1253,6 +1273,9 @@ static int op_file_subr(ap_expr_eval_ctx request_rec *rsub, *r = ctx->r; if (!r) return FALSE; + if (APR_SUCCESS != stat_check(ctx, data, arg)) { + return FALSE; + } rsub = ap_sub_req_lookup_file(arg, r, NULL); if (rsub->status < 300 && /* double-check that file exists since default result is 200 */ diff -pruN 2.4.63-1/test/modules/http2/test_200_header_invalid.py 2.4.64-1/test/modules/http2/test_200_header_invalid.py --- 2.4.63-1/test/modules/http2/test_200_header_invalid.py 2025-01-19 19:32:14.000000000 +0000 +++ 2.4.64-1/test/modules/http2/test_200_header_invalid.py 2025-07-07 12:12:49.000000000 +0000 @@ -133,7 +133,7 @@ class TestInvalidHeaders: assert 431 == r.response["status"] # test header field count, LimitRequestFields (default 100) - # see #201: several headers with same name are mered and count only once + # see #201: several headers with same name are merged and counted def test_h2_200_12(self, env): url = env.mkurl("https", "cgi", "/") opt = [] @@ -143,7 +143,7 @@ class TestInvalidHeaders: r = env.curl_get(url, options=opt) assert r.response["status"] == 200 r = env.curl_get(url, options=(opt + ["-H", "y: 2"])) - assert r.response["status"] == 200 + assert r.response["status"] == 431 # test header field count, LimitRequestFields (default 100) # different header names count each diff -pruN 2.4.63-1/test/modules/md/conftest.py 2.4.64-1/test/modules/md/conftest.py --- 2.4.63-1/test/modules/md/conftest.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/conftest.py 2025-02-05 12:41:51.000000000 +0000 @@ -5,12 +5,11 @@ import pytest sys.path.append(os.path.join(os.path.dirname(__file__), '../..')) -from .md_conf import HttpdConf from .md_env import MDTestEnv from .md_acme import MDPebbleRunner, MDBoulderRunner -def pytest_report_header(config, startdir): +def pytest_report_header(config): env = MDTestEnv() return "mod_md: [apache: {aversion}({prefix}), mod_{ssl}, ACME server: {acme}]".format( prefix=env.prefix, diff -pruN 2.4.63-1/test/modules/md/pebble/pebble-eab.json.template 2.4.64-1/test/modules/md/pebble/pebble-eab.json.template --- 2.4.63-1/test/modules/md/pebble/pebble-eab.json.template 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/pebble/pebble-eab.json.template 2025-02-05 12:41:51.000000000 +0000 @@ -11,6 +11,16 @@ "externalAccountMACKeys": { "kid-1": "zWNDZM6eQGHWpSRTPal5eIUYFTu7EajVIoguysqZ9wG44nMEtx3MUAsUDkMTQ12W", "kid-2": "b10lLJs8l1GPIzsLP0s6pMt8O0XVGnfTaCeROxQM0BIt2XrJMDHJZBM5NuQmQJQH" - } + }, + "profiles": { + "default": { + "description": "The profile you know and love", + "validityPeriod": 7776000 + }, + "shortlived": { + "description": "A short-lived cert profile, without actual enforcement", + "validityPeriod": 518400 + } + } } } diff -pruN 2.4.63-1/test/modules/md/pebble/pebble.json.template 2.4.64-1/test/modules/md/pebble/pebble.json.template --- 2.4.63-1/test/modules/md/pebble/pebble.json.template 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/pebble/pebble.json.template 2025-02-05 12:41:51.000000000 +0000 @@ -7,6 +7,21 @@ "httpPort": ${http_port}, "tlsPort": ${https_port}, "ocspResponderURL": "", - "externalAccountBindingRequired": false + "externalAccountBindingRequired": false, + "domainBlocklist": ["blocked-domain.example"], + "retryAfter": { + "authz": 3, + "order": 5 + }, + "profiles": { + "default": { + "description": "The profile you know and love", + "validityPeriod": 7776000 + }, + "shortlived": { + "description": "A short-lived cert profile, without actual enforcement", + "validityPeriod": 518400 + } + } } } diff -pruN 2.4.63-1/test/modules/md/test_010_store_migrate.py 2.4.64-1/test/modules/md/test_010_store_migrate.py --- 2.4.63-1/test/modules/md/test_010_store_migrate.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_010_store_migrate.py 2025-02-05 12:41:51.000000000 +0000 @@ -13,7 +13,7 @@ class TestStoreMigrate: @pytest.fixture(autouse=True, scope='class') def _class_scope(self, env): MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # install old store, start a2md list, check files afterwards def test_md_010_000(self, env): diff -pruN 2.4.63-1/test/modules/md/test_202_acmev2_regs.py 2.4.64-1/test/modules/md/test_202_acmev2_regs.py --- 2.4.63-1/test/modules/md/test_202_acmev2_regs.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_202_acmev2_regs.py 2025-02-05 12:41:51.000000000 +0000 @@ -19,7 +19,7 @@ class TestAcmeAcc: env.check_acme() env.APACHE_CONF_SRC = "data/test_drive" MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env): diff -pruN 2.4.63-1/test/modules/md/test_300_conf_validate.py 2.4.64-1/test/modules/md/test_300_conf_validate.py --- 2.4.63-1/test/modules/md/test_300_conf_validate.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_300_conf_validate.py 2025-02-05 12:41:51.000000000 +0000 @@ -1,4 +1,5 @@ # test mod_md basic configurations +import os import re import time @@ -17,14 +18,19 @@ class TestConf: @pytest.fixture(autouse=True, scope='class') def _class_scope(self, env, acme): acme.start(config='default') + env.purge_store() + + @pytest.fixture(autouse=True, scope='function') + def _method_scope(self, env, request): env.clear_store() + self.test_domain = env.get_request_domain(request) # test case: just one MDomain definition def test_md_300_001(self, env): MDConf(env, text=""" MDomain not-forbidden.org www.not-forbidden.org mail.not-forbidden.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -38,7 +44,7 @@ class TestConf: MDomain not-forbidden.org www.not-forbidden.org mail.not-forbidden.org MDomain example2.org www.example2.org mail.example2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -84,7 +90,7 @@ class TestConf: MDomain example2.org www.example2.org www.example3.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -101,7 +107,7 @@ class TestConf: MDomain example2.org www.example2.org www.example3.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -121,7 +127,7 @@ class TestConf: ServerName www.example2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -144,7 +150,7 @@ class TestConf: ServerAlias example2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -186,7 +192,7 @@ class TestConf: """) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: MDomain, misses one ServerAlias def test_md_300_011a(self, env): @@ -216,7 +222,7 @@ class TestConf: ServerAlias test4.not-forbidden.org """ % env.https_port).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: MDomain does not match any vhost def test_md_300_012(self, env): @@ -227,7 +233,7 @@ class TestConf: ServerAlias test3.not-forbidden.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -246,18 +252,19 @@ class TestConf: ServerName test-b.example2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: global server name as managed domain name def test_md_300_014(self, env): MDConf(env, text=f""" MDomain www.{env.http_tld} www.example2.org + MDRenewMode manual ServerName www.example2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: valid pkey specification def test_md_300_015(self, env): @@ -267,8 +274,9 @@ class TestConf: MDPrivateKeys RSA 2048 MDPrivateKeys RSA 3072 MDPrivateKeys RSA 4096 + MDRenewMode manual """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: invalid pkey specification @pytest.mark.parametrize("line,exp_err_msg", [ @@ -355,7 +363,7 @@ class TestConf: ServerName secret.com """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # env.httpd_error_log.ignore_recent( lognos = [ @@ -431,7 +439,7 @@ class TestConf: """) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: configure more than 1 CA @pytest.mark.parametrize("cas, should_work", [ @@ -493,7 +501,7 @@ class TestConf: # It works, if we only match on ServerNames conf.add("MDMatchNames servernames") conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.httpd_error_log.ignore_recent( lognos=[ "AH10040", # ServerAlias not covered @@ -537,7 +545,7 @@ class TestConf: # It works, if we only match on ServerNames conf.add("MDMatchNames servernames") conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' time.sleep(2) assert env.apache_stop() == 0 # we need dns-01 challenge for the wildcard, which is not configured @@ -545,3 +553,45 @@ class TestConf: r'.*None of offered challenge types.*are supported.*' ]) + # test case: corrupted md/httpd.json, see #369 + def test_md_300_030(self, env): + domain = self.test_domain + domains = [domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("manual") + conf.add_md(domains) + conf.add_vhost(domain) + conf.install() + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + with open(os.path.join(env.store_dir, 'httpd.json'), 'w') as fd: + fd.write('garbage\n') + # self-repairing now + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + env.httpd_error_log.ignore_recent(matches=[ + r'.*failed to load JSON file.*' + ]) + + # test case: corrupted md/md_store.json, related to #369 + def test_md_300_031(self, env): + env.purge_store() + domain = self.test_domain + domains = [domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("manual") + conf.add_md(domains) + conf.add_vhost(domain) + conf.install() + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + with open(os.path.join(env.store_dir, 'md_store.json'), 'w') as fd: + fd.write('garbage\n') + # not self-repairing, failing to start + r = env.apache_restart() + env.purge_store() + assert r != 0, f'{env.apachectl_stderr}' + env.httpd_error_log.ignore_recent(matches=[ + r'.*failed to load JSON file.*', + r'.*init fs store at .*', + f'.* The central store file .* seems to exist, but its content are not readable.*', + ], lognos=[ + "AH10046" # setup store + ]) \ No newline at end of file diff -pruN 2.4.63-1/test/modules/md/test_310_conf_store.py 2.4.64-1/test/modules/md/test_310_conf_store.py --- 2.4.63-1/test/modules/md/test_310_conf_store.py 2021-12-25 19:14:30.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_310_conf_store.py 2025-02-05 12:41:51.000000000 +0000 @@ -30,7 +30,7 @@ class TestConf: # test case: no md definitions in config def test_md_310_001(self, env): MDConf(env, text="").install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' r = env.a2md(["list"]) assert 0 == len(r.json["output"]) @@ -45,7 +45,7 @@ class TestConf: ]) def test_md_310_100(self, env, confline, dns_lists, md_count): MDConf(env, text=confline).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' for i in range(0, len(dns_lists)): env.check_md(dns_lists[i], state=1) @@ -54,13 +54,13 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org MDomain testdomain2.org www.testdomain2.org mail.testdomain2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) env.check_md(["testdomain2.org", "www.testdomain2.org", "mail.testdomain2.org"], state=1) @@ -70,7 +70,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) # test case: add new md definition with acme url, acme protocol, acme agreement @@ -82,7 +82,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """, local_ca=False).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' name = "testdomain.org" env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, ca="http://acme.test.org:4000/directory", protocol="ACME", @@ -94,7 +94,7 @@ class TestConf: MDConf(env, local_ca=False, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, ca="https://acme-v02.api.letsencrypt.org/directory", protocol="ACME") MDConf(env, local_ca=False, text=""" @@ -104,7 +104,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, ca="http://acme.test.org:4000/directory", protocol="ACME", agreement="http://acme.test.org:4000/terms/v1") @@ -114,7 +114,7 @@ class TestConf: MDConf(env, admin="admin@testdomain.org", text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' name = "testdomain.org" env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, contacts=["mailto:admin@testdomain.org"]) @@ -126,7 +126,7 @@ class TestConf: MDConf(env, admin="admin@testdomain.org", text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, contacts=["mailto:admin@testdomain.org"]) @@ -148,7 +148,7 @@ class TestConf: ServerAdmin mailto:admin@testdomain2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' name1 = "testdomain.org" name2 = "testdomain2.org" env.check_md([name1, "www." + name1, "mail." + name1], state=1, contacts=["mailto:admin@" + name1]) @@ -159,7 +159,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org WWW.testdomain.org MAIL.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) # test case: default drive mode - auto @@ -167,7 +167,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 1 # test case: drive mode manual @@ -176,7 +176,7 @@ class TestConf: MDRenewMode manual MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 0 # test case: drive mode auto @@ -185,7 +185,7 @@ class TestConf: MDRenewMode auto MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 1 # test case: drive mode always @@ -194,7 +194,7 @@ class TestConf: MDRenewMode always MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 2 # test case: renew window - 14 days @@ -203,7 +203,7 @@ class TestConf: MDRenewWindow 14d MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-window'] == '14d' # test case: renew window - 10 percent @@ -212,7 +212,7 @@ class TestConf: MDRenewWindow 10% MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-window'] == '10%' # test case: ca challenge type - http-01 @@ -221,7 +221,7 @@ class TestConf: MDCAChallenges http-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['http-01'] # test case: ca challenge type - http-01 @@ -230,7 +230,7 @@ class TestConf: MDCAChallenges tls-alpn-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['tls-alpn-01'] # test case: ca challenge type - all @@ -239,7 +239,7 @@ class TestConf: MDCAChallenges http-01 tls-alpn-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['http-01', 'tls-alpn-01'] # test case: automatically collect md names from vhost config @@ -252,7 +252,7 @@ class TestConf: "testdomain.org", "test.testdomain.org", "mail.testdomain.org", ], with_ssl=True) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['domains'] == \ ['testdomain.org', 'test.testdomain.org', 'mail.testdomain.org'] @@ -261,12 +261,12 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' MDConf(env, text=""" MDRenewWindow 14d MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status("testdomain.org") assert stat['renew-window'] == '14d' @@ -276,7 +276,7 @@ class TestConf: MDPrivateKeys RSA 2048 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey'] == { "type": "RSA", "bits": 2048 @@ -288,7 +288,7 @@ class TestConf: MDPrivateKeys RSA 4096 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey'] == { "type": "RSA", "bits": 4096 @@ -300,7 +300,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org MDRequireHttps temporary """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['require-https'] == "temporary" # test case: require OCSP stapling @@ -309,7 +309,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org MDMustStaple on """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is True # test case: remove managed domain from config @@ -319,7 +319,7 @@ class TestConf: env.check_md(dns_list, state=1) conf = MDConf(env,) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: md stays in store env.check_md(dns_list, state=1) @@ -331,7 +331,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: DNS has been removed from md in store env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) @@ -343,7 +343,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: md overwrite previous name and changes name env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], md="testdomain.org", state=1) @@ -359,7 +359,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # all mds stay in store env.check_md(dns_list1, state=1) env.check_md(dns_list2, state=1) @@ -374,12 +374,12 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: sync with ca info removed MDConf(env, local_ca=False, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, ca="https://acme-v02.api.letsencrypt.org/directory", protocol="ACME") @@ -389,12 +389,12 @@ class TestConf: MDConf(env, admin="admin@testdomain.org", text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: sync with admin info removed MDConf(env, admin="", text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: md stays the same with previous admin info env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, contacts=["mailto:admin@testdomain.org"]) @@ -405,12 +405,12 @@ class TestConf: MDRenewWindow 14d MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-window'] == '14d' MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: renew window not set assert env.a2md(["list"]).json['output'][0]['renew-window'] == '33%' @@ -425,13 +425,13 @@ class TestConf: MDRenewMode %s MDomain testdomain.org www.testdomain.org mail.testdomain.org """ % renew_mode).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == exp_code # MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 1 # test case: remove challenges from conf -> fallback to default (not set) @@ -440,13 +440,13 @@ class TestConf: MDCAChallenges http-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['http-01'] # MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert 'challenges' not in env.a2md(["list"]).json['output'][0]['ca'] # test case: specify RSA key @@ -456,13 +456,13 @@ class TestConf: MDPrivateKeys RSA %s MDomain testdomain.org www.testdomain.org mail.testdomain.org """ % key_size).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey']['type'] == "RSA" # MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert "privkey" not in env.a2md(["list"]).json['output'][0] # test case: require HTTPS @@ -474,14 +474,14 @@ class TestConf: MDRequireHttps %s """ % mode).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['require-https'] == mode, \ "Unexpected HTTPS require mode in store. config: {}".format(mode) # MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert "require-https" not in env.a2md(["list"]).json['output'][0], \ "HTTPS require still persisted in store. config: {}".format(mode) @@ -491,13 +491,13 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org MDMustStaple on """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is True # MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is False # test case: reorder DNS names in md definition @@ -508,7 +508,7 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: dns list changes env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) @@ -523,7 +523,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org MDomain testdomain2.org www.testdomain2.org mail.testdomain2.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) env.check_md(["testdomain2.org", "www.testdomain2.org", "mail.testdomain2.org"], state=1) @@ -537,7 +537,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: sync with changed ca info MDConf(env, local_ca=False, admin="webmaster@testdomain.org", text=""" @@ -547,7 +547,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: md stays the same with previous ca info env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, ca="http://somewhere.com:6666/directory", protocol="ACME", @@ -559,7 +559,7 @@ class TestConf: MDConf(env, admin="admin@testdomain.org", text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: sync with changed admin info MDConf(env, local_ca=False, admin="webmaster@testdomain.org", text=""" MDCertificateAuthority http://somewhere.com:6666/directory @@ -568,7 +568,7 @@ class TestConf: MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: md stays the same with previous admin info env.check_md([name, "www.testdomain.org", "mail.testdomain.org"], state=1, contacts=["mailto:webmaster@testdomain.org"]) @@ -579,21 +579,21 @@ class TestConf: MDRenewMode manual MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 0 # test case: drive mode auto MDConf(env, text=""" MDRenewMode auto MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 1 # test case: drive mode always MDConf(env, text=""" MDRenewMode always MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['renew-mode'] == 2 # test case: change config value for renew window, use various syntax alternatives @@ -602,21 +602,21 @@ class TestConf: MDRenewWindow 14d MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.a2md(["list"]).json['output'][0] assert md['renew-window'] == '14d' MDConf(env, text=""" MDRenewWindow 10 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.a2md(["list"]).json['output'][0] assert md['renew-window'] == '10d' MDConf(env, text=""" MDRenewWindow 10% MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.a2md(["list"]).json['output'][0] assert md['renew-window'] == '10%' @@ -626,21 +626,21 @@ class TestConf: MDCAChallenges http-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['http-01'] # test case: drive mode auto MDConf(env, text=""" MDCAChallenges tls-alpn-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['tls-alpn-01'] # test case: drive mode always MDConf(env, text=""" MDCAChallenges http-01 tls-alpn-01 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['ca']['challenges'] == ['http-01', 'tls-alpn-01'] # test case: RSA key length: 4096 -> 2048 -> 4096 @@ -649,7 +649,7 @@ class TestConf: MDPrivateKeys RSA 4096 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey'] == { "type": "RSA", "bits": 4096 @@ -658,7 +658,7 @@ class TestConf: MDPrivateKeys RSA 2048 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey'] == { "type": "RSA", "bits": 2048 @@ -667,7 +667,7 @@ class TestConf: MDPrivateKeys RSA 4096 MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['privkey'] == { "type": "RSA", "bits": 4096 @@ -679,14 +679,14 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert "require-https" not in env.a2md(["list"]).json['output'][0] # test case: temporary redirect MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org MDRequireHttps temporary """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['require-https'] == "temporary" # test case: permanent redirect MDConf(env, text=""" @@ -695,7 +695,7 @@ class TestConf: MDRequireHttps permanent """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['require-https'] == "permanent" # test case: change OCSP stapling settings on existing md @@ -704,21 +704,21 @@ class TestConf: MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is False # test case: OCSP stapling on MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org MDMustStaple on """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is True # test case: OCSP stapling off MDConf(env, text=""" MDomain testdomain.org www.testdomain.org mail.testdomain.org MDMustStaple off """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'][0]['must-staple'] is False # test case: change renew window parameter @@ -735,7 +735,7 @@ class TestConf: conf.end_md() conf.add_vhost(domains=domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain) assert stat["renew-window"] == window @@ -748,7 +748,7 @@ class TestConf: assert env.a2md(["update", name, "contacts", "admin@" + name]).exit_code == 0 assert env.a2md(["update", name, "agreement", env.acme_tos]).exit_code == 0 MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: drive it r = env.a2md(["-v", "drive", name]) @@ -771,7 +771,7 @@ class TestConf: assert env.a2md(["add", name]).exit_code == 0 assert env.a2md(["update", name, "contacts", "admin@" + name]).exit_code == 0 assert env.a2md(["update", name, "agreement", env.acme_tos]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: drive it assert env.a2md(["drive", name]).exit_code == 0 assert env.a2md(["list", name]).json['output'][0]['state'] == env.MD_S_COMPLETE @@ -786,7 +786,7 @@ class TestConf: MDStoreDir md-other MDomain testdomain.org www.testdomain.org mail.testdomain.org """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list"]).json['output'] == [] env.set_store_dir("md-other") env.check_md(["testdomain.org", "www.testdomain.org", "mail.testdomain.org"], state=1) @@ -802,13 +802,13 @@ class TestConf: conf.end_md() conf.add_vhost(domains=[domain]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # add a file at top level assert env.await_completion([domain]) fpath = os.path.join(env.store_domains(), "wrong.com") with open(fpath, 'w') as fd: fd.write("this does not belong here\n") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test case: add external account binding def test_md_310_601(self, env): @@ -821,7 +821,7 @@ class TestConf: conf.end_md() conf.add_vhost(domains=domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain) assert stat["eab"] == {'kid': 'k123', 'hmac': '***'} # eab inherited @@ -832,7 +832,7 @@ class TestConf: conf.end_md() conf.add_vhost(domains=domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain) assert stat["eab"] == {'kid': 'k456', 'hmac': '***'} # override eab inherited @@ -844,7 +844,7 @@ class TestConf: conf.end_md() conf.add_vhost(domains=domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain) assert "eab" not in stat diff -pruN 2.4.63-1/test/modules/md/test_502_acmev2_drive.py 2.4.64-1/test/modules/md/test_502_acmev2_drive.py --- 2.4.63-1/test/modules/md/test_502_acmev2_drive.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_502_acmev2_drive.py 2025-02-05 12:41:51.000000000 +0000 @@ -25,7 +25,7 @@ class TestDrivev2: env.check_acme() env.APACHE_CONF_SRC = "data/test_drive" MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -76,7 +76,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive prev_md = env.a2md(["list", name]).json['output'][0] r = env.a2md(["-vv", "drive", "-c", "http-01", name]) @@ -117,7 +117,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name, "test." + domain]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive r = env.a2md(["-vv", "drive", "-c", "http-01", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) @@ -132,7 +132,7 @@ class TestDrivev2: name = "www." + domain assert env.a2md(["add", name]).exit_code == 0 assert env.a2md(["update", name, "contacts", "admin@" + domain]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: create account on server r = env.a2md(["-t", "accepted", "acme", "newreg", "admin@" + domain], raw=True) assert r.exit_code == 0 @@ -152,7 +152,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: create account on server r = env.a2md(["-t", "accepted", "acme", "newreg", "test@" + domain], raw=True) assert r.exit_code == 0 @@ -172,7 +172,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive r = env.a2md(["-vv", "drive", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) @@ -204,7 +204,7 @@ class TestDrivev2: conf = MDConf(env, proxy=True) conf.add('LogLevel proxy:trace8') conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive it, with wrong proxy url -> FAIL r = env.a2md(["-p", "http://localhost:1", "drive", name]) @@ -231,11 +231,11 @@ class TestDrivev2: # setup: create resource files self._write_res_file(os.path.join(env.server_docs_dir, "test"), "name.txt", name) self._write_res_file(os.path.join(env.server_docs_dir), "name.txt", "not-forbidden.org") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive it assert env.a2md(["drive", name]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test HTTP access - no redirect jdata = env.get_json_content(f"test1.{env.http_tld}", "/alive.json", use_https=False) assert jdata['host']== "test1" @@ -249,7 +249,7 @@ class TestDrivev2: # test HTTP access again -> redirect to default HTTPS port conf.add("MDRequireHttps temporary") conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' r = env.get_meta(name, "/name.txt", use_https=False) assert r.response['status'] == 302 exp_location = "https://%s/name.txt" % name @@ -266,7 +266,7 @@ class TestDrivev2: # test HTTP access again -> redirect permanent conf.add("MDRequireHttps permanent") conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' r = env.get_meta(name, "/name.txt", use_https=False) assert r.response['status'] == 301 exp_location = "https://%s/name.txt" % name @@ -288,15 +288,15 @@ class TestDrivev2: conf.add_vhost(name, port=env.http_port) conf.add_vhost(name) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive it assert env.a2md(["drive", name]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # test override HSTS header conf.add('Header set Strict-Transport-Security "max-age=10886400; includeSubDomains; preload"') conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' r = env.get_meta(name, "/name.txt", use_https=True) assert 'strict-transport-security' in r.response['header'], r.response['header'] assert r.response['header']['strict-transport-security'] == \ @@ -306,7 +306,7 @@ class TestDrivev2: conf.add(' Redirect /a /name.txt') conf.add(' Redirect seeother /b /name.txt') conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: default redirect by mod_md still works exp_location = "https://%s/name.txt" % name r = env.get_meta(name, "/name.txt", use_https=False) @@ -330,17 +330,17 @@ class TestDrivev2: conf.add_vhost(name, port=env.http_port) conf.add_vhost(name) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # drive it r = env.a2md(["-v", "drive", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: place redirect rules conf.add(' Redirect /a /name.txt') conf.add(' Redirect seeother /b /name.txt') conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: redirects on HTTP exp_location = "http://%s:%s/name.txt" % (name, env.http_port) r = env.get_meta(name, "/a", use_https=False) @@ -367,12 +367,12 @@ class TestDrivev2: conf.add_md([name]) conf.add_vhost(name) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.run(["openssl", "s_client", f"-connect", "localhost:{env.https_port}", "-servername", "example.com", "-crlf" ], intext="GET https:// HTTP/1.1\nHost: example.com\n\n") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # --------- critical state change -> drive again --------- @@ -382,7 +382,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: drive it r = env.a2md(["drive", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) @@ -419,7 +419,7 @@ class TestDrivev2: conf.add_renew_window(renew_window) conf.add_md([name]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list", name]).json['output'][0]['state'] == env.MD_S_INCOMPLETE # setup: drive it r = env.a2md(["drive", name]) @@ -457,7 +457,7 @@ class TestDrivev2: conf.add_private_key(key_type, key_params) conf.add_md([name]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.a2md(["list", name]).json['output'][0]['state'] == env.MD_S_INCOMPLETE # setup: drive it r = env.a2md(["-vv", "drive", name]) @@ -477,7 +477,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name, "test." + domain, "xxx." + domain]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: drive it r = env.a2md(["drive", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) @@ -496,7 +496,7 @@ class TestDrivev2: domain = self.test_domain name = "www." + domain self._prepare_md(env, [name]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # setup: drive it r = env.a2md(["drive", name]) assert r.exit_code == 0, "a2md drive failed: {0}".format(r.stderr) diff -pruN 2.4.63-1/test/modules/md/test_602_roundtrip.py 2.4.64-1/test/modules/md/test_602_roundtrip.py --- 2.4.63-1/test/modules/md/test_602_roundtrip.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_602_roundtrip.py 2025-02-05 12:41:51.000000000 +0000 @@ -39,16 +39,16 @@ class TestRoundtripv2: conf.add_md(domains) conf.install() # - restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # - drive assert env.a2md(["-v", "drive", domain]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain) # - append vhost to config conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: SSL is running OK cert = env.get_cert(domain) assert domain in cert.get_san_list() @@ -71,14 +71,14 @@ class TestRoundtripv2: conf.install() # - restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains_a) env.check_md(domains_b) # - drive assert env.a2md(["drive", domain_a]).exit_code == 0 assert env.a2md(["drive", domain_b]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain_a) env.check_md_complete(domain_b) @@ -88,7 +88,7 @@ class TestRoundtripv2: conf.install() # check: SSL is running OK - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' cert_a = env.get_cert(domain_a) assert domains_a == cert_a.get_san_list() cert_b = env.get_cert(domain_b) @@ -108,12 +108,12 @@ class TestRoundtripv2: conf.install() # - restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # - drive assert env.a2md(["drive", domain]).exit_code == 0 - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain) # - append vhost to config @@ -126,7 +126,7 @@ class TestRoundtripv2: self._write_res_file(os.path.join(env.server_docs_dir, "b"), "name.txt", name_b) # check: SSL is running OK - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' cert_a = env.get_cert(name_a) assert name_a in cert_a.get_san_list() cert_b = env.get_cert(name_b) diff -pruN 2.4.63-1/test/modules/md/test_702_auto.py 2.4.64-1/test/modules/md/test_702_auto.py --- 2.4.63-1/test/modules/md/test_702_auto.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_702_auto.py 2025-02-05 12:41:51.000000000 +0000 @@ -1,4 +1,5 @@ import os +import time from datetime import timedelta import pytest @@ -21,7 +22,7 @@ class TestAutov2: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -44,7 +45,7 @@ class TestAutov2: conf.install() # # restart, check that MD is synched to store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) stat = env.get_md_status(domain) assert stat["watched"] == 0 @@ -52,7 +53,7 @@ class TestAutov2: # add vhost for MD, restart should drive it conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.check_md_complete(domain) stat = env.get_md_status(domain) @@ -89,7 +90,7 @@ class TestAutov2: conf.install() # # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains_a) env.check_md(domains_b) # @@ -106,7 +107,7 @@ class TestAutov2: assert status['state-descr'] == "certificate(rsa) is missing" # restart and activate - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check: SSL is running OK cert_a = env.get_cert(domain_a) assert domains_a == cert_a.get_san_list() @@ -136,7 +137,7 @@ class TestAutov2: self._write_res_file(os.path.join(env.server_docs_dir, "b"), "name.txt", name_b) # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([domain]) md = env.check_md_complete(domain) @@ -170,7 +171,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([domain]) env.check_md_complete(domain) @@ -196,7 +197,7 @@ class TestAutov2: self._write_res_file(os.path.join(env.server_docs_dir, "a"), "name.txt", name_a) # # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # # check: that request to domains give 503 Service Unavailable @@ -227,7 +228,7 @@ class TestAutov2: self._write_res_file(os.path.join(env.server_docs_dir, "a"), "name.txt", name_a) # # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion md = env.await_error(domain) @@ -262,7 +263,7 @@ class TestAutov2: conf.install() # # - restart (-> drive) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # await drive completion md = env.await_error(domain) assert md @@ -291,9 +292,9 @@ class TestAutov2: conf.install() # # - restart (-> drive), check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain) # Force cert renewal due to critical remaining valid duration @@ -311,30 +312,23 @@ class TestAutov2: conf.install() # # restart (-> drive), check that md+cert is in store, TLS is up - assert env.apache_restart() == 0 - assert env.await_completion([domain]) - env.check_md_complete(domain) - cert1 = MDCertUtil(env.store_domain_file(domain, 'pubcert.pem')) - # compare with what md reports as status - stat = env.get_certificate_status(domain) - assert cert1.same_serial_as(stat['rsa']['serial']) - # - # create self-signed cert, with critical remaining valid duration -> drive again + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + assert env.await_completion([domain], restart=False) + # Overwrite stages cert with one which has little remaining lifetime creds = env.create_self_signed_cert(CertificateSpec(domains=[domain]), valid_from=timedelta(days=-120), valid_to=timedelta(days=2), serial=7029) - creds.save_cert_pem(env.store_domain_file(domain, 'pubcert.pem')) - creds.save_pkey_pem(env.store_domain_file(domain, 'privkey.pem')) assert creds.certificate.serial_number == 7029 - assert env.apache_restart() == 0 + creds.save_cert_pem(env.store_staged_file(domain, 'pubcert.pem')) + creds.save_pkey_pem(env.store_staged_file(domain, 'privkey.pem')) + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_certificate_status(domain) assert creds.certificate.serial_number == int(stat['rsa']['serial'], 16) - # # cert should renew and be different afterwards assert env.await_completion([domain], must_renew=True) stat = env.get_certificate_status(domain) - creds.certificate.serial_number != int(stat['rsa']['serial'], 16) + assert creds.certificate.serial_number != int(stat['rsa']['serial'], 16) # test case: drive with an unsupported challenge due to port availability def test_md_702_010(self, env): @@ -348,7 +342,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md["renewal"]["errors"] > 0 # @@ -360,7 +354,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([domain]) # @@ -386,7 +380,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md["renewal"]["errors"] > 0 # @@ -399,7 +393,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([domain]) # @@ -431,7 +425,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([name_x]) env.check_md_complete(name_x) @@ -451,7 +445,7 @@ class TestAutov2: conf.add_vhost(name_b) conf.install() # restart, check that host still works and kept the cert - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(new_list) status = env.get_certificate_status(name_a) assert cert_a.same_serial_as(status['rsa']['serial']) @@ -475,7 +469,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([name_x]) env.check_md_complete(name_x) @@ -495,7 +489,7 @@ class TestAutov2: conf.add_vhost(name_b) conf.install() # restart, check that host still works and have new cert - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(new_list) assert env.await_completion([name_a]) # @@ -520,7 +514,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name1]) env.check_md([name2]) assert env.await_completion([name1, name2]) @@ -538,7 +532,7 @@ class TestAutov2: conf.add_md([name1]) conf.add_vhost([name1, name2]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md([name1, name2]) assert env.await_completion([name1]) # @@ -563,7 +557,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains1) assert env.await_completion([name_x]) env.check_md_complete(name_x) @@ -576,7 +570,7 @@ class TestAutov2: conf.add_vhost(domains=domains2) conf.install() # restart, check that host still works and kept the cert - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' status = env.get_certificate_status(name_a) assert cert_x.same_serial_as(status['rsa']['serial']) @@ -597,7 +591,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # check that acme-tls/1 is available for all domains stat = env.get_md_status(domain) @@ -625,11 +619,18 @@ class TestAutov2: # # restart (-> drive), check that MD job shows errors # and that missing proto is detected - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # check that acme-tls/1 is available for none of the domains stat = env.get_md_status(domain) assert stat["proto"]["acme-tls/1"] == [] + MDConf(env).install() + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + env.httpd_error_log.ignore_recent(matches=[ + r'.*None of offered challenge types for domain.*', + ], lognos=[ + "AH10056" # challenges not available + ]) # test case: 2.4.40 mod_ssl stumbles over a SSLCertificateChainFile when installing # a fallback certificate @@ -645,7 +646,7 @@ class TestAutov2: conf.add_md(dns_list) conf.add_vhost(dns_list) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # test case: test "tls-alpn-01" without enabling 'acme-tls/1' challenge protocol @@ -666,7 +667,7 @@ class TestAutov2: # # restart (-> drive), check that MD job shows errors # and that missing proto is detected - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # check that acme-tls/1 is available for none of the domains stat = env.get_md_status(domain) @@ -694,7 +695,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(md_domains) assert env.await_completion([domain]) env.check_md_complete(domain) @@ -714,7 +715,7 @@ class TestAutov2: """) conf.add_md([domain]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # Make a setup using the base server without http:, will fail. @@ -728,7 +729,7 @@ class TestAutov2: """) conf.add_md([domain]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) # env.httpd_error_log.ignore_recent( @@ -759,7 +760,7 @@ class TestAutov2: ]) conf.add_md([domain]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain, via_domain=env.http_addr, use_https=False) assert stat["proto"]["acme-tls/1"] == [domain] assert env.await_completion([domain], via_domain=env.http_addr, use_https=False) @@ -786,7 +787,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_error(long_domain) # add a short domain to the SAN list, the CA should now use that one @@ -800,7 +801,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([long_domain]) env.check_md_complete(long_domain) # @@ -823,7 +824,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) env.check_md_complete(domains[0]) @@ -842,7 +843,7 @@ class TestAutov2: conf.install() # # restart (-> drive), check that MD was synched and completes - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) env.check_md_complete(domains[0]) diff -pruN 2.4.63-1/test/modules/md/test_710_profiles.py 2.4.64-1/test/modules/md/test_710_profiles.py --- 2.4.63-1/test/modules/md/test_710_profiles.py 1970-01-01 00:00:00.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_710_profiles.py 2025-02-05 12:41:51.000000000 +0000 @@ -0,0 +1,132 @@ +import datetime +import email.utils +import os +from datetime import timedelta + +import pytest +from pyhttpd.certs import CertificateSpec + +from pyhttpd.env import HttpdTestEnv +from .md_cert_util import MDCertUtil +from .md_env import MDTestEnv +from .md_conf import MDConf + + +@pytest.mark.skipif(condition=not MDTestEnv.has_acme_server(), + reason="no ACME test server configured") +class TestProfiles: + + @pytest.fixture(autouse=True, scope='class') + def _class_scope(self, env, acme): + env.APACHE_CONF_SRC = "data/test_auto" + acme.start(config='default') + env.check_acme() + env.clear_store() + MDConf(env).install() + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + + @pytest.fixture(autouse=True, scope='function') + def _method_scope(self, env, request): + env.clear_store() + self.test_domain = env.get_request_domain(request) + + def _write_res_file(self, doc_root, name, content): + if not os.path.exists(doc_root): + os.makedirs(doc_root) + open(os.path.join(doc_root, name), "w").write(content) + + # create a MD with 'default' profile, get cert + def test_md_710_001(self, env): + domain = self.test_domain + # generate config with one MD + domains = [domain, "www." + domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("auto") + conf.start_md(domains) + conf.add(f' MDProfile default') + conf.end_md() + conf.add_vhost(domains) + conf.install() + # + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + assert env.await_completion(domains) + stat = env.get_md_status(domain) + assert stat["watched"] == 1 + assert stat["profile"] == "default", f'{stat}' + assert stat['cert']['rsa']['valid']['until'], f'{stat}' + ts = email.utils.parsedate_to_datetime(stat['cert']['rsa']['valid']['until']) + valid = ts - datetime.datetime.now(datetime.UTC) + assert valid.days in [89, 90] + + # create a MD with 'shortlived' profile, get cert + def test_md_710_002(self, env): + domain = self.test_domain + # generate config with one MD + domains = [domain, "www." + domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("auto") + conf.start_md(domains) + conf.add(f' MDProfile shortlived') + conf.add(f' MDProfileMandatory on') + conf.end_md() + conf.add_vhost(domains) + conf.install() + # + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + assert env.await_completion(domains) + stat = env.get_md_status(domain) + assert stat["watched"] == 1 + assert stat["profile"] == "shortlived", f'{stat}' + assert stat['cert']['rsa']['valid']['until'], f'{stat}' + ts = email.utils.parsedate_to_datetime(stat['cert']['rsa']['valid']['until']) + valid = ts - datetime.datetime.now(datetime.UTC) + assert valid.days in [5, 6] + + # create a MD with unknown 'XXX' profile, get cert + def test_md_710_003(self, env): + domain = self.test_domain + # generate config with one MD + domains = [domain, "www." + domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("auto") + conf.start_md(domains) + conf.add(f' MDProfile XXX') + conf.end_md() + conf.add_vhost(domains) + conf.install() + # + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + assert env.await_completion(domains) + stat = env.get_md_status(domain) + assert stat["watched"] == 1 + assert stat["profile"] == "XXX", f'{stat}' + + # create a MD with unknown 'XXX' profile, mandatory, fail + def test_md_710_004(self, env): + domain = self.test_domain + # generate config with one MD + domains = [domain, "www." + domain] + conf = MDConf(env, admin="admin@" + domain) + conf.add_drive_mode("auto") + conf.start_md(domains) + conf.add(f' MDProfile XXX') + conf.add(f' MDProfileMandatory on') + conf.end_md() + conf.add_vhost(domains) + conf.install() + # + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + assert env.await_error(domain) + stat = env.get_md_status(domain) + assert stat["watched"] == 1 + assert stat["profile"] == "XXX", f'{stat}' + assert len(stat['cert']) == 0, f'{stat}' + assert stat['renewal']['errors'] > 0, f'{stat}' + assert stat['renewal']['last']['activity'] == 'Creating new order', f'{stat}' + MDConf(env).install() + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + env.httpd_error_log.ignore_recent(matches=[ + r'.*mandatory ACME profile \'XXX\' is not offered by CA.*', + ], lognos=[ + "AH10056" # processing failed + ]) diff -pruN 2.4.63-1/test/modules/md/test_720_wildcard.py 2.4.64-1/test/modules/md/test_720_wildcard.py --- 2.4.63-1/test/modules/md/test_720_wildcard.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_720_wildcard.py 2025-02-05 12:41:51.000000000 +0000 @@ -18,7 +18,7 @@ class TestWildcard: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -37,7 +37,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion md = env.await_error(domain) @@ -69,7 +69,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion md = env.await_error(domain) @@ -100,7 +100,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([domain]) @@ -125,7 +125,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion md = env.await_error(domain) @@ -156,7 +156,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([domain]) @@ -183,7 +183,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([domain]) @@ -211,7 +211,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([domain]) @@ -238,7 +238,7 @@ class TestWildcard: conf.install() # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([wwwdomain]) @@ -270,7 +270,7 @@ class TestWildcard: fd.write(content) # restart, check that md is in store - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) # await drive completion assert env.await_completion([domain], restart=False) @@ -278,5 +278,5 @@ class TestWildcard: r = env.curl_get(f"http://{domain}:{env.http_port}/.well-known/acme-challenge/123456") assert r.response['status'] == 200 assert r.response['body'] == content - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain) diff -pruN 2.4.63-1/test/modules/md/test_730_static.py 2.4.64-1/test/modules/md/test_730_static.py --- 2.4.63-1/test/modules/md/test_730_static.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_730_static.py 2025-02-05 12:41:51.000000000 +0000 @@ -19,7 +19,7 @@ class TestStatic: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -48,7 +48,7 @@ class TestStatic: conf.end_md() conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # check if the domain uses it, it appears in our stats and renewal is off cert = env.get_cert(domain) @@ -83,7 +83,7 @@ class TestStatic: conf.end_md() conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # this should enforce a renewal stat = env.get_md_status(domain) assert stat['renew'] is True, stat diff -pruN 2.4.63-1/test/modules/md/test_740_acme_errors.py 2.4.64-1/test/modules/md/test_740_acme_errors.py --- 2.4.63-1/test/modules/md/test_740_acme_errors.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_740_acme_errors.py 2025-02-05 12:41:51.000000000 +0000 @@ -16,7 +16,7 @@ class TestAcmeErrors: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -33,7 +33,7 @@ class TestAcmeErrors: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md assert md['renewal']['errors'] > 0 @@ -65,7 +65,7 @@ class TestAcmeErrors: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md assert md['renewal']['errors'] > 0 diff -pruN 2.4.63-1/test/modules/md/test_741_setup_errors.py 2.4.64-1/test/modules/md/test_741_setup_errors.py --- 2.4.63-1/test/modules/md/test_741_setup_errors.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_741_setup_errors.py 2025-02-05 12:41:51.000000000 +0000 @@ -18,7 +18,7 @@ class TestSetupErrors: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -42,7 +42,7 @@ class TestSetupErrors: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain, errors=2, timeout=10) assert md assert md['renewal']['errors'] > 0 @@ -65,13 +65,13 @@ class TestSetupErrors: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md(domains) assert env.await_completion([domain], restart=False) staged_md_path = env.store_staged_file(domain, 'md.json') with open(staged_md_path, 'w') as fd: fd.write('garbage\n') - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.check_md_complete(domain) env.httpd_error_log.ignore_recent( diff -pruN 2.4.63-1/test/modules/md/test_750_eab.py 2.4.64-1/test/modules/md/test_750_eab.py --- 2.4.63-1/test/modules/md/test_750_eab.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_750_eab.py 2025-02-05 12:41:51.000000000 +0000 @@ -18,7 +18,7 @@ class TestEab: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -33,7 +33,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:externalAccountRequired' @@ -56,7 +56,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] == 'apache:eab-hmac-invalid' @@ -79,7 +79,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] in [ @@ -105,7 +105,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] in [ @@ -131,7 +131,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] in [ @@ -158,7 +158,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) def test_md_750_011(self, env): @@ -174,7 +174,7 @@ class TestEab: conf.add_md([domain_b]) conf.add_vhost(domains=[domain_b]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain_a], restart=False) md = env.await_error(domain_b) assert md['renewal']['errors'] > 0 @@ -202,7 +202,7 @@ class TestEab: conf.end_md() conf.add_vhost(domains=[domain_b]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain_b], restart=False) md = env.await_error(domain_a) assert md['renewal']['errors'] > 0 @@ -231,7 +231,7 @@ class TestEab: conf.end_md() conf.add_vhost(domains=[domain_b]) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain_a, domain_b]) md_a = env.get_md_status(domain_a) md_b = env.get_md_status(domain_b) @@ -247,7 +247,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) md_1 = env.get_md_status(domain) conf = MDConf(env) @@ -258,7 +258,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) md_2 = env.get_md_status(domain) assert md_1['ca'] != md_2['ca'] @@ -273,7 +273,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) conf = MDConf(env) # this is another one of the values in conf/pebble-eab.json @@ -282,7 +282,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.await_error(domain) assert md['renewal']['errors'] > 0 @@ -307,7 +307,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) conf = MDConf(env) # this is another one of the values in conf/pebble-eab.json @@ -317,7 +317,7 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.await_error(domain) assert md['renewal']['errors'] > 0 @@ -343,7 +343,7 @@ class TestEab: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md['renewal']['errors'] > 0 assert md['renewal']['last']['problem'] == 'urn:ietf:params:acme:error:externalAccountRequired' @@ -432,5 +432,5 @@ class TestEab: conf.add_md(domains) conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) diff -pruN 2.4.63-1/test/modules/md/test_751_sectigo.py 2.4.64-1/test/modules/md/test_751_sectigo.py --- 2.4.63-1/test/modules/md/test_751_sectigo.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_751_sectigo.py 2025-02-05 12:41:51.000000000 +0000 @@ -46,7 +46,7 @@ class TestSectigo: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -65,7 +65,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -83,7 +83,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.get_md_status(domain) assert md['renewal']['errors'] > 0 @@ -101,7 +101,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.get_md_status(domain) assert md['renewal']['errors'] > 0 @@ -120,7 +120,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -142,7 +142,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain2}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -167,7 +167,7 @@ class TestSectigo: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" diff -pruN 2.4.63-1/test/modules/md/test_752_zerossl.py 2.4.64-1/test/modules/md/test_752_zerossl.py --- 2.4.63-1/test/modules/md/test_752_zerossl.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_752_zerossl.py 2025-02-05 12:41:51.000000000 +0000 @@ -43,7 +43,7 @@ class TestZeroSSL: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -66,7 +66,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -88,7 +88,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.get_md_status(domain) assert md['renewal']['errors'] > 0 @@ -110,7 +110,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) md = env.get_md_status(domain) assert md['renewal']['errors'] > 0 @@ -134,7 +134,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -160,7 +160,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain2}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" @@ -188,7 +188,7 @@ class TestZeroSSL: conf.end_md() conf.add_vhost(domains=domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) r = env.curl_get(f"https://{domain}:{env.https_port}", options=[ "--cacert", f"{env.test_dir}/data/sectigo-demo-root.pem" diff -pruN 2.4.63-1/test/modules/md/test_780_tailscale.py 2.4.64-1/test/modules/md/test_780_tailscale.py --- 2.4.63-1/test/modules/md/test_780_tailscale.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_780_tailscale.py 2025-02-05 12:41:51.000000000 +0000 @@ -103,7 +103,7 @@ class TestTailscale: acme.start(config='default') env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' yield faker.stop() @@ -133,7 +133,7 @@ class TestTailscale: conf.add_vhost(domains) conf.install() # restart and watch it fail due to wrong tailscale unix socket path - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md assert md['renewal']['errors'] > 0 @@ -163,9 +163,9 @@ class TestTailscale: conf.add_vhost(domains) conf.install() # restart and watch it fail due to wrong tailscale unix socket path - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(domain) # create a MD using `tailscale` as protocol, but domain name not assigned by tailscale @@ -184,7 +184,7 @@ class TestTailscale: conf.add_vhost(domains) conf.install() # restart and watch it fail due to wrong tailscale unix socket path - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md assert md['renewal']['errors'] > 0 diff -pruN 2.4.63-1/test/modules/md/test_790_failover.py 2.4.64-1/test/modules/md/test_790_failover.py --- 2.4.63-1/test/modules/md/test_790_failover.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_790_failover.py 2025-02-05 12:41:51.000000000 +0000 @@ -16,7 +16,7 @@ class TestFailover: conf = MDConf(env) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -39,7 +39,7 @@ class TestFailover: conf.end_md() conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.check_md_complete(domain) @@ -60,7 +60,7 @@ class TestFailover: conf.end_md() conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.check_md_complete(domain) # @@ -91,7 +91,7 @@ class TestFailover: conf.end_md() conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.check_md_complete(domain) # diff -pruN 2.4.63-1/test/modules/md/test_800_must_staple.py 2.4.64-1/test/modules/md/test_800_must_staple.py --- 2.4.63-1/test/modules/md/test_800_must_staple.py 2023-03-05 10:25:32.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_800_must_staple.py 2025-02-05 12:41:51.000000000 +0000 @@ -17,7 +17,7 @@ class TestMustStaple: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -33,7 +33,7 @@ class TestMustStaple: # MD with default, e.g. not staple def test_md_800_001(self, env): self.configure_httpd(env, self.domain) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([self.domain]) env.check_md_complete(self.domain) cert1 = MDCertUtil(env.store_domain_file(self.domain, 'pubcert.pem')) @@ -42,7 +42,7 @@ class TestMustStaple: # MD that should explicitly not staple def test_md_800_002(self, env): self.configure_httpd(env, self.domain, "MDMustStaple off") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.check_md_complete(self.domain) cert1 = MDCertUtil(env.store_domain_file(self.domain, 'pubcert.pem')) assert not cert1.get_must_staple() @@ -53,13 +53,13 @@ class TestMustStaple: @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_800_003(self, env): self.configure_httpd(env, self.domain, "MDMustStaple on") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([self.domain]) env.check_md_complete(self.domain) cert1 = MDCertUtil(env.store_domain_file(self.domain, 'pubcert.pem')) assert cert1.get_must_staple() self.configure_httpd(env, self.domain, "MDMustStaple off") - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([self.domain]) env.check_md_complete(self.domain) cert1 = MDCertUtil(env.store_domain_file(self.domain, 'pubcert.pem')) @@ -78,7 +78,7 @@ class TestMustStaple: SSLUseStapling On SSLStaplingCache shmcb:stapling_cache(128000) """) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_ocsp_status(self.domain) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" diff -pruN 2.4.63-1/test/modules/md/test_801_stapling.py 2.4.64-1/test/modules/md/test_801_stapling.py --- 2.4.63-1/test/modules/md/test_801_stapling.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_801_stapling.py 2025-02-05 12:41:51.000000000 +0000 @@ -12,7 +12,6 @@ from .md_env import MDTestEnv @pytest.mark.skipif(condition=not MDTestEnv.has_acme_server(), reason="no ACME test server configured") -@pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") class TestStapling: @pytest.fixture(autouse=True, scope='class') @@ -25,7 +24,7 @@ class TestStapling: mdB = "b-" + domain self.configure_httpd(env, [mdA, mdB]).install() env.apache_stop() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([mdA, mdB]) env.check_md_complete(mdA) env.check_md_complete(mdB) @@ -68,9 +67,12 @@ class TestStapling: def test_md_801_001(self, env): md = self.mdA self.configure_httpd(env, md).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_ocsp_status(md) - assert stat['ocsp'] == "no response sent" + if MDTestEnv.lacks_ocsp(): + assert 'ocsp' not in stat or stat['ocsp'] == "no response sent", f'{stat}' + else: + assert stat['ocsp'] == "no response sent" stat = env.get_md_status(md) assert not stat["stapling"] # @@ -79,30 +81,43 @@ class TestStapling: MDStapling on LogLevel md:trace5 """).install() - assert env.apache_restart() == 0 - stat = env.await_ocsp_status(md) - assert stat['ocsp'] == "successful (0x0)" - assert stat['verify'] == "0 (ok)" + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' + if MDTestEnv.lacks_ocsp(): + stat = env.get_md_status(md) + assert 'ocsp' not in stat or stat['ocsp'] == "no response sent", f'{stat}' + else: + stat = env.await_ocsp_status(md) + assert stat['ocsp'] == "successful (0x0)" + assert stat['verify'] == "0 (ok)" stat = env.get_md_status(md) - assert stat["stapling"] - pkey = 'rsa' - assert stat["cert"][pkey]["ocsp"]["status"] == "good" - assert stat["cert"][pkey]["ocsp"]["valid"] + if MDTestEnv.lacks_ocsp(): + assert stat["stapling"] + pkey = 'rsa' + assert 'ocsp' not in stat["cert"][pkey], f'{stat}' + else: + assert stat["stapling"] + pkey = 'rsa' + assert stat["cert"][pkey]["ocsp"]["status"] == "good" + assert stat["cert"][pkey]["ocsp"]["valid"] # # turn stapling off (explicitly) again, should disappear self.configure_httpd(env, md, "MDStapling off").install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_ocsp_status(md) - assert stat['ocsp'] == "no response sent" + if MDTestEnv.lacks_ocsp(): + assert 'ocsp' not in stat or stat['ocsp'] == "no response sent", f'{stat}' + else: + assert stat['ocsp'] == "no response sent" stat = env.get_md_status(md) assert not stat["stapling"] # MD with stapling on/off and mod_ssl stapling on # expect to see stapling response in all cases + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_002(self, env): md = self.mdA self.configure_httpd(env, md, ssl_stapling=True).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" if \ env.ssl_module == "mod_ssl" else "no response sent" @@ -111,7 +126,7 @@ class TestStapling: # # turn stapling on, wait for it to appear in connections self.configure_httpd(env, md, "MDStapling on", ssl_stapling=True).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" @@ -123,7 +138,7 @@ class TestStapling: # # turn stapling off (explicitly) again, should disappear self.configure_httpd(env, md, "MDStapling off", ssl_stapling=True).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" if \ env.ssl_module == "mod_ssl" else "no response sent" @@ -145,23 +160,30 @@ class TestStapling: conf.add_vhost(md_a) conf.add_vhost(md_b) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # mdA has stapling - stat = env.await_ocsp_status(md_a) - assert stat['ocsp'] == "successful (0x0)" + if MDTestEnv.lacks_ocsp(): + stat = env.get_ocsp_status(md_a) + assert 'ocsp' not in stat or stat['ocsp'] == "no response sent", f'{stat}' + else: + stat = env.await_ocsp_status(md_a) + assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" stat = env.get_md_status(md_a) assert stat["stapling"] - pkey = 'rsa' - assert stat["cert"][pkey]["ocsp"]["status"] == "good" - assert stat["cert"][pkey]["ocsp"]["valid"] + if not MDTestEnv.lacks_ocsp(): + pkey = 'rsa' + assert stat["cert"][pkey]["ocsp"]["status"] == "good" + assert stat["cert"][pkey]["ocsp"]["valid"] # mdB has no stapling - stat = env.get_ocsp_status(md_b) - assert stat['ocsp'] == "no response sent" + if not MDTestEnv.lacks_ocsp(): + stat = env.get_ocsp_status(md_b) + assert stat['ocsp'] == "no response sent" stat = env.get_md_status(md_b) assert not stat["stapling"] # 2 MDs, md stapling on+off, ssl stapling on + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_004(self, env): md_a = self.mdA md_b = self.mdB @@ -176,7 +198,7 @@ class TestStapling: conf.add_vhost(md_a) conf.add_vhost(md_b) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # mdA has stapling stat = env.await_ocsp_status(md_a) assert stat['ocsp'] == "successful (0x0)" @@ -195,12 +217,13 @@ class TestStapling: # MD, check that restart leaves response unchanged, reconfigure keep interval, # should remove the file on restart and get a new one + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_005(self, env): # TODO: mod_watchdog seems to have problems sometimes with fast restarts # turn stapling on, wait for it to appear in connections md = self.mdA self.configure_httpd(env, md, "MDStapling on").install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" @@ -215,7 +238,7 @@ class TestStapling: mtime1 = os.path.getmtime(ocsp_file) # wait a sec, restart and check that file does not change time.sleep(1) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" mtime2 = os.path.getmtime(ocsp_file) @@ -227,12 +250,12 @@ class TestStapling: MDStapling on MDStaplingKeepResponse 1s """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert not os.path.exists(ocsp_file) # if we restart again, a new file needs to appear - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" mtime3 = os.path.getmtime(ocsp_file) @@ -240,11 +263,12 @@ class TestStapling: # MD, check that stapling renew window works. Set a large window # that causes response to be retrieved all the time. + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_006(self, env): # turn stapling on, wait for it to appear in connections md = self.mdA self.configure_httpd(env, md, "MDStapling on").install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" @@ -257,7 +281,7 @@ class TestStapling: ocsp_file = os.path.join(dirpath, name) assert ocsp_file mtime1 = os.path.getmtime(ocsp_file) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" # wait a sec, restart and check that file does not change @@ -269,7 +293,7 @@ class TestStapling: MDStapling on MDStaplingRenewWindow 10d """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" # wait a sec, restart and check that file does change @@ -278,6 +302,7 @@ class TestStapling: assert mtime1 != mtime3 # MD, make a MDomain with static files, check that stapling works + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_007(self, env): # turn stapling on, wait for it to appear in connections md = self.mdA @@ -292,7 +317,7 @@ class TestStapling: env.store_domain_file(md, 'pubcert.pem'))) conf.add_vhost(md) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" @@ -306,6 +331,7 @@ class TestStapling: assert ocsp_file # Use certificate files in direct config, check that stapling works + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_008(self, env): # turn stapling on, wait for it to appear in connections md = self.mdA @@ -316,7 +342,7 @@ class TestStapling: env.store_domain_file(md, 'privkey.pem')) conf.end_vhost() conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.await_ocsp_status(md) assert stat['ocsp'] == "successful (0x0)" assert stat['verify'] == "0 (ok)" @@ -331,6 +357,7 @@ class TestStapling: # Turn on stapling for a certificate without OCSP responder and issuer # (certificates without issuer prevent mod_ssl asking around for stapling) + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_009(self, env): md = self.mdA domains = [md] @@ -353,13 +380,14 @@ class TestStapling: conf.end_md() conf.add_vhost(md) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' time.sleep(1) stat = env.get_ocsp_status(md) assert stat['ocsp'] == "no response sent" # Turn on stapling for an MDomain not used in any virtualhost # There was a crash in server-status in this case + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_010(self, env): env.clear_ocsp_store() md = self.mdA @@ -369,7 +397,7 @@ class TestStapling: conf.add("MDStapling on") conf.end_md() conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_server_status() assert stat @@ -379,15 +407,16 @@ class TestStapling: # scheduling. # This checks the mistaken assert() reported in # + @pytest.mark.skipif(MDTestEnv.lacks_ocsp(), reason="no OCSP responder") def test_md_801_011(self, env): domains = [ f'test-801-011-{i}-{env.DOMAIN_SUFFIX}' for i in range(7)] self.configure_httpd(env, domains, """ MDStapling on LogLevel md:trace2 ssl:warn """).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains, restart=False, timeout=120) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # now the certs are installed and ocsp will be retrieved time.sleep(1) for domain in domains: diff -pruN 2.4.63-1/test/modules/md/test_810_ec.py 2.4.64-1/test/modules/md/test_810_ec.py --- 2.4.63-1/test/modules/md/test_810_ec.py 2021-12-25 19:14:30.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_810_ec.py 2025-02-05 12:41:51.000000000 +0000 @@ -18,7 +18,7 @@ class TestAutov2: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -33,7 +33,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) def check_pkeys(self, env, domain, pkeys): @@ -100,7 +100,7 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' md = env.await_error(domain) assert md assert md['renewal']['errors'] > 0 @@ -135,14 +135,14 @@ class TestAutov2: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion(domains) conf = MDConf(env) conf.add("MDPrivateKeys rsa3072 secp384r1") conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' mds = env.get_md_status(domain, via_domain=domain, use_https=True) assert 'renew' in mds and mds['renew'] is True, f"{mds}" assert env.await_completion(domains) diff -pruN 2.4.63-1/test/modules/md/test_820_locks.py 2.4.64-1/test/modules/md/test_820_locks.py --- 2.4.63-1/test/modules/md/test_820_locks.py 2022-09-10 09:01:44.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_820_locks.py 2025-02-05 12:41:51.000000000 +0000 @@ -37,7 +37,7 @@ class TestLocks: self.configure_httpd(env, [domain], add_lines=[ "MDStoreLocks 1s" ]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # renewal, with global lock held during restert @@ -47,26 +47,26 @@ class TestLocks: self.configure_httpd(env, [domain], add_lines=[ "MDStoreLocks 1s" ]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # we have a cert now, add a dns name to force renewal certa = MDCertUtil(env.store_domain_file(domain, 'pubcert.pem')) self.configure_httpd(env, [domain, f"x.{domain}"], add_lines=[ "MDStoreLocks 1s" ]) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # await new cert, but do not restart, keeps the cert in staging assert env.await_completion([domain], restart=False) # obtain global lock and restart lockfile = os.path.join(env.store_dir, "store.lock") with FileLock(lockfile): - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # lock should have prevented staging from being activated, # meaning we will have the same cert certb = MDCertUtil(env.store_domain_file(domain, 'pubcert.pem')) assert certa.same_serial_as(certb) # now restart without lock - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' certc = MDCertUtil(env.store_domain_file(domain, 'pubcert.pem')) assert not certa.same_serial_as(certc) diff -pruN 2.4.63-1/test/modules/md/test_900_notify.py 2.4.64-1/test/modules/md/test_900_notify.py --- 2.4.63-1/test/modules/md/test_900_notify.py 2024-07-11 08:18:12.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_900_notify.py 2025-02-05 12:41:51.000000000 +0000 @@ -45,7 +45,7 @@ class TestNotify: self.configure_httpd(env, self.domain, f""" MDNotifyCmd {command} {args} """) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(self.domain) stat = env.get_md_status(self.domain) assert stat["renewal"]["last"]["problem"] == "urn:org:apache:httpd:log:AH10108:" @@ -63,7 +63,7 @@ class TestNotify: self.configure_httpd(env, self.domain, f""" MDNotifyCmd {command} {args} """) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(self.domain) stat = env.get_md_status(self.domain) assert stat["renewal"]["last"]["problem"] == "urn:org:apache:httpd:log:AH10108:" @@ -83,7 +83,7 @@ class TestNotify: self.configure_httpd(env, self.domain, f""" MDNotifyCmd {command} {args} """) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([self.domain], restart=False) time.sleep(1) stat = env.get_md_status(self.domain) @@ -102,7 +102,7 @@ class TestNotify: self.configure_httpd(env, self.domain, f""" MDNotifyCmd {command} {args} {extra_arg} """) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([self.domain], restart=False) time.sleep(1) stat = env.get_md_status(self.domain) @@ -125,7 +125,7 @@ class TestNotify: conf.add_vhost(domains1) conf.add_vhost(domains2) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([md1, md2], restart=False) time.sleep(1) stat = env.get_md_status(md1) diff -pruN 2.4.63-1/test/modules/md/test_901_message.py 2.4.64-1/test/modules/md/test_901_message.py --- 2.4.63-1/test/modules/md/test_901_message.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_901_message.py 2025-02-05 12:41:51.000000000 +0000 @@ -22,7 +22,7 @@ class TestMessage: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -43,7 +43,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_file(env.store_staged_file(domain, 'job.json')) stat = env.get_md_status(domain) # this command should have failed and logged an error @@ -70,7 +70,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) stat = env.get_md_status(domain) # this command should have failed and logged an error @@ -96,7 +96,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) time.sleep(1) stat = env.get_md_status(domain) @@ -134,7 +134,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # force renew conf = MDConf(env) @@ -144,7 +144,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) env.get_md_status(domain) assert env.await_file(self.mlog) @@ -175,7 +175,7 @@ class TestMessage: conf.end_md() conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert not os.path.isfile(self.mlog) def test_md_901_011(self, env): @@ -201,13 +201,13 @@ class TestMessage: conf.end_md() conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_file(self.mlog) nlines = open(self.mlog).readlines() assert len(nlines) == 1 assert nlines[0].strip() == f"['{self.mcmd}', '{self.mlog}', 'expiring', '{domain}']" # check that we do not get it resend right away again - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' time.sleep(1) nlines = open(self.mlog).readlines() assert len(nlines) == 1 @@ -225,7 +225,7 @@ class TestMessage: conf.add("MDStapling on") conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) env.await_ocsp_status(domain) assert env.await_file(self.mlog) @@ -251,7 +251,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) # set the warn window that triggers right away and a failing message command conf = MDConf(env) @@ -262,7 +262,7 @@ class TestMessage: """) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' env.get_md_status(domain) # this command should have failed and logged an error # shut down server to make sure that md has completed @@ -285,7 +285,7 @@ class TestMessage: """) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_file(self.mlog) # we see the notification logged by the command nlines = open(self.mlog).readlines() @@ -308,7 +308,7 @@ class TestMessage: conf.add_md(domains) conf.add_vhost(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_error(domain) assert env.await_file(self.mlog) time.sleep(1) diff -pruN 2.4.63-1/test/modules/md/test_910_cleanups.py 2.4.64-1/test/modules/md/test_910_cleanups.py --- 2.4.63-1/test/modules/md/test_910_cleanups.py 2021-12-14 11:33:27.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_910_cleanups.py 2025-02-05 12:41:51.000000000 +0000 @@ -19,7 +19,7 @@ class TestCleanups: env.check_acme() env.clear_store() MDConf(env).install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' @pytest.fixture(autouse=True, scope='function') def _method_scope(self, env, request): @@ -45,7 +45,7 @@ class TestCleanups: for name in dirs_before: os.makedirs(os.path.join(challenges_dir, name)) - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' # the one we use is still there assert os.path.isdir(os.path.join(challenges_dir, domain)) # and the others are gone diff -pruN 2.4.63-1/test/modules/md/test_920_status.py 2.4.64-1/test/modules/md/test_920_status.py --- 2.4.63-1/test/modules/md/test_920_status.py 2024-09-17 12:10:23.000000000 +0000 +++ 2.4.64-1/test/modules/md/test_920_status.py 2025-02-05 12:41:51.000000000 +0000 @@ -36,7 +36,7 @@ class TestStatus: conf.add_md(domains) conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) # we started without a valid certificate, so we expect /.httpd/certificate-status # to not give information about one and - since we waited for the ACME signup @@ -49,7 +49,7 @@ class TestStatus: assert 'sha256-fingerprint' in status['renewal']['cert']['rsa'] # restart and activate # once activated, the staging must be gone and attributes exist for the active cert - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' status = env.get_certificate_status(domain) assert 'renewal' not in status assert 'sha256-fingerprint' in status['rsa'] @@ -64,7 +64,7 @@ class TestStatus: conf.add_md(domains) conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) # copy a real certificate from LE over to staging staged_cert = os.path.join(env.store_dir, 'staging', domain, 'pubcert.pem') @@ -87,7 +87,7 @@ class TestStatus: conf.add("MDCertificateStatus off") conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) status = env.get_certificate_status(domain) assert not status @@ -100,7 +100,7 @@ class TestStatus: conf.add("MDCertificateStatus off") conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain]) status = env.get_md_status("") assert "version" in status @@ -114,6 +114,7 @@ class TestStatus: conf = MDConf(env, std_vhosts=False, std_ports=False, text=f""" MDBaseServer on MDPortMap http:- https:{env.https_port} +MDStapling on ServerName {domain} @@ -137,7 +138,7 @@ Protocols h2 http/1.1 acme-tls/1 """) conf.add_md(domains) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False, via_domain=env.http_addr, use_https=False) status = env.get_md_status("", via_domain=env.http_addr, use_https=False) @@ -160,6 +161,8 @@ Protocols h2 http/1.1 acme-tls/1 assert int(m.group(1)) == 0 m = re.search(r'ManagedCertificatesReady: (\d+)', status, re.MULTILINE) assert int(m.group(1)) == 1 + m = re.search(r'ManagedDomain\[0]Stapling: (on)', status, re.MULTILINE) + assert m, f'{status}' def test_md_920_011(self, env): # MD with static cert files in base server, see issue #161 @@ -205,13 +208,13 @@ Protocols h2 http/1.1 acme-tls/1 conf.add("SSLEngine off") conf.end_vhost() conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' status = env.get_md_status(domain, via_domain=env.http_addr, use_https=False) assert status assert 'renewal' not in status print(status) assert status['state'] == env.MD_S_COMPLETE - assert status['renew-mode'] == 1 # manual + assert status['renew-mode'] == 0 # manual # MD with 2 certificates def test_md_920_020(self, env): @@ -223,7 +226,7 @@ Protocols h2 http/1.1 acme-tls/1 conf.add_md(domains) conf.add_vhost(domain) conf.install() - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' assert env.await_completion([domain], restart=False) # In the stats JSON, we expect 2 certificates under 'renewal' stat = env.get_md_status(domain) @@ -239,7 +242,7 @@ Protocols h2 http/1.1 acme-tls/1 assert 'rsa' in status['renewal']['cert'] # restart and activate # once activated, certs are listed in status - assert env.apache_restart() == 0 + assert env.apache_restart() == 0, f'{env.apachectl_stderr}' stat = env.get_md_status(domain) assert 'cert' in stat assert 'valid' in stat['cert'] diff -pruN 2.4.63-1/test/travis_Dockerfile_slapd.centos 2.4.64-1/test/travis_Dockerfile_slapd.centos --- 2.4.63-1/test/travis_Dockerfile_slapd.centos 2024-05-30 14:52:56.000000000 +0000 +++ 2.4.64-1/test/travis_Dockerfile_slapd.centos 2025-01-31 14:38:37.000000000 +0000 @@ -1,5 +1,5 @@ FROM quay.io/centos/centos:stream9 -RUN dnf install -y epel-release && \ - dnf install -y openldap openldap-clients openldap-servers openldap-devel && \ - dnf -y clean all --enablerepo='*' +RUN rpm -q openldap-servers || (dnf install --refresh -y epel-release && \ + dnf install --nobest -y openldap-clients openldap-servers openldap-devel && \ + dnf -y clean all --enablerepo='*') CMD /usr/sbin/slapd -u ldap -d1 '-h ldap:// ldapi:///' diff -pruN 2.4.63-1/test/travis_before_linux.sh 2.4.64-1/test/travis_before_linux.sh --- 2.4.63-1/test/travis_before_linux.sh 2024-05-30 14:52:56.000000000 +0000 +++ 2.4.64-1/test/travis_before_linux.sh 2025-04-09 15:53:57.000000000 +0000 @@ -24,7 +24,6 @@ fi function install_apx() { local name=$1 local version=$2 - local root=https://svn.apache.org/repos/asf/apr/${name} local prefix=${HOME}/root/${name}-${version} local build=${HOME}/build/${name}-${version} local giturl=https://github.com/apache/${name}.git @@ -32,30 +31,38 @@ function install_apx() { local buildconf=$4 case $version in - trunk) url=${root}/trunk ;; - *.x) url=${root}/branches/${version} ;; - *) url=${root}/tags/${version} ;; + trunk|*.x) ref=refs/heads/${version} ;; + *) ref=refs/tags/${version} ;; esac - local revision=`svn info --show-item last-changed-revision ${url}` + # Fetch the object ID (hash) of latest commit + local commit=`git ls-remote ${giturl} ${ref} | cut -f1` + if test -z "$commit"; then + : Could not determine latest commit hash for ${ref} in ${giturl} - check branch is valid? + exit 1 + fi # Blow away the cached install root if the cached install is stale # or doesn't match the expected configuration. - grep -q "${version} ${revision} ${config} CC=$CC" ${HOME}/root/.key-${name} || rm -rf ${prefix} + grep -q "${version} ${commit} ${config} CC=$CC" ${HOME}/root/.key-${name} || rm -rf ${prefix} if test -d ${prefix}; then return 0 fi - git clone -q --depth=1 --branch=$version ${giturl} ${build} + git init -q ${build} pushd $build + # Clone and checkout the commit identified above. + git remote add origin ${giturl} + git fetch -q --depth=1 origin ${commit} + git checkout ${commit} ./buildconf ${buildconf} ./configure --prefix=${prefix} ${config} make -j2 make install popd - echo ${version} ${revision} "${config}" "CC=${CC}" > ${HOME}/root/.key-${name} + echo ${version} ${commit} "${config}" "CC=${CC}" > ${HOME}/root/.key-${name} } # Allow to load $HOME/build/apache/httpd/.gdbinit @@ -66,6 +73,21 @@ echo "add-auto-load-safe-path $HOME/work if ! test -v SKIP_TESTING -o -v NO_TEST_FRAMEWORK; then # Clear CPAN cache if necessary if [ -v CLEAR_CACHE ]; then rm -rf ~/perl5; fi + + if ! perl -V > perlver; then + : Perl binary broken + perl -V + exit 1 + fi + + # Compare the current "perl -V" output with the output at the time + # the cache was built; flush the cache if it's changed to avoid + # failure later when /usr/bin/perl refuses to load a mismatched XS + # module. + if ! cmp -s perlver ~/perl5/.perlver; then + : Purging cache since "perl -V" output has changed + rm -rf ~/perl5 + fi cpanm --local-lib=~/perl5 local::lib && eval $(perl -I ~/perl5/lib/perl5/ -Mlocal::lib) @@ -78,11 +100,11 @@ if ! test -v SKIP_TESTING -o -v NO_TEST_ # CC=gcc, e.g. for the CC="gcc -m32" case the builds are not correct # otherwise. CC=gcc cpanm --notest $pkgs - - # Set cache key. - echo $pkgs > ~/perl5/.key unset pkgs + # Cache the perl -V output for future verification. + mv perlver ~/perl5/.perlver + # Make a shallow clone of httpd-tests git repo. git clone -q --depth=1 https://github.com/apache/httpd-tests.git test/perl-framework fi
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] -svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top +svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Aktiviert DNS-Lookups auf Client-IP-Adressen
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Aktiviert DNS-Lookups auf Client-IP-Adressen
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is +
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]Parametername> ... - </IfDefine>svdhC
    Schließt Direktiven ein, die nur ausgeführt werden, +
    <IfDefine [!]Parametername> ... + </IfDefine>svdhC
    Schließt Direktiven ein, die nur ausgeführt werden, wenn eine Testbedingung beim Start wahr ist
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]Modulname|Modulbezeichner> - ... </IfModule>svdhC
    Schließt Direktiven ein, die abhängig vom +
    <IfModule [!]Modulname|Modulbezeichner> + ... </IfModule>svdhC
    Schließt Direktiven ein, die abhängig vom Vorhandensein oder Fehlen eines speziellen Moduls ausgeführt werden
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include Dateiname|VerzeichnissvdC
    Fügt andere Konfigurationsdateien innerhalb der +
    Include Dateiname|VerzeichnissvdC
    Fügt andere Konfigurationsdateien innerhalb der Server-Konfigurationsdatei ein
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing +
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    Various configuration settings for directory +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Aktiviert persistente HTTP-Verbindungen
    KeepAliveTimeout Sekunden 5 svC
    Zeitspanne, die der Server während persistenter Verbindungen +
    KeepAlive On|Off On svC
    Aktiviert persistente HTTP-Verbindungen
    KeepAliveTimeout Sekunden 5 svC
    Zeitspanne, die der Server während persistenter Verbindungen auf nachfolgende Anfragen wartet
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit Methode [Methode] ... > ... - </Limit>svdhC
    Beschränkt die eingeschlossenen Zugriffskontrollen auf +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit Methode [Methode] ... > ... + </Limit>svdhC
    Beschränkt die eingeschlossenen Zugriffskontrollen auf bestimmte HTTP-Methoden
    <LimitExcept Methode [Methode] ... > ... - </LimitExcept>svdhC
    Beschränkt Zugriffskontrollen auf alle HTTP-Methoden +
    <LimitExcept Methode [Methode] ... > ... + </LimitExcept>svdhC
    Beschränkt Zugriffskontrollen auf alle HTTP-Methoden außer den genannten
    LimitInternalRecursion Zahl [Zahl] 10 svC
    Bestimmt die maximale Anzahl interner Umleitungen und +
    LimitInternalRecursion Zahl [Zahl] 10 svC
    Bestimmt die maximale Anzahl interner Umleitungen und verschachtelter Unteranfragen
    LimitRequestBody Bytes 0 svdhC
    Begrenzt die Gesamtgröße des vom Client gesendeten +
    LimitRequestBody Bytes 0 svdhC
    Begrenzt die Gesamtgröße des vom Client gesendeten HTTP-Request-Body
    LimitRequestFields Anzahl 100 sC
    Begrenzt die Anzahl der HTTP-Request-Header, die vom Client +
    LimitRequestFields Anzahl 100 sC
    Begrenzt die Anzahl der HTTP-Request-Header, die vom Client entgegengenommen werden
    LimitRequestFieldsize BytessC
    Begrenzt die Länge des vom Client gesendeten +
    LimitRequestFieldsize BytessC
    Begrenzt die Länge des vom Client gesendeten HTTP-Request-Headers
    LimitRequestLine Bytes 8190 sC
    Begrenzt die Länge der vom Client entgegengenommenen +
    LimitRequestLine Bytes 8190 sC
    Begrenzt die Länge der vom Client entgegengenommenen HTTP-Anfragezeile
    LimitXMLRequestBody Bytes 1000000 svdhC
    Begrenzt die Größe eines XML-basierten +
    LimitXMLRequestBody Bytes 1000000 svdhC
    Begrenzt die Größe eines XML-basierten Request-Bodys
    Listen [IP-Addresse:]PortsM
    IP-Adressen und Ports, an denen der Server lauscht
    ListenBacklog backlogsM
    Maximale Länge der Warteschlange schwebender +
    Listen [IP-Addresse:]PortsM
    IP-Adressen und Ports, an denen der Server lauscht
    ListenBacklog backlogsM
    Maximale Länge der Warteschlange schwebender Verbindungen
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list +
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location - URL-Pfad|URL> ... </Location>svC
    Wendet die enthaltenen Direktiven nur auf die entsprechenden +
    <Location + URL-Pfad|URL> ... </Location>svC
    Wendet die enthaltenen Direktiven nur auf die entsprechenden URLs an
    <LocationMatch - regex> ... </LocationMatch>svC
    Wendet die enthaltenen Direktiven nur auf URLs an, die auf +
    <LocationMatch + regex> ... </LocationMatch>svC
    Wendet die enthaltenen Direktiven nur auf URLs an, die auf reguläre Ausdrücke passen
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel Level warn svC
    Steuert die Ausführlichkeit des Fehlerprotokolls
    LogMessage message +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel Level warn svC
    Steuert die Ausführlichkeit des Fehlerprotokolls
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests Anzahl 100 svC
    Anzahl der Anfragen, die bei einer persistenten Verbindung +
    MaxKeepAliveRequests Anzahl 100 svC
    Anzahl der Anfragen, die bei einer persistenten Verbindung zulässig sind
    MaxMemFree KBytes 0 sM
    Maximale Menge des Arbeitsspeichers, den die +
    MaxMemFree KBytes 0 sM
    Maximale Menge des Arbeitsspeichers, den die Haupt-Zuteilungsroutine verwalten darf, ohne free() aufzurufen
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers Anzahl 10 sM
    Maximale Anzahl der unbeschäftigten Kindprozesse des +
    MaxSpareServers Anzahl 10 sM
    Maximale Anzahl der unbeschäftigten Kindprozesse des Servers
    MaxSpareThreads AnzahlsM
    Maximale Anzahl unbeschäftigter Threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareThreads AnzahlsM
    Maximale Anzahl unbeschäftigter Threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] -svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top +svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is +
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... - </IfDefine>svdhC
    Encloses directives that will be processed only +
    <IfDefine [!]parameter-name> ... + </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... - </IfModule>svdhC
    Encloses directives that are processed conditional on the +
    <IfModule [!]module-file|module-identifier> ... + </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing +
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    Various configuration settings for directory +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent +
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... - </Limit>dhC
    Restrict enclosed access controls to only certain HTTP +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... + </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... - </LimitExcept>dhC
    Restrict access controls to all HTTP methods +
    <LimitExcept method [method] ... > ... + </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested +
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent +
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that +
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the +
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted +
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server +
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list +
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location - URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching +
    <Location + URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch - regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression +
    <LocationMatch + regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... - warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message + warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent +
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed +
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] -svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top +svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is +
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... - </IfDefine>svdhC
    Encloses directives that will be processed only +
    <IfDefine [!]parameter-name> ... + </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... - </IfModule>svdhC
    Encloses directives that are processed conditional on the +
    <IfModule [!]module-file|module-identifier> ... + </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include [optional|strict] file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    Include [optional|strict] file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing +
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    Various configuration settings for directory +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent +
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... - </Limit>dhC
    Restrict enclosed access controls to only certain HTTP +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... + </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... - </LimitExcept>dhC
    Restrict access controls to all HTTP methods +
    <LimitExcept method [method] ... > ... + </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested +
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent +
    LimitRequestBody bytes 0 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that +
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the +
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted +
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server +
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list +
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location - URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching +
    <Location + URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch - regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression +
    <LocationMatch + regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... - warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message + warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent +
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed +
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHints on|off off svE
    Contrôle l'envoi de codes d'état 103
    H2MaxDataFrameLen n 0 svE
    Nombre maximal d'octets dans une trame HTTP/2 DATA
    H2MaxSessionStreams n 100 svE
    Nombre maximal de flux actifs par session HTTP/2.
    H2MaxWorkerIdleSeconds n 600 sE
    Nombre maximal de secondes pendant lequel une unité de +
    H2MaxHeaderBlockLen n 0 svE
    Taille maximale des en-têtes d’une réponse
    H2MaxSessionStreams n 100 svE
    Nombre maximal de flux actifs par session HTTP/2.
    H2MaxWorkerIdleSeconds n 600 sE
    Nombre maximal de secondes pendant lequel une unité de traitement h2 pourra rester inactive sans être arrêtée.
    H2MaxWorkers nsE
    Nombre maximal de threads à utiliser pour chaque processus +
    H2MaxWorkers nsE
    Nombre maximal de threads à utiliser pour chaque processus enfant.
    H2MinWorkers nsE
    Nombre minimal de threads à utiliser pour chaque processus +
    H2MinWorkers nsE
    Nombre minimal de threads à utiliser pour chaque processus enfant.
    H2ModernTLSOnly on|off on svE
    Impose les connexions HTTP/2 en mode "TLS moderne" +
    H2ModernTLSOnly on|off on svE
    Impose les connexions HTTP/2 en mode "TLS moderne" seulement
    H2OutputBuffering on|off on svE
    Contrôle la mise en tampon du flux de sortie
    H2Padding numbits 0 svE
    Spécifie un intervalle de nombres d'octets de bourrage à +
    H2OutputBuffering on|off on svE
    Contrôle la mise en tampon du flux de sortie
    H2Padding numbits 0 svE
    Spécifie un intervalle de nombres d'octets de bourrage à ajouter aux trames utiles
    H2ProxyRequests on|off off svE
    Active/Désactive les requêtes sous mandat direct via HTTP/2
    H2Push on|off on svdhE
    Activation/désactivation du server push H2
    H2PushDiarySize n 256 svE
    Taille du journal des Pushes H2
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    Priorité des pushes H2
    H2PushResource [add] path [critical]svdhE
    Déclare des ressources à proposer ("pusher") au client
    H2SerializeHeaders on|off off svE
    Active/désactive la sérialisation du traitement des +
    H2ProxyRequests on|off off svE
    Active/Désactive les requêtes sous mandat direct via HTTP/2
    H2Push on|off on svdhE
    Activation/désactivation du server push H2
    H2PushDiarySize n 256 svE
    Taille du journal des Pushes H2
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    Priorité des pushes H2
    H2PushResource [add] path [critical]svdhE
    Déclare des ressources à proposer ("pusher") au client
    H2SerializeHeaders on|off off svE
    Active/désactive la sérialisation du traitement des requêtes/réponses
    H2StreamMaxMemSize bytes 65536 svE
    Quantité maximale de données en sortie mises en tampon par +
    H2StreamMaxMemSize bytes 65536 svE
    Quantité maximale de données en sortie mises en tampon par flux.
    H2StreamTimeout time-interval[s]svdE
    Temps d'attente maximum lors de l'envoi/réception de +
    H2StreamTimeout time-interval[s]svdE
    Temps d'attente maximum lors de l'envoi/réception de données pour le traitement d'un flux
    H2TLSCoolDownSecs seconds 1 svE
    Durée d'inactivité d'une connexion TLS avant diminution de +
    H2TLSCoolDownSecs seconds 1 svE
    Durée d'inactivité d'une connexion TLS avant diminution de la taille des paquets
    H2TLSWarmUpSize amount 1048576 svE
    Taille des paquets durant la phase initiale de la connexion +
    H2TLSWarmUpSize amount 1048576 svE
    Taille des paquets durant la phase initiale de la connexion TLS
    H2Upgrade on|off on pour h2c, off po +svdhE
    Activation/Désactivation du protocole de mise à jour H2
    H2WebSockets on|off off svE
    Active/désactive les WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Taille maximale des paquets de données pour les transmissions client +
    H2Upgrade on|off on pour h2c, off po +svdhE
    Activation/Désactivation du protocole de mise à jour H2
    H2WebSockets on|off off svE
    Active/désactive les WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Taille maximale des paquets de données pour les transmissions client vers serveur.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note en-tête [[expr=]valeur [remplacement] [early|env=[!]variable|expr=expression]] -svdhE
    Configure les en-têtes d'une réponse HTTP
    HeaderName nom fichiersvdhB
    Nom du fichier qui sera inséré au début de la page +svdhE
    Configure les en-têtes d'une réponse HTTP
    HeaderName nom fichiersvdhB
    Nom du fichier qui sera inséré au début de la page contenant l'index
    HeartbeatAddress addr:portsX
    Adresse multicast à laquelle envoyer les requêtes +
    HeartbeatAddress addr:portsX
    Adresse multicast à laquelle envoyer les requêtes heartbeat
    HeartbeatListen addr:portsX
    Adresse multicast d'écoute des requêtes entrantes heartbeat
    HeartbeatMaxServers nombre-de-serveurs 10 sX
    Spécifie le nombre maximal de serveurs qui pourront envoyer +
    HeartbeatListen addr:portsX
    Adresse multicast d'écoute des requêtes entrantes heartbeat
    HeartbeatMaxServers nombre-de-serveurs 10 sX
    Spécifie le nombre maximal de serveurs qui pourront envoyer des requêtes heartbeat à ce serveur.
    HeartbeatStorage chemin fichier logs/hb.dat sX
    Chemin vers le stockage des données heartbeat lorsqu'on utilise un +
    HeartbeatStorage chemin fichier logs/hb.dat sX
    Chemin vers le stockage des données heartbeat lorsqu'on utilise un fichier bidimensionnel (flat-file)
    HeartbeatStorage chemin-fichier logs/hb.dat sX
    Indique le chemin permettant de lire les données +
    HeartbeatStorage chemin-fichier logs/hb.dat sX
    Indique le chemin permettant de lire les données heartbeat
    HostnameLookups On|Off|Double Off svdC
    Active la recherche DNS sur les adresses IP des +
    HostnameLookups On|Off|Double Off svdC
    Active la recherche DNS sur les adresses IP des clients
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modifie les contraintes sur les messages des requêtes HTTP
    IdentityCheck On|Off Off svdE
    Active la journalisation de l'identité RFC 1413 de +
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modifie les contraintes sur les messages des requêtes HTTP
    IdentityCheck On|Off Off svdE
    Active la journalisation de l'identité RFC 1413 de l'utilisateur distant
    IdentityCheckTimeout secondes 30 svdE
    Détermine le délai d'attente pour les requêtes +
    IdentityCheckTimeout secondes 30 svdE
    Détermine le délai d'attente pour les requêtes ident
    <If expression> ... </If>svdhC
    Contient des directives qui ne s'appliquent que si une +
    <If expression> ... </If>svdhC
    Contient des directives qui ne s'appliquent que si une condition est satisfaite au cours du traitement d'une requête
    <IfDefine [!]paramètre> ... - </IfDefine>svdhC
    Contient des directives qui ne s'appliqueront que si un +
    <IfDefine [!]paramètre> ... + </IfDefine>svdhC
    Contient des directives qui ne s'appliqueront que si un test retourne "vrai" au démarrage du serveur
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Regroupe des directives dont le traitement est conditionné par la +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une directive particulière
    <IfFile [!]filename> ... - </IfFile>svdhC
    Regroupe des directives qui ne seront traitées que si un fichier +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Regroupe des directives qui ne seront traitées que si un fichier existe au démarrage
    <IfModule [!]fichier module|identificateur -module> ... </IfModule>svdhC
    Contient des directives qui ne s'appliquent qu'en fonction +
    <IfModule [!]fichier module|identificateur +module> ... </IfModule>svdhC
    Contient des directives qui ne s'appliquent qu'en fonction de la présence ou de l'absence d'un module spécifique
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Regroupe des directives dont le traitement est conditionné par la +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Regroupe des directives dont le traitement est conditionné par la présence ou l'absence d'une section particulière
    <IfVersion [[!]opérateur] version> ... -</IfVersion>svdhE
    Contient des portions de configuration dépendantes de la +
    <IfVersion [[!]opérateur] version> ... +</IfVersion>svdhE
    Contient des portions de configuration dépendantes de la version
    ImapBase map|referer|URL http://nom_serveur/ +svdhB
    Valeur par défaut de la directive base des +
    ImapBase map|referer|URL http://nom_serveur/ +svdhB
    Valeur par défaut de la directive base des fichiers imagemap
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Action à entreprendre par défaut lorsqu'un fichier imagemap +
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Action à entreprendre par défaut lorsqu'un fichier imagemap est invoqué avec des coordonnées qui ne correspondent à aucune cible
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action à entreprendre si aucune coordonnée n'est fournie +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action à entreprendre si aucune coordonnée n'est fournie lorsqu'on invoque un fichier imagemap
    Include chemin-fichier|chemin-répertoire|wildcardsvdC
    Inclut d'autres fichiers de configuration dans un des +
    Include chemin-fichier|chemin-répertoire|wildcardsvdC
    Inclut d'autres fichiers de configuration dans un des fichiers de configuration du serveur
    IncludeOptional -file-path|directory-path|wildcardsvdC
    Inclusion de fichiers dans le fichier de configuration
    IndexHeadInsert "marque ..."svdhB
    Insère du texte dans la section HEAD de la page +
    IncludeOptional +file-path|directory-path|wildcardsvdC
    Inclusion de fichiers dans le fichier de configuration
    IndexHeadInsert "marque ..."svdhB
    Insère du texte dans la section HEAD de la page d'index.
    IndexIgnore fichier [fichier] ... "." svdhB
    Ajouts à la liste des fichiers à cacher lors de l'affichage +
    IndexIgnore fichier [fichier] ... "." svdhB
    Ajouts à la liste des fichiers à cacher lors de l'affichage de l'index d'un répertoire
    IndexIgnoreReset ON|OFFsvdhB
    Vide la liste des fichiers à cacher lors de l'affichage du +
    IndexIgnoreReset ON|OFFsvdhB
    Vide la liste des fichiers à cacher lors de l'affichage du contenu d'un répertoire
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    Diverses options de configuration pour l'indexation d'un +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    Diverses options de configuration pour l'indexation d'un répertoire
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    Définit l'ordre d'affichage par défaut d'un index de +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    Définit l'ordre d'affichage par défaut d'un index de répertoire
    IndexStyleSheet chemin-urlsvdhB
    Ajoute une feuille de style CSS à l'index du +
    IndexStyleSheet chemin-urlsvdhB
    Ajoute une feuille de style CSS à l'index du répertoire
    InputSed commande-seddh
    Commande sed à exécuter pour le filtrage des données d'une +
    InputSed commande-seddh
    Commande sed à exécuter pour le filtrage des données d'une requête (en général des données POST)
    ISAPIAppendLogToErrors on|off off svdhB
    Enregistrement des requêtes +
    ISAPIAppendLogToErrors on|off off svdhB
    Enregistrement des requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans le journal des erreurs
    ISAPIAppendLogToQuery on|off on svdhB
    Enregistre les requêtes +
    ISAPIAppendLogToQuery on|off on svdhB
    Enregistre les requêtes HSE_APPEND_LOG_PARAMETER de la part des extensions ISAPI dans la partie arguments de la requête
    ISAPICacheFile chemin-fichier +
    ISAPICacheFile chemin-fichier [chemin-fichier] -...svB
    Fichiers .dll ISAPI devant être chargés au +...svB
    Fichiers .dll ISAPI devant être chargés au démarrage
    ISAPIFakeAsync on|off off svdhB
    Emulation du support des entrées/sorties asynchrones pour +
    ISAPIFakeAsync on|off off svdhB
    Emulation du support des entrées/sorties asynchrones pour les appels ISAPI
    ISAPILogNotSupported on|off off svdhB
    Journalisation des demandes de fonctionnalités non +
    ISAPILogNotSupported on|off off svdhB
    Journalisation des demandes de fonctionnalités non supportées de la part des extensions ISAPI
    ISAPIReadAheadBuffer taille 49152 svdhB
    Taille du tampon de lecture anticipée envoyé aux extensions +
    ISAPIReadAheadBuffer taille 49152 svdhB
    Taille du tampon de lecture anticipée envoyé aux extensions ISAPI
    KeepAlive On|Off On svC
    Active les connexions HTTP persistantes
    KeepAliveTimeout nombre[ms] 5 svC
    Durée pendant laquelle le serveur va attendre une requête +
    KeepAlive On|Off On svC
    Active les connexions HTTP persistantes
    KeepAliveTimeout nombre[ms] 5 svC
    Durée pendant laquelle le serveur va attendre une requête avant de fermer une connexion persistante
    KeptBodySize taille maximale en octets 0 dB
    Conserve le corps de la requête à concurrence de la taille +
    KeptBodySize taille maximale en octets 0 dB
    Conserve le corps de la requête à concurrence de la taille maximale spécifiée, pour une utilisation éventuelle par des filtres comme mod_include.
    LanguagePriority langage-MIME [langage-MIME] -...svdhB
    L'ordre de priorité des variantes de langages pour les +
    LanguagePriority langage-MIME [langage-MIME] +...svdhB
    L'ordre de priorité des variantes de langages pour les cas où le client n'a pas formulé de préférences
    LDAPCacheEntries nombre 1024 sE
    Nombre maximum d'entrées dans le cache LDAP +
    LDAPCacheEntries nombre 1024 sE
    Nombre maximum d'entrées dans le cache LDAP primaire
    LDAPCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache restent +
    LDAPCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache restent valides.
    LDAPConnectionPoolTTL n -1 svE
    Désactive les connexions d'arrière-plan qui sont restées +
    LDAPConnectionPoolTTL n -1 svE
    Désactive les connexions d'arrière-plan qui sont restées inactives trop longtemps au sein du jeu de connexions.
    LDAPConnectionTimeout secondessE
    Spécifie le délai d'attente en secondes de la socket de +
    LDAPConnectionTimeout secondessE
    Spécifie le délai d'attente en secondes de la socket de connexion
    LDAPLibraryDebug 7sE
    Active le débogage dans le SDK LDAP
    LDAPOpCacheEntries nombre 1024 sE
    Nombre d'entrées utilisées pour mettre en cache les +
    LDAPLibraryDebug 7sE
    Active le débogage dans le SDK LDAP
    LDAPOpCacheEntries nombre 1024 sE
    Nombre d'entrées utilisées pour mettre en cache les opérations de comparaison LDAP
    LDAPOpCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache d'opérations +
    LDAPOpCacheTTL secondes 600 sE
    Durée pendant laquelle les entrées du cache d'opérations restent valides
    LDAPReferralHopLimit nombredhE
    Le nombre maximum de redirections vers des serveurs +
    LDAPReferralHopLimit nombredhE
    Le nombre maximum de redirections vers des serveurs alternatifs (referrals) avant l'abandon de la requête LDAP.
    LDAPReferrals On|Off|default On dhE
    Active la redirection vers des serveurs alternatifs au +
    LDAPReferrals On|Off|default On dhE
    Active la redirection vers des serveurs alternatifs au cours des requêtes vers le serveur LDAP.
    LDAPRetries nombre d'essais 3 sE
    Définit le nombre maximum de tentatives de connexions au +
    LDAPRetries nombre d'essais 3 sE
    Définit le nombre maximum de tentatives de connexions au serveur LDAP.
    LDAPRetryDelay secondes 0 sE
    Définit le temps d'attente avant un autre essai de connexion au +
    LDAPRetryDelay secondes 0 sE
    Définit le temps d'attente avant un autre essai de connexion au serveur LDAP.
    LDAPSharedCacheFile chemin/fichiersE
    Définit le fichier du cache en mémoire +
    LDAPSharedCacheFile chemin/fichiersE
    Définit le fichier du cache en mémoire partagée
    LDAPSharedCacheSize octets 500000 sE
    Taille en octets du cache en mémoire partagée
    LDAPTimeout secondes 60 sE
    Spécifie le délai d'attente pour les opérations de +
    LDAPSharedCacheSize octets 500000 sE
    Taille en octets du cache en mémoire partagée
    LDAPTimeout secondes 60 sE
    Spécifie le délai d'attente pour les opérations de recherche et d'identification LDAP en secondes
    LDAPTrustedClientCert type -chemin/nom-fichier/alias [mot de passe]svdhE
    Définit le nom de fichier contenant un certificat client ou +
    LDAPTrustedClientCert type +chemin/nom-fichier/alias [mot de passe]svdhE
    Définit le nom de fichier contenant un certificat client ou un alias renvoyant vers un certificat client spécifique à une connexion. Tous les SDK LDAP ne supportent pas les certificats clients par connexion.
    LDAPTrustedGlobalCert type -chemin/nom-fichier [mot de passe]sE
    Définit le nom de fichier ou la base de données contenant +
    LDAPTrustedGlobalCert type +chemin/nom-fichier [mot de passe]sE
    Définit le nom de fichier ou la base de données contenant les Autorités de Certification de confiance globales ou les certificats clients globaux
    LDAPTrustedMode typesvE
    Spécifie le mode (SSL ou TLS) à utiliser lors de la +
    LDAPTrustedMode typesvE
    Spécifie le mode (SSL ou TLS) à utiliser lors de la connexion à un serveur LDAP.
    LDAPVerifyServerCert On|Off On sE
    Force la vérification du certificat du +
    LDAPVerifyServerCert On|Off On sE
    Force la vérification du certificat du serveur
    <Limit méthode [méthode] ... > ... - </Limit>dhC
    Limite les contrôles d'accès que la section contient à +
    <Limit méthode [méthode] ... > ... + </Limit>dhC
    Limite les contrôles d'accès que la section contient à certaines méthodes HTTP
    <LimitExcept méthode [méthode] ... > ... - </LimitExcept>dhC
    Applique les contrôles d'accès à toutes les méthodes HTTP, +
    <LimitExcept méthode [méthode] ... > ... + </LimitExcept>dhC
    Applique les contrôles d'accès à toutes les méthodes HTTP, sauf celles qui sont spécifiées
    LimitInternalRecursion nombre [nombre] 10 svC
    Détermine le nombre maximal de redirections internes et de +
    LimitInternalRecursion nombre [nombre] 10 svC
    Détermine le nombre maximal de redirections internes et de sous-requêtes imbriquées
    LimitRequestBody octets 1073741824 svdhC
    limite la taille maximale du corps de la requête HTTP +
    LimitRequestBody octets 1073741824 svdhC
    limite la taille maximale du corps de la requête HTTP envoyée par le client
    LimitRequestFields nombre 100 svC
    Limite le nombre de champs d'en-tête autorisés dans une +
    LimitRequestFields nombre 100 svC
    Limite le nombre de champs d'en-tête autorisés dans une requête HTTP
    LimitRequestFieldSize octets 8190 svC
    Dédinit la taille maximale autorisée d'un en-tête de +
    LimitRequestFieldSize octets 8190 svC
    Dédinit la taille maximale autorisée d'un en-tête de requête HTTP
    LimitRequestLine octets 8190 svC
    Définit la taille maximale d'une ligne de requête +
    LimitRequestLine octets 8190 svC
    Définit la taille maximale d'une ligne de requête HTTP
    LimitXMLRequestBody octets 1000000 svdhC
    Définit la taille maximale du corps d'une requête au format +
    LimitXMLRequestBody octets 1000000 svdhC
    Définit la taille maximale du corps d'une requête au format XML
    Listen [adresse IP:]numéro port -[protocole]sM
    Les adresses IP et ports sur lesquels le serveur écoute
    ListenBackLog backlog 511 sM
    Longueur maximale de la liste d'attente des +
    Listen [adresse IP:]numéro port +[protocole]sM
    Les adresses IP et ports sur lesquels le serveur écoute
    ListenBackLog backlog 511 sM
    Longueur maximale de la liste d'attente des connexions
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Rapport entre le nombre de coeurs de processeur activés et +
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Rapport entre le nombre de coeurs de processeur activés et le nombre de segments d'écoute
    LoadFile nom-fichier [nom-fichier] ...svE
    Liaison du fichier objet ou de la bibliothèque +
    LoadFile nom-fichier [nom-fichier] ...svE
    Liaison du fichier objet ou de la bibliothèque spécifié
    LoadModule module nom-fichiersvE
    Liaison avec le serveur du fichier objet ou de la +
    LoadModule module nom-fichiersvE
    Liaison avec le serveur du fichier objet ou de la bibliothèque spécifié, et ajout de ce dernier à la liste des modules actifs
    <Location - chemin URL|URL> ... </Location>svC
    N'applique les directives contenues qu'aux URLs +
    <Location + chemin URL|URL> ... </Location>svC
    N'applique les directives contenues qu'aux URLs spécifiées
    <LocationMatch - regex> ... </LocationMatch>svC
    N'applique les directives contenues qu'aux URLs +
    <LocationMatch + regex> ... </LocationMatch>svC
    N'applique les directives contenues qu'aux URLs correspondant à une expression rationnelle
    LogFormat format|alias -[alias] "%h %l %u %t \"%r\" +svB
    Décrit un format utilisable dans un fichier +
    LogFormat format|alias +[alias] "%h %l %u %t \"%r\" +svB
    Décrit un format utilisable dans un fichier journal
    LogIOTrackTTFB ON|OFF OFF svdhE
    Permet d'enregistrer le délai avant le premier octet (time +
    LogIOTrackTTFB ON|OFF OFF svdhE
    Permet d'enregistrer le délai avant le premier octet (time to first byte - TTFB)
    LogLevel [module:]niveau +
    LogLevel [module:]niveau [module:niveau] ... - warn svdC
    Contrôle la verbosité du journal des erreurs
    LogMessage message + warn svdC
    Contrôle la verbosité du journal des erreurs
    LogMessage message [hook=hook] [expr=expression] -dX
    Enregistre des messages personnalisés dans le journal des +dX
    Enregistre des messages personnalisés dans le journal des erreurs
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Branche une fonction fournisseur d'autorisation dans mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Branche une fonction fournisseur d'autorisation dans mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure le cache de code compilé.
    LuaHookAccessChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase access_checker du +
    LuaCodeCache stat|forever|never stat svdhE
    Configure le cache de code compilé.
    LuaHookAccessChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase access_checker du traitement de la requête
    LuaHookAuthChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase auth_checker du +
    LuaHookAuthChecker /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase auth_checker du traitement de la requête
    LuaHookCheckUserID /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase check_user_id du +
    LuaHookCheckUserID /chemin/vers/lua/script.lua hook_function_name [early|late]svdhE
    Fournit un point d'entrée pour la phase check_user_id du traitement de la requête
    LuaHookFixups /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase de correction du +
    LuaHookFixups /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase de correction du traitement de la requête
    LuaHookInsertFilter /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase insert_filter du +
    LuaHookInsertFilter /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase insert_filter du traitement de la requête
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Permet une insertion dans la phase de journalisation du +
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Permet une insertion dans la phase de journalisation du traitement d'une requête
    LuaHookMapToStorage /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase map_to_storage du +
    LuaHookMapToStorage /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase map_to_storage du traitement de la requête
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase de pré-traduction du +
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase de pré-traduction du traitement d'une requête
    LuaHookTranslateName /chemin/vers/lua/script.lua nom_fonction_hook [early|late]svE
    Fournit un point d'entrée à la phase du nom de +
    LuaHookTranslateName /chemin/vers/lua/script.lua nom_fonction_hook [early|late]svE
    Fournit un point d'entrée à la phase du nom de traduction du traitement de la requête
    LuaHookTypeChecker /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase type_checker du +
    LuaHookTypeChecker /chemin/vers/lua/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la phase type_checker du traitement de la requête
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Contrôle la manière dont les sections de configuration +
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Contrôle la manière dont les sections de configuration parentes sont fusionnées dans les enfants
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage en entrée
    LuaMapHandler modele-uri /chemin/vers/lua/script.lua -[nom-fonction]svdhE
    Met en correspondance un chemin avec un gestionnaire lua
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage de contenu en +
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage en entrée
    LuaMapHandler modele-uri /chemin/vers/lua/script.lua +[nom-fonction]svdhE
    Met en correspondance un chemin avec un gestionnaire lua
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Fournit une fonction Lua pour le filtrage de contenu en sortie
    LuaPackageCPath /chemin/vers/include/?.soasvdhE
    Ajoute un répertoire au package.cpath de lua
    LuaPackagePath /chemin/vers/include/?.luasvdhE
    Ajoute un répertoire au package.path de lua
    LuaQuickHandler /path/to/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la gestion rapide du +
    LuaPackageCPath /chemin/vers/include/?.soasvdhE
    Ajoute un répertoire au package.cpath de lua
    LuaPackagePath /chemin/vers/include/?.luasvdhE
    Ajoute un répertoire au package.path de lua
    LuaQuickHandler /path/to/script.lua hook_function_namesvdhE
    Fournit un point d'entrée pour la gestion rapide du traitement de la requête
    LuaRoot /chemin/vers/un/répertoiresvdhE
    Spécifie le chemin de base pour la résolution des chemins +
    LuaRoot /chemin/vers/un/répertoiresvdhE
    Spécifie le chemin de base pour la résolution des chemins relatifs dans les directives de mod_lua
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    Une valeur parmi once, request, conn, thread -- la valeur par défaut est once
    +
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    Une valeur parmi once, request, conn, thread -- la valeur par défaut est once
    <Macro nom [par1 .. parN]> -... </Macro>svdB
    Définition d'une macro dans un fichier de configuration
    MaxConnectionsPerChild number 0 sM
    Limite le nombre de connexions qu'un processus enfant va +... </Macro>svdB
    Définition d'une macro dans un fichier de configuration
    MaxConnectionsPerChild number 0 sM
    Limite le nombre de connexions qu'un processus enfant va traiter au cours de son fonctionnement
    MaxKeepAliveRequests nombre 100 svC
    Nombre de requêtes permises pour une connexion +
    MaxKeepAliveRequests nombre 100 svC
    Nombre de requêtes permises pour une connexion persistante
    MaxMemFree KOctets 2048 sM
    Quantité maximale de mémoire que l'allocateur principal est +
    MaxMemFree KOctets 2048 sM
    Quantité maximale de mémoire que l'allocateur principal est autorisé à conserver sans appeler free()
    MaxRangeOverlaps default | unlimited | none | nombre de - chevauchements 20 svdC
    Nombre de chevauchements de segments de données autorisé +
    MaxRangeOverlaps default | unlimited | none | nombre de + chevauchements 20 svdC
    Nombre de chevauchements de segments de données autorisé (par exemple 100-200,150-300) avant le renvoi de la ressource complète
    MaxRangeReversals default | unlimited | none | nombre - d'inversions 20 svdC
    Nombre d'inversions d'ordre autorisé dans la spécification des +
    MaxRangeReversals default | unlimited | none | nombre + d'inversions 20 svdC
    Nombre d'inversions d'ordre autorisé dans la spécification des segments de données (par exemple 100-200,50-70) avant le renvoi de la ressource complète
    MaxRanges default | unlimited | none | nombre de segments 200 svdC
    Nombre de segments de données autorisé avant le renvoi de +
    MaxRanges default | unlimited | none | nombre de segments 200 svdC
    Nombre de segments de données autorisé avant le renvoi de l'intégralité de la ressource
    MaxRequestWorkers nombresM
    Nombre maximum de connexions pouvant être traitées +
    MaxRequestWorkers nombresM
    Nombre maximum de connexions pouvant être traitées simultanément
    MaxSpareServers nombre 10 sM
    Nombre maximum de processus serveurs enfants +
    MaxSpareServers nombre 10 sM
    Nombre maximum de processus serveurs enfants inactifs
    MaxSpareThreads nombresM
    Nombre maximum de threads inactifs
    MaxThreads nombre 2048 sM
    Définit le nombre maximum de threads esclaves
    MDActivationDelay durationsX
    Définit le délai d'activation des nouveaux certificats
    MDBaseServer on|off off sX
    Définit si le serveur global peut être géré ou seulement +
    MaxSpareThreads nombresM
    Nombre maximum de threads inactifs
    MaxThreads nombre 2048 sM
    Définit le nombre maximum de threads esclaves
    MDActivationDelay durationsX
    Définit le délai d'activation des nouveaux certificats
    MDBaseServer on|off off sX
    Définit si le serveur global peut être géré ou seulement les serveurs virtuels.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type de négociation ACME utilisée pour prouver l'appartenance +
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type de négociation ACME utilisée pour prouver l'appartenance du domaine.
    MDCertificateAgreement acceptedsX
    Acceptation des conditions d'utilisation de l'autorité de +
    MDCertificateAgreement acceptedsX
    Acceptation des conditions d'utilisation de l'autorité de certification.
    MDCertificateAuthority url letsencrypt sX
    Les URLs du service ACME de l'autorité de certification.
    MDCertificateCheck name urlsX
    Définit le motif de nom pour un nom sitSet de - vérification de certificat et un motif d'URL pour un sitee de - vérification de certificat
    MDCertificateFile path-to-pem-filesX
    Définit un fichier de certificat statique pour le domaine géré.
    MDCertificateKeyFile path-to-filesX
    Définit une clé privée statique pour le certificat +
    MDCertificateAuthority url letsencrypt sX
    Les URLs du service ACME de l'autorité de certification.
    MDCertificateCheck name urlsX
    Définit le motif de nom et d’URL pour un nom de site de + vérification de certificat.
    MDCertificateFile path-to-pem-filesX
    Définit un fichier de certificat statique pour le domaine géré.
    MDCertificateKeyFile path-to-filesX
    Définit une clé privée statique pour le certificat statique.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    L'URL d'un moniteur d'enregistrement de certificat.
    MDCertificateProtocol protocol ACME sX
    Le protocole à utiliser avec l'autorité de certification.
    MDCertificateStatus on|off on sX
    Extrait les informations publiques du certificat au format +
    MDCertificateMonitor name url crt.sh https://crt. +sX
    L'URL d'un moniteur d'enregistrement de certificat.
    MDCertificateProtocol protocol ACME sX
    Le protocole à utiliser avec l'autorité de certification.
    MDCertificateStatus on|off on sX
    Extrait les informations publiques du certificat au format JSON.
    MDChallengeDns01 path-to-commandsX
    Définit la commande d'activation/désactivation des +
    MDChallengeDns01 path-to-commandsX
    Définit la commande d'activation/désactivation des vérifications dns-01
    MDChallengeDns01Version 1|2 1 sX
    Définit le type des arguments avec lesquels appeler +
    MDChallengeDns01Version 1|2 1 sX
    Définit le type des arguments avec lesquels appeler MDChallengeDns01
    MDCheckInterval duration 12h sX
    Détermine la périodicité de la vérification des certificats
    MDContactEmail addresssX
    Adresse Email pour l'enregistrement du compte
    MDDriveMode always|auto|manual auto sX
    Ancien nom de MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Définit les valeurs keyid et hmac de liaison avec les @@ -930,6 +931,8 @@ inactifs
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Mappage des ports externes avec les ports internes pour vérifier à qui appartient le domaine.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Définit le type et la taille des clés privées générées.
    MDProfile namesX
    Utiliser un profile ACME spécifique depuis le CA
    MDProfileMandatory on|off off sX
    Contrôler si un MDProfile est obligatoire.
    MDRenewMode always|auto|manual auto sX
    Contrôle le renouvellement des certificats.
    MDRenewWindow duration 33% sX
    Définit le moment auquel un certificat doit être renouvelé.
    MDRequireHttps off|temporary|permanent off sX
    Redirige le trafic http: vers https: pour les domaines diff -pruN 2.4.63-1/docs/manual/mod/quickreference.html.ja.utf8 2.4.64-1/docs/manual/mod/quickreference.html.ja.utf8 --- 2.4.63-1/docs/manual/mod/quickreference.html.ja.utf8 2025-01-19 08:15:40.000000000 +0000 +++ 2.4.64-1/docs/manual/mod/quickreference.html.ja.utf8 2025-07-07 15:46:03.000000000 +0000 @@ -473,217 +473,219 @@ requests
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo -header [value] [early|env=[!]variable]svdhE
    HTTP 応答ヘッダã®è¨­å®š
    HeaderName filenamesvdhB
    +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo +header [value] [early|env=[!]variable]svdhE
    HTTP 応答ヘッダã®è¨­å®š
    HeaderName filenamesvdhB
    インデックス一覧ã®å…ˆé ­ã«æŒ¿å…¥ã•ã‚Œã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®åå‰
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    クライアント㮠IP アドレス㮠DNS ルックアップを +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    クライアント㮠IP アドレス㮠DNS ルックアップを 有効ã«ã™ã‚‹
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    リモートユーザ㮠RFC 1413 ã«ã‚ˆã‚‹ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’ +
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    リモートユーザ㮠RFC 1413 ã«ã‚ˆã‚‹ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ãƒ­ã‚®ãƒ³ã‚°ã‚’ 有効ã«ã™ã‚‹
    IdentityCheckTimeout seconds 30 svdE
    Ident リクエストãŒã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã¾ã§ã®æœŸé–“を決ã‚ã‚‹
    <If expression> ... </If>svdhC
    実行時ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¡ä»¶ã‚’満ãŸã—ãŸå ´åˆã«ã®ã¿é©ç”¨ã•ã‚Œã‚‹ +
    IdentityCheckTimeout seconds 30 svdE
    Ident リクエストãŒã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã¾ã§ã®æœŸé–“を決ã‚ã‚‹
    <If expression> ... </If>svdhC
    実行時ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¡ä»¶ã‚’満ãŸã—ãŸå ´åˆã«ã®ã¿é©ç”¨ã•ã‚Œã‚‹ ディレクティブを包å«ã™ã‚‹
    <IfDefine [!]parameter-name> ... - </IfDefine>svdhC
    起動時ã«ãƒ†ã‚¹ãƒˆãŒçœŸã§ã‚ã‚‹ã¨ãã®ã¿ã«å‡¦ç†ã•ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ +
    <IfDefine [!]parameter-name> ... + </IfDefine>svdhC
    起動時ã«ãƒ†ã‚¹ãƒˆãŒçœŸã§ã‚ã‚‹ã¨ãã®ã¿ã«å‡¦ç†ã•ã‚Œã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ 囲む
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... - </IfModule>svdhC
    モジュールã®å­˜åœ¨ã™ã‚‹ã‹ã—ãªã„ã‹ã«å¿œã˜ã¦å‡¦ç†ã•ã‚Œã‚‹ +
    <IfModule [!]module-file|module-identifier> ... + </IfModule>svdhC
    モジュールã®å­˜åœ¨ã™ã‚‹ã‹ã—ãªã„ã‹ã«å¿œã˜ã¦å‡¦ç†ã•ã‚Œã‚‹ ディレクティブを囲む
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®šã‚’入れる
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    ãƒãƒ¼ã‚¸ãƒ§ãƒ³ä¾å­˜ã®è¨­å®šã‚’入れる
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-pathsvdC
    サーãƒè¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã‹ã‚‰ä»–ã®è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’å–り込む
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    Include file-path|directory-pathsvdC
    サーãƒè¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ä¸­ã‹ã‚‰ä»–ã®è¨­å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’å–り込む
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    インデックスページ㮠HEAD セクションã«ãƒ†ã‚­ã‚¹ãƒˆã‚’挿入ã™ã‚‹
    IndexIgnore file [file] ...svdhB
    ディレクトリ一覧を行ãªã†éš›ã«ç„¡è¦–ã™ã¹ã +
    IndexHeadInsert "markup ..."svdhB
    インデックスページ㮠HEAD セクションã«ãƒ†ã‚­ã‚¹ãƒˆã‚’挿入ã™ã‚‹
    IndexIgnore file [file] ...svdhB
    ディレクトリ一覧を行ãªã†éš›ã«ç„¡è¦–ã™ã¹ã ファイルリストã«è¿½åŠ 
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    ディレクトリインデックスã®æ§˜ã€…ãªè¨­å®šé …ç›® +
    IndexOptions [+|-]option [[+|-]option] ...svdhB
    ディレクトリインデックスã®æ§˜ã€…ãªè¨­å®šé …ç›®
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    ディレクトリインデックスã®æ¨™æº–ã®é †ç•ªä»˜ã‘を設定
    IndexStyleSheet url-pathsvdhB
    ディレクトリインデックス㫠CSS スタイルシートを追加ã™ã‚‹
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexStyleSheet url-pathsvdhB
    ディレクトリインデックス㫠CSS スタイルシートを追加ã™ã‚‹
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    HTTP ã®æŒç¶šçš„ãªæŽ¥ç¶šã‚’有効ã«ã™ã‚‹
    KeepAliveTimeout seconds 5 svC
    æŒç¶šçš„ãªæŽ¥ç¶šã§æ¬¡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¾ã§ã‚µãƒ¼ãƒãŒå¾…ã¤æ™‚é–“
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeepAlive On|Off On svC
    HTTP ã®æŒç¶šçš„ãªæŽ¥ç¶šã‚’有効ã«ã™ã‚‹
    KeepAliveTimeout seconds 5 svC
    æŒç¶šçš„ãªæŽ¥ç¶šã§æ¬¡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒæ¥ã‚‹ã¾ã§ã‚µãƒ¼ãƒãŒå¾…ã¤æ™‚é–“
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    クライアントãŒå„ªå…ˆåº¦ã‚’示ã•ãªã‹ã£ãŸã¨ãã®è¨€èªžã® variant ã®å„ªå…ˆåº¦ã‚’ +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    クライアントãŒå„ªå…ˆåº¦ã‚’示ã•ãªã‹ã£ãŸã¨ãã®è¨€èªžã® variant ã®å„ªå…ˆåº¦ã‚’ 指定
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... - </Limit>svdhC
    囲ã„ã®ä¸­ã«ã‚るアクセス制御ã®é©ç”¨ã‚’特定㮠HTTP メソッドã®ã¿ã« +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... + </Limit>svdhC
    囲ã„ã®ä¸­ã«ã‚るアクセス制御ã®é©ç”¨ã‚’特定㮠HTTP メソッドã®ã¿ã« 制é™ã™ã‚‹
    <LimitExcept method [method] ... > ... - </LimitExcept>svdhC
    指定ã•ã‚ŒãŸã‚‚ã®ä»¥å¤–ã® HTTP メソッドã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’ +
    <LimitExcept method [method] ... > ... + </LimitExcept>svdhC
    指定ã•ã‚ŒãŸã‚‚ã®ä»¥å¤–ã® HTTP メソッドã«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’ 制é™ã™ã‚‹
    LimitInternalRecursion number [number] 10 svC
    内部リダイレクトã¨å…¥ã‚Œå­ã«ãªã£ãŸã‚µãƒ–リクエストã®æœ€å¤§æ•°ã‚’決定ã™ã‚‹
    LimitRequestBody bytes 0 svdhC
    クライアントã‹ã‚‰é€ã‚‰ã‚Œã‚‹ HTTP リクエストã®ãƒœãƒ‡ã‚£ã® +
    LimitInternalRecursion number [number] 10 svC
    内部リダイレクトã¨å…¥ã‚Œå­ã«ãªã£ãŸã‚µãƒ–リクエストã®æœ€å¤§æ•°ã‚’決定ã™ã‚‹
    LimitRequestBody bytes 0 svdhC
    クライアントã‹ã‚‰é€ã‚‰ã‚Œã‚‹ HTTP リクエストã®ãƒœãƒ‡ã‚£ã® ç·é‡ã‚’制é™ã™ã‚‹
    LimitRequestFields number 100 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ã‚’ +
    LimitRequestFields number 100 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ãƒ•ã‚£ãƒ¼ãƒ«ãƒ‰ã®æ•°ã‚’ 制é™ã™ã‚‹
    LimitRequestFieldSize bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã® +
    LimitRequestFieldSize bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエストã®ãƒ˜ãƒƒãƒ€ã® サイズを制é™ã™ã‚‹
    LimitRequestLine bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエスト行ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    LimitXMLRequestBody bytes 1000000 svdhC
    XML å½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    Listen [IP-address:]portnumber [protocol]sM
    サーãƒãŒ listen ã™ã‚‹IP アドレスã¨ãƒãƒ¼ãƒˆç•ªå·
    ListenBacklog backlogsM
    ä¿ç•™çŠ¶æ…‹ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã‚­ãƒ¥ãƒ¼ã®æœ€å¤§é•·
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    LimitRequestLine bytes 8190 sC
    クライアントã‹ã‚‰ã® HTTP リクエスト行ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    LimitXMLRequestBody bytes 1000000 svdhC
    XML å½¢å¼ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒœãƒ‡ã‚£ã®ã‚µã‚¤ã‚ºã‚’制é™ã™ã‚‹
    Listen [IP-address:]portnumber [protocol]sM
    サーãƒãŒ listen ã™ã‚‹IP アドレスã¨ãƒãƒ¼ãƒˆç•ªå·
    ListenBacklog backlogsM
    ä¿ç•™çŠ¶æ…‹ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®ã‚­ãƒ¥ãƒ¼ã®æœ€å¤§é•·
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    指定ã•ã‚ŒãŸã‚ªãƒ–ジェクトファイルやライブラリをリンクã™ã‚‹
    LoadModule module filenamesvE
    オブジェクトファイルやライブラリをリンクã—ã€ä½¿ç”¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® +
    LoadFile filename [filename] ...svE
    指定ã•ã‚ŒãŸã‚ªãƒ–ジェクトファイルやライブラリをリンクã™ã‚‹
    LoadModule module filenamesvE
    オブジェクトファイルやライブラリをリンクã—ã€ä½¿ç”¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® リストã«è¿½åŠ ã™ã‚‹
    <Location - URL-path|URL> ... </Location>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をマッãƒã™ã‚‹ URL ã®ã¿ã«é©ç”¨
    <LocationMatch - regex> ... </LocationMatch>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ URL ã®ã¿ã« +
    <Location + URL-path|URL> ... </Location>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–をマッãƒã™ã‚‹ URL ã®ã¿ã«é©ç”¨
    <LocationMatch + regex> ... </LocationMatch>svC
    囲んã ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æ­£è¦è¡¨ç¾ã«ãƒžãƒƒãƒã™ã‚‹ URL ã®ã¿ã« é©ç”¨
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    ログファイルã§ä½¿ç”¨ã™ã‚‹æ›¸å¼ã‚’設定ã™ã‚‹
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel level warn svC
    ErrorLog ã®å†—長性を制御ã™ã‚‹
    LogMessage message +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    ログファイルã§ä½¿ç”¨ã™ã‚‹æ›¸å¼ã‚’設定ã™ã‚‹
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel level warn svC
    ErrorLog ã®å†—長性を制御ã™ã‚‹
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    æŒç¶šçš„ãªæŽ¥ç¶šä¸Šã§è¨±å¯ã•ã‚Œã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°
    MaxMemFree KBytes 0 sM
    free() ãŒå‘¼ã°ã‚Œãªã„é™ã‚Šã€ +
    MaxKeepAliveRequests number 100 svC
    æŒç¶šçš„ãªæŽ¥ç¶šä¸Šã§è¨±å¯ã•ã‚Œã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®æ•°
    MaxMemFree KBytes 0 sM
    free() ãŒå‘¼ã°ã‚Œãªã„é™ã‚Šã€ 主メモリアロケータãŒä¿æŒã—続ã‘られるメモリã®æœ€å¤§é‡
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    アイドルãªå­ã‚µãƒ¼ãƒãƒ—ロセスã®æœ€å¤§å€‹æ•°
    MaxSpareThreads numbersM
    アイドルスレッドã®æœ€å¤§æ•°
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareServers number 10 sM
    アイドルãªå­ã‚µãƒ¼ãƒãƒ—ロセスã®æœ€å¤§å€‹æ•°
    MaxSpareThreads numbersM
    アイドルスレッドã®æœ€å¤§æ•°
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo -header [value] [early|env=[!]variable]svdhE
    HTTP ÀÀ´ä Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    HeaderName filenamesvdhB
    ÆÄÀϸñ·Ï À§¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] set|append|add|unset|echo +header [value] [early|env=[!]variable]svdhE
    HTTP ÀÀ´ä Çì´õ¸¦ ±¸¼ºÇÑ´Ù
    HeaderName filenamesvdhB
    ÆÄÀϸñ·Ï À§¿¡ »ðÀÔÇÒ ÆÄÀÏÀÇ À̸§
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    ¿ø°Ý »ç¿ëÀÚÀÇ RFC 1413 ½Å¿øÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    IdentityCheckTimeout seconds 30 svdE
    ident ¿äûÀÇ ½Ã°£Á¦ÇÑÀ» ÁöÁ¤ÇÑ´Ù
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    ¿ø°Ý »ç¿ëÀÚÀÇ RFC 1413 ½Å¿øÀ» ·Î±×¿¡ ±â·ÏÇÑ´Ù
    IdentityCheckTimeout seconds 30 svdE
    ident ¿äûÀÇ ½Ã°£Á¦ÇÑÀ» ÁöÁ¤ÇÑ´Ù
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... - </IfDefine>svdhC
    Encloses directives that will be processed only +
    <IfDefine [!]parameter-name> ... + </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... - </IfModule>svdhC
    Encloses directives that are processed conditional on the +
    <IfModule [!]module-file|module-identifier> ... + </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    ¹öÀüº° ¼³Á¤À» ¹­´Â´Ù
    ImapBase map|referer|URL http://servername/ svdhB
    À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ base ±âº»°ª
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    À̹ÌÁö¸Ê¿¡ ¾î´À ¿µ¿ª¿¡µµ ÇØ´çÇÏÁö ¾Ê´Â ÁÂÇ¥¸¦ ÁØ +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    ¹öÀüº° ¼³Á¤À» ¹­´Â´Ù
    ImapBase map|referer|URL http://servername/ svdhB
    À̹ÌÁö¸Ê ÆÄÀÏ¿¡¼­ base ±âº»°ª
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    À̹ÌÁö¸Ê¿¡ ¾î´À ¿µ¿ª¿¡µµ ÇØ´çÇÏÁö ¾Ê´Â ÁÂÇ¥¸¦ ÁØ °æ¿ì ±âº» Çൿ
    ImapMenu none|formatted|semiformatted|unformattedsvdhB
    ÁÂÇ¥¾øÀÌ À̹ÌÁö¸Ê ¿äû½Ã ÃëÇÒ Çൿ
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    ImapMenu none|formatted|semiformatted|unformattedsvdhB
    ÁÂÇ¥¾øÀÌ À̹ÌÁö¸Ê ¿äû½Ã ÃëÇÒ Çൿ
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ...svdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¼û±æ ÆÄÀϸñ·ÏÀ» Ãß°¡ÇÑ´Ù
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ...svdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡¼­ ¼û±æ ÆÄÀϸñ·ÏÀ» Ãß°¡ÇÑ´Ù
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ¿©·¯ ¼³Á¤µé
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ±âº» ¼ø¼­¸¦ ¼³Á¤ÇÑ´Ù
    IndexStyleSheet url-pathsvdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡ CSS ½ºÅ¸ÀϽ¬Æ®¸¦ Ãß°¡ÇÑ´Ù
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ¿©·¯ ¼³Á¤µé
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    µð·ºÅ丮 ¸ñ·ÏÀÇ ±âº» ¼ø¼­¸¦ ¼³Á¤ÇÑ´Ù
    IndexStyleSheet url-pathsvdhB
    µð·ºÅ丮 ¸ñ·Ï¿¡ CSS ½ºÅ¸ÀϽ¬Æ®¸¦ Ãß°¡ÇÑ´Ù
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ¿À·ù ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ISAPIAppendLogToQuery on|off on svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER +
    ISAPIAppendLogToQuery on|off on svdhB
    ISAPI exntensionÀÇ HSE_APPEND_LOG_PARAMETER ¿äûÀ» ÁúÀǹ®ÀÚ¿­¿¡ ±â·ÏÇÑ´Ù
    ISAPICacheFile file-path [file-path] -...svB
    ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¸Þ¸ð¸®·Î ÀоîµéÀÏ ISAPI .dll ÆÄÀϵé
    ISAPIFakeAsync on|off off svdhB
    ºñµ¿±â ISAPI ÄݹéÀ» Áö¿øÇϴ ôÇÑ´Ù
    ISAPILogNotSupported on|off off svdhB
    ISAPI extensionÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» ¿äûÇϸé +
    ISAPICacheFile file-path [file-path] +...svB
    ¼­¹ö°¡ ½ÃÀÛÇÒ¶§ ¸Þ¸ð¸®·Î ÀоîµéÀÏ ISAPI .dll ÆÄÀϵé
    ISAPIFakeAsync on|off off svdhB
    ºñµ¿±â ISAPI ÄݹéÀ» Áö¿øÇϴ ôÇÑ´Ù
    ISAPILogNotSupported on|off off svdhB
    ISAPI extensionÀÌ Áö¿øÇÏÁö ¾Ê´Â ±â´ÉÀ» ¿äûÇÏ¸é ·Î±×¿¡ ±â·ÏÇÑ´Ù
    ISAPIReadAheadBuffer size 49152 svdhB
    ISAPI extensionÀÇ ¹Ì¸®Àбâ¹öÆÛ(read ahead buffer) +
    ISAPIReadAheadBuffer size 49152 svdhB
    ISAPI extensionÀÇ ¹Ì¸®Àбâ¹öÆÛ(read ahead buffer) Å©±â
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent +
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... - </Limit>dhC
    Restrict enclosed access controls to only certain HTTP +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... + </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... - </LimitExcept>dhC
    Restrict access controls to all HTTP methods +
    <LimitExcept method [method] ... > ... + </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested +
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent +
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that +
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the +
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted +
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server +
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...sE
    ÁöÁ¤ÇÑ ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀδÙ
    LoadModule module filenamesE
    ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀÌ°í, »ç¿ë°¡´ÉÇÑ +
    LoadFile filename [filename] ...sE
    ÁöÁ¤ÇÑ ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀδÙ
    LoadModule module filenamesE
    ¸ñÀûÆÄÀÏÀ̳ª ¶óÀ̺귯¸®¸¦ ÀоîµéÀÌ°í, »ç¿ë°¡´ÉÇÑ ¸ðµâ ¸ñ·Ï¿¡ Ãß°¡ÇÑ´Ù
    <Location - URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching +
    <Location + URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch - regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression +
    <LocationMatch + regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    ·Î±×ÆÄÀÏ¿¡ »ç¿ëÇÒ Çü½ÄÀ» ±â¼úÇÑ´Ù
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    ·Î±×ÆÄÀÏ¿¡ »ç¿ëÇÒ Çü½ÄÀ» ±â¼úÇÑ´Ù
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... - warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message + warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent +
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed +
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHint name valueskdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off skE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 skE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 skE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on skE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on skE
    Determine buffering behaviour of output
    H2Padding numbits 0 skE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off skE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on skdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 skE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 skE
    H2 Server Push Priority
    H2PushResource [add] path [critical]skdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off skE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 skE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]skdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 skE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 skE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +skdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off skE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 skE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    H2MaxHeaderBlockLen n 0 skE
    Maximum size of response headers
    H2MaxSessionStreams n 100 skE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on skE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on skE
    Determine buffering behaviour of output
    H2Padding numbits 0 skE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off skE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on skdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 skE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 skE
    H2 Server Push Priority
    H2PushResource [add] path [critical]skdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off skE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 skE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]skdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 skE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 skE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +skdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off skE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 skE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] -skdhE
    Configure HTTP response headers
    HeaderName dosya-ismiskdhT
    Dizin listesinin tepesine yerleştirilecek dosyanın ismini +skdhE
    Configure HTTP response headers
    HeaderName dosya-ismiskdhT
    Dizin listesinin tepesine yerleştirilecek dosyanın ismini belirler.
    HeartbeatAddress addr:portsD
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsD
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sD
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsD
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsD
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sD
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sD
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sD
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off skdÇ
    İstemci IP adresleri üzerinde DNS sorgularını etkin kılar. -
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +skÇ
    HTTP İstek İletilerindeki sınırlamalarda değişiklik yapar
    IdentityCheck On|Off Off skdE
    Enables logging of the RFC 1413 identity of the remote +
    HeartbeatStorage file-path logs/hb.dat sD
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sD
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off skdÇ
    İstemci IP adresleri üzerinde DNS sorgularını etkin kılar. +
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +skÇ
    HTTP İstek İletilerindeki sınırlamalarda değişiklik yapar
    IdentityCheck On|Off Off skdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 skdE
    Determines the timeout duration for ident requests
    <If ifade> ... </If>skdhÇ
    Çalışma anında bir koşul bir istek tarafından yerine getirildiği +
    IdentityCheckTimeout seconds 30 skdE
    Determines the timeout duration for ident requests
    <If ifade> ... </If>skdhÇ
    Çalışma anında bir koşul bir istek tarafından yerine getirildiği takdirde uygulanacak yönergeleri barındırır.
    <IfDefine [!]parametre-adı> ... - </IfDefine>skdhÇ
    Başlatma sırasında bir doğruluk sınamasından sonra işleme +
    <IfDefine [!]parametre-adı> ... + </IfDefine>skdhÇ
    Başlatma sırasında bir doğruluk sınamasından sonra işleme sokulacak yönergeleri sarmalar.
    <IfDirective [!]yönerge-adı> ... - </IfDirective>skdhÇ
    Belirtilen yönerge adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfFile [!]dosyaadı> ... - </IfFile>skdhÇ
    Başlatma sırasında bir dosyanın varlığı durumunda işleme +
    <IfDirective [!]yönerge-adı> ... + </IfDirective>skdhÇ
    Belirtilen yönerge adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfFile [!]dosyaadı> ... + </IfFile>skdhÇ
    Başlatma sırasında bir dosyanın varlığı durumunda işleme sokulacak yönergeleri sarmalar.
    <IfModule [!]modül-dosyası|modül-betimleyici> ... - </IfModule>skdhÇ
    Belli bir modülün varlığına veya yokluğuna göre işleme sokulacak +
    <IfModule [!]modül-dosyası|modül-betimleyici> ... + </IfModule>skdhÇ
    Belli bir modülün varlığına veya yokluğuna göre işleme sokulacak yönergeleri sarmalar.
    <IfSection [!]bölüm-adı> ... - </IfSection>skdhÇ
    Belirtilen bölüm adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfVersion [[!]operator] version> ... -</IfVersion>skdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ skdhT
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent skdhT
    Default action when an imagemap is called with coordinates +
    <IfSection [!]bölüm-adı> ... + </IfSection>skdhÇ
    Belirtilen bölüm adının varlığı veya yokluğuna bağlı olarak çalıştırılacak yönergeleri sarmalar.
    <IfVersion [[!]operator] version> ... +</IfVersion>skdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ skdhT
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent skdhT
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted skdhT
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted skdhT
    Action if no coordinates are given when calling an imagemap
    Include dosya-yolu|dizin-yolu|jokerskdÇ
    Sunucu yapılandırma dosyalarının başka dosyaları içermesini sağlar. +
    Include dosya-yolu|dizin-yolu|jokerskdÇ
    Sunucu yapılandırma dosyalarının başka dosyaları içermesini sağlar.
    IncludeOptional dosya-yolu|dizin-yolu|jokerskdÇ
    Diğer yapılandırma dosyalarının sunucu yapılandırma dosyasına dahil edilmesini sağlar
    IndexHeadInsert "imlenim ..."skdhT
    Bir dizin sayfasının HEAD bölümüne metin yerleştirir.
    IndexIgnore dosya [dosya] ... "." skdhT
    Dizin içerik listesinden gizlenecek dosyaların listesi belirtilir. +
    IncludeOptional dosya-yolu|dizin-yolu|jokerskdÇ
    Diğer yapılandırma dosyalarının sunucu yapılandırma dosyasına dahil edilmesini sağlar
    IndexHeadInsert "imlenim ..."skdhT
    Bir dizin sayfasının HEAD bölümüne metin yerleştirir.
    IndexIgnore dosya [dosya] ... "." skdhT
    Dizin içerik listesinden gizlenecek dosyaların listesi belirtilir.
    IndexIgnoreReset ON|OFFskdhT
    Bir dizini listelerken gizlenecek dosyalar listesini boşaltır +
    IndexIgnoreReset ON|OFFskdhT
    Bir dizini listelerken gizlenecek dosyalar listesini boşaltır
    IndexOptions [+|-]seçenek [[+|-]seçenek] -...skdhT
    Dizin içerik listesini yapılandıracak seçenekler belirtilir. +
    IndexOptions [+|-]seçenek [[+|-]seçenek] +...skdhT
    Dizin içerik listesini yapılandıracak seçenekler belirtilir.
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name skdhT
    Dizin içerik listesinin öntanımlı sıralamasını belirler. +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name skdhT
    Dizin içerik listesinin öntanımlı sıralamasını belirler.
    IndexStyleSheet url-yoluskdhT
    Dizin listesine bir biçembent ekler.
    InputSed sed-commanddhD
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexStyleSheet url-yoluskdhT
    Dizin listesine bir biçembent ekler.
    InputSed sed-commanddhD
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on skdhT
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...skT
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off skdhT
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off skdhT
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...skT
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off skdhT
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off skdhT
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 skdhT
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 skdhT
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On skÇ
    HTTP kalıcı bağlantılarını etkin kılar
    KeepAliveTimeout sayı[ms] 5 skÇ
    Bir kalıcı bağlantıda sunucunun bir sonraki isteği bekleme süresi +
    KeepAlive On|Off On skÇ
    HTTP kalıcı bağlantılarını etkin kılar
    KeepAliveTimeout sayı[ms] 5 skÇ
    Bir kalıcı bağlantıda sunucunun bir sonraki isteği bekleme süresi
    KeptBodySize azami_bayt_sayısı 0 dT
    mod_include gibi süzgeçler tarafından kullanılma olasılığına karşı +
    KeptBodySize azami_bayt_sayısı 0 dT
    mod_include gibi süzgeçler tarafından kullanılma olasılığına karşı istek gövdesi iptal edilmek yerine belirtilen azami boyutta tutulur.
    LanguagePriority MIME-lang [MIME-lang] -...skdhT
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...skdhT
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 skE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 skE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typeskE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit yöntem [yöntem] ... > ... - </Limit>dhÇ
    Erişimi sınırlanacak HTTP yöntemleri için erişim sınırlayıcıları +
    LDAPTrustedMode typeskE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit yöntem [yöntem] ... > ... + </Limit>dhÇ
    Erişimi sınırlanacak HTTP yöntemleri için erişim sınırlayıcıları sarmalar.
    <LimitExcept yöntem [yöntem] ... > ... - </LimitExcept>dhÇ
    İsimleri belirtilenler dışında kalan HTTP yöntemleri için +
    <LimitExcept yöntem [yöntem] ... > ... + </LimitExcept>dhÇ
    İsimleri belirtilenler dışında kalan HTTP yöntemleri için kullanılacak erişim sınırlayıcıları sarmalar.
    LimitInternalRecursion sayı [sayı] 10 skÇ
    Dahili yönlendirmelerin ve istek içi isteklerin azami sayısını +
    LimitInternalRecursion sayı [sayı] 10 skÇ
    Dahili yönlendirmelerin ve istek içi isteklerin azami sayısını belirler.
    LimitRequestBody bayt-sayısı 1073741824 skdhÇ
    İstemci tarafından gönderilen HTTP istek gövdesinin toplam +
    LimitRequestBody bayt-sayısı 1073741824 skdhÇ
    İstemci tarafından gönderilen HTTP istek gövdesinin toplam uzunluğunu sınırlar.
    LimitRequestFields sayı 100 skÇ
    İstemciden kabul edilecek HTTP isteği başlık alanlarının sayısını +
    LimitRequestFields sayı 100 skÇ
    İstemciden kabul edilecek HTTP isteği başlık alanlarının sayısını sınırlar.
    LimitRequestFieldSize bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP isteği başlık uzunluğunu sınırlar. +
    LimitRequestFieldSize bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP isteği başlık uzunluğunu sınırlar.
    LimitRequestLine bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP istek satırının uzunluğunu sınırlar. +
    LimitRequestLine bayt-sayısı 8190 skÇ
    İstemciden kabul edilecek HTTP istek satırının uzunluğunu sınırlar.
    LimitXMLRequestBody bayt-sayısı 1000000 skdhÇ
    Bir XML temelli istek gövdesinin uzunluğunu sınırlar.
    Listen [IP-adresi:]port-numarası - [protokol]sM
    Sunucunun dinleyeceÄŸi IP adresini ve portu belirler.
    ListenBackLog kuyruk-uzunluÄŸu 511 sM
    Bekleyen bağlantılar kuyruğunun azami uzunluğunu +
    LimitXMLRequestBody bayt-sayısı 1000000 skdhÇ
    Bir XML temelli istek gövdesinin uzunluğunu sınırlar.
    Listen [IP-adresi:]port-numarası + [protokol]sM
    Sunucunun dinleyeceÄŸi IP adresini ve portu belirler.
    ListenBackLog kuyruk-uzunluÄŸu 511 sM
    Bekleyen bağlantılar kuyruğunun azami uzunluğunu belirler
    ListenCoresBucketsRatio oran 0 (iptal) sM
    İşlemci çekirdek sayısının dinleyenlerin buket sayısına oranı
    LoadFile dosya-ismi [dosya-ismi] ...skE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler. +
    ListenCoresBucketsRatio oran 0 (iptal) sM
    İşlemci çekirdek sayısının dinleyenlerin buket sayısına oranı
    LoadFile dosya-ismi [dosya-ismi] ...skE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler.
    LoadModule modül dosya-ismiskE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler +
    LoadModule modül dosya-ismiskE
    Belirtilen nesne dosyasını veya kütüphaneyi sunucu ile ilintiler ve etkin modül listesine ekler.
    <Location URL-yolu|URL> ... -</Location>skÇ
    İçerdiği yönergeler sadece eşleşen URL’lere uygulanır. +
    <Location URL-yolu|URL> ... +</Location>skÇ
    İçerdiği yönergeler sadece eşleşen URL’lere uygulanır.
    <LocationMatch - düzifade> ... </LocationMatch>skÇ
    İçerdiği yönergeler sadece düzenli ifadelerle eşleşen URL’lere +
    <LocationMatch + düzifade> ... </LocationMatch>skÇ
    İçerdiği yönergeler sadece düzenli ifadelerle eşleşen URL’lere uygulanır.
    LogFormat biçem|takma-ad -[takma-ad] "%h %l %u %t \"%r\" +skT
    Bir günlük dosyasında kullanılmak üzere girdi biçemi tanımlar. +
    LogFormat biçem|takma-ad +[takma-ad] "%h %l %u %t \"%r\" +skT
    Bir günlük dosyasında kullanılmak üzere girdi biçemi tanımlar.
    LogIOTrackTTFB ON|OFF OFF skdhE
    İlk baytın yazılmasına kadar geçen süreyi izler
    LogLevel [modül:]seviye +
    LogIOTrackTTFB ON|OFF OFF skdhE
    İlk baytın yazılmasına kadar geçen süreyi izler
    LogLevel [modül:]seviye [modül:seviye] ... - warn skdÇ
    Hata günlüklerinin ayrıntı seviyesini belirler.
    LogMessage message + warn skdÇ
    Hata günlüklerinin ayrıntı seviyesini belirler.
    LogMessage message [hook=hook] [expr=expression] -dD
    Log user-defined message to error log +dD
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat skdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat skdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]skdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_nameskdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_nameskdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]skE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first skdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]skdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soaskdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luaskdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_nameskE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directoryskdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once skdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]skE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_nameskdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first skdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]skdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soaskdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luaskdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_nameskE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directoryskdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once skdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>skdT
    Define a configuration file macro
    MaxConnectionsPerChild sayı 0 sM
    Tek bir çocuk sürecin ömrü boyunca işleme sokabileceği istek +... </Macro>skdT
    Define a configuration file macro
    MaxConnectionsPerChild sayı 0 sM
    Tek bir çocuk sürecin ömrü boyunca işleme sokabileceği istek sayısını sınırlamakta kullanılır.
    MaxKeepAliveRequests sayı 100 skÇ
    Bir kalıcı bağlantıda izin verilen istek sayısı
    MaxMemFree kB-sayısı 2048 sM
    free() çağrılmaksızın ana bellek ayırıcının +
    MaxKeepAliveRequests sayı 100 skÇ
    Bir kalıcı bağlantıda izin verilen istek sayısı
    MaxMemFree kB-sayısı 2048 sM
    free() çağrılmaksızın ana bellek ayırıcının ayırmasına izin verilen azami bellek miktarını belirler.
    MaxRangeOverlaps default | unlimited | none | - aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen üst üste binen +
    MaxRangeOverlaps default | unlimited | none | + aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen üst üste binen aralık sayısı (100-200,150-300 gibi)
    MaxRangeReversals default | unlimited | none | - aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen ters sıralı +
    MaxRangeReversals default | unlimited | none | + aralık-sayısı 20 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen ters sıralı aralık sayısı (100-200,50-70 gibi)
    MaxRanges default | unlimited | none | - aralık-sayısı 200 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen aralık sayısı
    MaxRequestWorkers sayısM
    Aynı anda işleme sokulacak azami bağlantı sayısı
    MaxSpareServers sayı 10 sM
    Boştaki çocuk süreçlerin azami sayısı
    MaxSpareThreads numbersM
    Boştaki azami evre sayısını belirler
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsD
    How long to delay activation of new certificates
    MDBaseServer on|off off sD
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sD
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsD
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxRanges default | unlimited | none | + aralık-sayısı 200 skdÇ
    Özkaynağın tamamını döndürmeden önce izin verilen aralık sayısı
    MaxRequestWorkers sayısM
    Aynı anda işleme sokulacak azami bağlantı sayısı
    MaxSpareServers sayı 10 sM
    Boştaki çocuk süreçlerin azami sayısı
    MaxSpareThreads numbersM
    Boştaki azami evre sayısını belirler
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsD
    How long to delay activation of new certificates
    MDBaseServer on|off off sD
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sD
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsD
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sD
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsD
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesD
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesD
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sD
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sD
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sD
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsD
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sD
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sD
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsD
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesD
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesD
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sD
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sD
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sD
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsD
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sD
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sD
    Determines how often certificates are checked
    MDContactEmail addresssD
    Email address used for account registration
    MDDriveMode always|auto|manual auto sD
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sD
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sD
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sD
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sD
    Set type and size of the private keys generated.
    MDProfile namesD
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sD
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sD
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sD
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sD
    Redirects http: traffic to https: for Managed Domains.
    H2EarlyHint name valuesvdhE
    Add a response header to be picked up in 103 Early Hints
    H2EarlyHints on|off off svE
    Determine sending of 103 status codes
    H2MaxDataFrameLen n 0 svE
    Maximum bytes inside a single HTTP/2 DATA frame
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note +
    H2MaxHeaderBlockLen n 0 svE
    Maximum size of response headers
    H2MaxSessionStreams n 100 svE
    Maximum number of active streams per HTTP/2 session.
    H2MaxWorkerIdleSeconds n 600 sE
    Maximum number of seconds h2 workers remain idle until shut down.
    H2MaxWorkers nsE
    Maximum number of worker threads to use per child process.
    H2MinWorkers nsE
    Minimal number of worker threads to use per child process.
    H2ModernTLSOnly on|off on svE
    Require HTTP/2 connections to be "modern TLS" only
    H2OutputBuffering on|off on svE
    Determine buffering behaviour of output
    H2Padding numbits 0 svE
    Determine the range of padding bytes added to payload frames
    H2ProxyRequests on|off off svE
    En-/Disable forward proxy requests via HTTP/2
    H2Push on|off on svdhE
    H2 Server Push Switch
    H2PushDiarySize n 256 svE
    H2 Server Push Diary Size
    H2PushPriority mime-type [after|before|interleaved] [weight] * After 16 svE
    H2 Server Push Priority
    H2PushResource [add] path [critical]svdhE
    Declares resources for early pushing to the client
    H2SerializeHeaders on|off off svE
    Serialize Request/Response Processing Switch
    H2StreamMaxMemSize bytes 65536 svE
    Maximum amount of output data buffered per stream.
    H2StreamTimeout time-interval[s]svdE
    Maximum time waiting when sending/receiving data to stream processing
    H2TLSCoolDownSecs seconds 1 svE
    Configure the number of seconds of idle time on TLS before shrinking writes
    H2TLSWarmUpSize amount 1048576 svE
    Configure the number of bytes on TLS connection before doing max writes
    H2Upgrade on|off on for h2c, off for +svdhE
    H2 Upgrade Protocol Switch
    H2WebSockets on|off off svE
    En-/Disable WebSockets via HTTP/2
    H2WindowSize bytes 65535 svE
    Size of Stream Window for upstream data.
    Header [condition] add|append|echo|edit|edit*|merge|set|setifempty|unset|note header [[expr=]value [replacement] [early|env=[!]varname|expr=expression]] -svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top +svdhE
    Configure HTTP response headers
    HeaderName filenamesvdhB
    Name of the file that will be inserted at the top of the index listing
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending +
    HeartbeatAddress addr:portsX
    Multicast address for heartbeat packets
    HeartbeatListen addr:portsX
    multicast address to listen for incoming heartbeat requests
    HeartbeatMaxServers number-of-servers 10 sX
    Specifies the maximum number of servers that will be sending heartbeat requests to this server
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] - [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote +
    HeartbeatStorage file-path logs/hb.dat sX
    Path to store heartbeat data when using flat-file storage
    HeartbeatStorage file-path logs/hb.dat sX
    Path to read heartbeat data
    HostnameLookups On|Off|Double Off svdC
    Enables DNS lookups on client IP addresses
    HttpProtocolOptions [Strict|Unsafe] [RegisteredMethods|LenientMethods] + [Allow0.9|Require1.0] Strict LenientMetho +svC
    Modify restrictions on HTTP Request Messages
    IdentityCheck On|Off Off svdE
    Enables logging of the RFC 1413 identity of the remote user
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is +
    IdentityCheckTimeout seconds 30 svdE
    Determines the timeout duration for ident requests
    <If expression> ... </If>svdhC
    Contains directives that apply only if a condition is satisfied by a request at runtime
    <IfDefine [!]parameter-name> ... - </IfDefine>svdhC
    Encloses directives that will be processed only +
    <IfDefine [!]parameter-name> ... + </IfDefine>svdhC
    Encloses directives that will be processed only if a test is true at startup
    <IfDirective [!]directive-name> ... - </IfDirective>svdhC
    Encloses directives that are processed conditional on the +
    <IfDirective [!]directive-name> ... + </IfDirective>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific directive
    <IfFile [!]filename> ... - </IfFile>svdhC
    Encloses directives that will be processed only +
    <IfFile [!]filename> ... + </IfFile>svdhC
    Encloses directives that will be processed only if file exists at startup
    <IfModule [!]module-file|module-identifier> ... - </IfModule>svdhC
    Encloses directives that are processed conditional on the +
    <IfModule [!]module-file|module-identifier> ... + </IfModule>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific module
    <IfSection [!]section-name> ... - </IfSection>svdhC
    Encloses directives that are processed conditional on the +
    <IfSection [!]section-name> ... + </IfSection>svdhC
    Encloses directives that are processed conditional on the presence or absence of a specific section directive
    <IfVersion [[!]operator] version> ... -</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates +
    <IfVersion [[!]operator] version> ... +</IfVersion>svdhE
    contains version dependent configuration
    ImapBase map|referer|URL http://servername/ svdhB
    Default base for imagemap files
    ImapDefault error|nocontent|map|referer|URL nocontent svdhB
    Default action when an imagemap is called with coordinates that are not explicitly mapped
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling +
    ImapMenu none|formatted|semiformatted|unformatted formatted svdhB
    Action if no coordinates are given when calling an imagemap
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    Include file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within +
    IncludeOptional file-path|directory-path|wildcardsvdC
    Includes other configuration files from within the server configuration files
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing +
    IndexHeadInsert "markup ..."svdhB
    Inserts text in the HEAD section of an index page.
    IndexIgnore file [file] ... "." svdhB
    Adds to the list of files to hide when listing a directory
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing +
    IndexIgnoreReset ON|OFFsvdhB
    Empties the list of files to hide when listing a directory
    IndexOptions [+|-]option [[+|-]option] -...svdhB
    Various configuration settings for directory +
    IndexOptions [+|-]option [[+|-]option] +...svdhB
    Various configuration settings for directory indexing
    IndexOrderDefault Ascending|Descending -Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    IndexOrderDefault Ascending|Descending +Name|Date|Size|Description Ascending Name svdhB
    Sets the default ordering of the directory index
    IndexStyleSheet url-pathsvdhB
    Adds a CSS stylesheet to the directory index
    InputSed sed-commanddhX
    Sed command to filter request data (typically POST data)
    ISAPIAppendLogToErrors on|off off svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from +
    ISAPIAppendLogToQuery on|off on svdhB
    Record HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field
    ISAPICacheFile file-path [file-path] -...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI +
    ISAPICacheFile file-path [file-path] +...svB
    ISAPI .dll files to be loaded at startup
    ISAPIFakeAsync on|off off svdhB
    Fake asynchronous support for ISAPI callbacks
    ISAPILogNotSupported on|off off svdhB
    Log unsupported feature requests from ISAPI extensions
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI +
    ISAPIReadAheadBuffer size 49152 svdhB
    Size of the Read Ahead Buffer sent to ISAPI extensions
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent +
    KeepAlive On|Off On svC
    Enables HTTP persistent connections
    KeepAliveTimeout num[ms] 5 svC
    Amount of time the server will wait for subsequent requests on a persistent connection
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to +
    KeptBodySize maximum size in bytes 0 dB
    Keep the request body instead of discarding it up to the specified maximum size, for potential use by filters such as mod_include.
    LanguagePriority MIME-lang [MIME-lang] -...svdhB
    The precedence of language variants for cases where +
    LanguagePriority MIME-lang [MIME-lang] +...svdhB
    The precedence of language variants for cases where the client does not express a preference
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare +
    LDAPCacheEntries number 1024 sE
    Maximum number of entries in the primary LDAP cache
    LDAPCacheTTL seconds 600 sE
    Time that cached items remain valid
    LDAPConnectionPoolTTL n -1 svE
    Discard backend connections that have been sitting in the connection pool too long
    LDAPConnectionTimeout secondssE
    Specifies the socket connection timeout in seconds
    LDAPLibraryDebug 7sE
    Enable debugging in the LDAP SDK
    LDAPOpCacheEntries number 1024 sE
    Number of entries used to cache LDAP compare operations
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain +
    LDAPOpCacheTTL seconds 600 sE
    Time that entries in the operation cache remain valid
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per +
    LDAPReferralHopLimit numberdhE
    The maximum number of referral hops to chase before terminating an LDAP query.
    LDAPReferrals On|Off|default On dhE
    Enable referral chasing during queries to the LDAP server.
    LDAPRetries number-of-retries 3 sE
    Configures the number of LDAP server retries.
    LDAPRetryDelay seconds 0 sE
    Configures the delay between LDAP server retries.
    LDAPSharedCacheFile directory-path/filenamesE
    Sets the shared memory cache file
    LDAPSharedCacheSize bytes 500000 sE
    Size in bytes of the shared-memory cache
    LDAPTimeout seconds 60 sE
    Specifies the timeout for LDAP search and bind operations, in seconds
    LDAPTrustedClientCert type directory-path/filename/nickname [password]dhE
    Sets the file containing or nickname referring to a per connection client certificate. Not all LDAP toolkits support per connection client certificates.
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted +
    LDAPTrustedGlobalCert type directory-path/filename [password]sE
    Sets the file or database containing global trusted Certificate Authority or global client certificates
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... - </Limit>dhC
    Restrict enclosed access controls to only certain HTTP +
    LDAPTrustedMode typesvE
    Specifies the SSL/TLS mode to be used when connecting to an LDAP server.
    LDAPVerifyServerCert On|Off On sE
    Force server certificate verification
    <Limit method [method] ... > ... + </Limit>dhC
    Restrict enclosed access controls to only certain HTTP methods
    <LimitExcept method [method] ... > ... - </LimitExcept>dhC
    Restrict access controls to all HTTP methods +
    <LimitExcept method [method] ... > ... + </LimitExcept>dhC
    Restrict access controls to all HTTP methods except the named ones
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested +
    LimitInternalRecursion number [number] 10 svC
    Determine maximum number of internal redirects and nested subrequests
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent +
    LimitRequestBody bytes 1073741824 svdhC
    Restricts the total size of the HTTP request body sent from the client
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that +
    LimitRequestFields number 100 svC
    Limits the number of HTTP request header fields that will be accepted from the client
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the +
    LimitRequestFieldSize bytes 8190 svC
    Limits the size of the HTTP request header allowed from the client
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted +
    LimitRequestLine bytes 8190 svC
    Limit the size of the HTTP request line that will be accepted from the client
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server +
    LimitXMLRequestBody bytes 1000000 svdhC
    Limits the size of an XML-based request body
    Listen [IP-address:]portnumber [protocol]sM
    IP addresses and ports that the server listens to
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of +
    ListenBackLog backlog 511 sM
    Maximum length of the queue of pending connections
    ListenCoresBucketsRatio ratio 0 (disabled) sM
    Ratio between the number of CPU cores (online) and the number of listeners' buckets
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list +
    LoadFile filename [filename] ...svE
    Link in the named object file or library
    LoadModule module filenamesvE
    Links in the object file or library, and adds to the list of active modules
    <Location - URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching +
    <Location + URL-path|URL> ... </Location>svC
    Applies the enclosed directives only to matching URLs
    <LocationMatch - regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression +
    <LocationMatch + regex> ... </LocationMatch>svC
    Applies the enclosed directives only to regular-expression matching URLs
    LogFormat format|nickname -[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level +
    LogFormat format|nickname +[nickname] "%h %l %u %t \"%r\" +svB
    Describes a format for use in a log file
    LogIOTrackTTFB ON|OFF OFF svdhE
    Enable tracking of time to first byte (TTFB)
    LogLevel [module:]level [module:level] ... - warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message + warn svdC
    Controls the verbosity of the ErrorLog
    LogMessage message [hook=hook] [expr=expression] -dX
    Log user-defined message to error log +dX
    Log user-defined message to error log
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core +
    LuaAuthzProvider provider_name /path/to/lua/script.lua function_namesE
    Plug an authorization provider function into mod_authz_core
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request +
    LuaCodeCache stat|forever|never stat svdhE
    Configure the compiled code cache.
    LuaHookAccessChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the access_checker phase of request processing
    LuaHookAuthChecker /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the auth_checker phase of request processing
    LuaHookCheckUserID /path/to/lua/script.lua hook_function_name [early|late]svdhE
    Provide a hook for the check_user_id phase of request processing
    LuaHookFixups /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the fixups phase of a request processing
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request +
    LuaHookInsertFilter /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the insert_filter phase of request processing
    LuaHookLog /path/to/lua/script.lua log_function_namesvdhE
    Provide a hook for the access log phase of a request processing
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request +
    LuaHookMapToStorage /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the map_to_storage phase of request processing
    LuaHookPreTranslate /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the pre_translate phase of a request processing
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    +
    LuaHookTranslateName /path/to/lua/script.lua hook_function_name [early|late]svE
    Provide a hook for the translate name phase of request processing
    LuaHookTypeChecker /path/to/lua/script.lua hook_function_namesvdhE
    Provide a hook for the type_checker phase of request processing
    LuaInherit none|parent-first|parent-last parent-first svdhE
    Controls how parent configuration sections are merged into children
    LuaInputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content input filtering
    LuaMapHandler uri-pattern /path/to/lua/script.lua [function-name]svdhE
    Map a path to a lua handler
    LuaOutputFilter filter_name /path/to/lua/script.lua function_namesE
    Provide a Lua function for content output filtering
    LuaPackageCPath /path/to/include/?.soasvdhE
    Add a directory to lua's package.cpath
    LuaPackagePath /path/to/include/?.luasvdhE
    Add a directory to lua's package.path
    LuaQuickHandler /path/to/script.lua hook_function_namesvE
    Provide a hook for the quick handler of request processing
    LuaRoot /path/to/a/directorysvdhE
    Specify the base path for resolving relative paths for mod_lua directives
    LuaScope once|request|conn|thread|server [min] [max] once svdhE
    One of once, request, conn, thread -- default is once
    <Macro name [par1 .. parN]> -... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server +... </Macro>svdB
    Define a configuration file macro
    MaxConnectionsPerChild number 0 sM
    Limit on the number of connections that an individual child server will handle during its life
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent +
    MaxKeepAliveRequests number 100 svC
    Number of requests allowed on a persistent connection
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed +
    MaxMemFree KBytes 2048 sM
    Maximum amount of memory that the main allocator is allowed to hold without calling free()
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete +
    MaxRangeOverlaps default | unlimited | none | number-of-ranges 20 svdC
    Number of overlapping ranges (eg: 100-200,150-300) allowed before returning the complete resource
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete +
    MaxRangeReversals default | unlimited | none | number-of-ranges 20 svdC
    Number of range reversals (eg: 100-200,50-70) allowed before returning the complete resource
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete +
    MaxRanges default | unlimited | none | number-of-ranges 200 svdC
    Number of ranges allowed before returning the complete resource
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed +
    MaxRequestWorkers numbersM
    Maximum number of connections that will be processed simultaneously
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate +
    MaxSpareServers number 10 sM
    Maximum number of idle child server processes
    MaxSpareThreads numbersM
    Maximum number of idle threads
    MaxThreads number 2048 sM
    Set the maximum number of worker threads
    MDActivationDelay durationsX
    How long to delay activation of new certificates
    MDBaseServer on|off off sX
    Control if base server may be managed or only virtual hosts.
    MDCAChallenges name [ name ... ] tls-alpn-01 http-01 +sX
    Type of ACME challenge used to prove domain ownership.
    MDCertificateAgreement acceptedsX
    You confirm that you accepted the Terms of Service of the Certificate Authority.
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCertificateAuthority url letsencrypt sX
    The URL(s) of the ACME Certificate Authority to use.
    MDCertificateCheck name urlsX
    Set name and URL pattern for a certificate monitoring site.
    MDCertificateFile path-to-pem-filesX
    Specify a static certificate file for the MD.
    MDCertificateKeyFile path-to-filesX
    Specify a static private key for for the static cerrtificate.
    MDCertificateMonitor name url crt.sh https://crt. +sX
    The URL of a certificate log monitor.
    MDCertificateProtocol protocol ACME sX
    The protocol to use with the Certificate Authority.
    MDCertificateStatus on|off on sX
    Exposes public certificate information in JSON.
    MDChallengeDns01 path-to-commandsX
    Set the command for setup/teardown of dns-01 challenges
    MDChallengeDns01Version 1|2 1 sX
    Set the type of arguments to call MDChallengeDns01 with
    MDCheckInterval duration 12h sX
    Determines how often certificates are checked
    MDContactEmail addresssX
    Email address used for account registration
    MDDriveMode always|auto|manual auto sX
    former name of MDRenewMode.
    MDExternalAccountBinding key-id hmac-64 | none | file none sX
    Set the external account binding keyid and hmac values to use at CA
    <MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet>sX
    Container for directives applied to the same managed domains.
    MDPortMap map1 [ map2 ] http:80 https:443 sX
    Map external to internal ports for domain ownership verification.
    MDPrivateKeys type [ params... ] RSA 2048 sX
    Set type and size of the private keys generated.
    MDProfile namesX
    Use a specific ACME profile from the CA
    MDProfileMandatory on|off off sX
    Control if an MDProfile is mandatory.
    MDRenewMode always|auto|manual auto sX
    Controls if certificates shall be renewed.
    MDRenewWindow duration 33% sX
    Control when a certificate will be renewed.
    MDRequireHttps off|temporary|permanent off sX
    Redirects http: traffic to https: for Managed Domains.